last executing test programs: 4m16.569975059s ago: executing program 2 (id=8305): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[0x0, &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000066001fff00000000", @ANYRES64], 0x40}}, 0x4000800) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd"], 0x1c}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x8}, {0x4, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2}, {0xcb29, 0x6, 0x20053e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x0, 0x6c}, 0x2, @in6=@remote, 0x1502, 0x4, 0x0, 0x0, 0x0, 0x6}}, 0xe4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) 4m7.591823119s ago: executing program 2 (id=8321): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r2 = fsopen(&(0x7f0000000080)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) dup3(r2, r3, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xfffffffffffffeea) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r11, 0xc0684113, &(0x7f0000000380)={0x1, 0x5, 0x0, 0x1003, 0x8000, 0x0, 0xff, 0x5, 0x0, 0x6, 0x800001}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r12 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r12, 0x6a, 0x3, 0x0, &(0x7f0000000180)) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r11, 0xc06c4124, &(0x7f00000002c0)) 4m3.958524311s ago: executing program 2 (id=8328): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[0x0, &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000066001fff00000000", @ANYRES64], 0x40}}, 0x4000800) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a14"], 0x1c}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x8}, {0x4, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2}, {0xcb29, 0x6, 0x20053e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x0, 0x6c}, 0x2, @in6=@remote, 0x1502, 0x4, 0x0, 0x0, 0x0, 0x6}}, 0xe4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) 3m56.276542458s ago: executing program 2 (id=8338): syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) ptrace(0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000001100)={0x11, 0x3, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = dup2(r3, r2) sendmmsg$unix(r5, &(0x7f0000008380), 0x0, 0x4008890) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb48, 0x6, 0x2, 0x0, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r7 = socket(0xa, 0x1, 0x0) ioctl(r7, 0x8916, &(0x7f0000000240)) writev(r6, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r8, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)}) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r9 = memfd_create(0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r10, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r10, 0x84, 0x20, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r9, 0x0) 3m51.425403739s ago: executing program 2 (id=8348): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000002c0), 0x6, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) r2 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x8000, 0x8000, 'none\x00', 0x10, 0x2}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1, 0x1, 0x3, 0x7f, 0x8, 0xfffffffe, 0x4}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e20, 0x0, @loopback}}, 0x6, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000001c0)=0x9c) socket(0x10, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r6, &(0x7f0000000240)=[{0xe, 0x81, 0x0, 0xfd, @tick=0x1, {0x10, 0x49}, {0xe}, @result={0x6, 0x5}}], 0x1c) 3m50.168951539s ago: executing program 2 (id=8349): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[0x0, &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000066001fff00000000", @ANYRES64], 0x40}}, 0x4000800) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) 3m34.20329381s ago: executing program 32 (id=8349): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[0x0, &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000066001fff00000000", @ANYRES64], 0x40}}, 0x4000800) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) 20.931859828s ago: executing program 1 (id=8762): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r2 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r2, 0xffffffffffffffff, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64=r8, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 19.49672026s ago: executing program 1 (id=8763): userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r3 = openat$vimc2(0xffffff9c, &(0x7f0000005cc0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000005e00)={0x5, 0x7, 0x78ba96cc09fd2886, {0xc, @pix_mp={0x3, 0x1, 0x30324c4a, 0x3, 0x4, [{0xfffffffd, 0x5}, {0x2, 0x7fffffff}, {0x400081, 0x1}, {0x1, 0x2}, {0x6, 0x4}, {0x1, 0x1}, {0x3, 0xe90f}, {0x3ad7, 0x5}], 0x0, 0xf, 0x6, 0x1, 0x4}}, 0x80000001}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_emit_ethernet(0x10b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 17.030850698s ago: executing program 1 (id=8766): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r2 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r2, 0xffffffffffffffff, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64=r8, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 16.090479454s ago: executing program 1 (id=8768): userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket(0x28, 0x2, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r3 = openat$vimc2(0xffffff9c, &(0x7f0000005cc0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000005e00)={0x5, 0x7, 0x78ba96cc09fd2886, {0xc, @pix_mp={0x3, 0x1, 0x30324c4a, 0x3, 0x4, [{0xfffffffd, 0x5}, {0x2, 0x7fffffff}, {0x400081, 0x1}, {0x1, 0x2}, {0x6, 0x4}, {0x1, 0x1}, {0x3, 0xe90f}, {0x3ad7, 0x5}], 0x0, 0xf, 0x6, 0x1, 0x4}}, 0x80000001}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_emit_ethernet(0x10b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 13.976160523s ago: executing program 1 (id=8770): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r2 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r2, 0xffffffffffffffff, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64=r8, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 12.908539648s ago: executing program 5 (id=8773): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r2 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r2, 0xffffffffffffffff, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64=r8, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 12.776127405s ago: executing program 1 (id=8774): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket(0x28, 0x2, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r3 = openat$vimc2(0xffffff9c, &(0x7f0000005cc0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000005e00)={0x5, 0x7, 0x78ba96cc09fd2886, {0xc, @pix_mp={0x3, 0x1, 0x30324c4a, 0x3, 0x4, [{0xfffffffd, 0x5}, {0x2, 0x7fffffff}, {0x400081, 0x1}, {0x1, 0x2}, {0x6, 0x4}, {0x1, 0x1}, {0x3, 0xe90f}, {0x3ad7, 0x5}], 0x0, 0xf, 0x6, 0x1, 0x4}}, 0x80000001}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_emit_ethernet(0x10b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 10.991825248s ago: executing program 3 (id=8750): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x180, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x150, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x0, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x0, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xfffffffffffffdac, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x11a8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r6, &(0x7f0000000000)='\x00', 0x1, 0x800, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @loopback, 0x8080}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x1840}, 0x40c0080) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x80079a0) 10.604161358s ago: executing program 0 (id=8777): userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x28, 0x2, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r3 = openat$vimc2(0xffffff9c, &(0x7f0000005cc0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000005e00)={0x5, 0x7, 0x78ba96cc09fd2886, {0xc, @pix_mp={0x3, 0x1, 0x30324c4a, 0x3, 0x4, [{0xfffffffd, 0x5}, {0x2, 0x7fffffff}, {0x400081, 0x1}, {0x1, 0x2}, {0x6, 0x4}, {0x1, 0x1}, {0x3, 0xe90f}, {0x3ad7, 0x5}], 0x0, 0xf, 0x6, 0x1, 0x4}}, 0x80000001}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_emit_ethernet(0x10b, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800494100fd0065000008029078ac1414bbe000000204440c9f93ac1414aa00000002000000227f90787f000001393416de860432ce7bc329ab7ef37cc09d89387dc2ccf9feb0902b941f136a54d5b5c05ed397b9d94419ffb93e61690bf4592b08db81388570be59b77d8502d17bf1fc8eb595e7d7dec6a851e061646f6cc58e5c8c758b0f440648c1d9b558da96e50a35b8b56b465659b947e1f5a393c4ed43918b6e309f66ca3fd77a4a368fb197ceb5738194a6cafbd6e7f6a02074b3aca0b2e823168cac13548cf0a93c6828a3cdc0ed622d8b3a3912f3307537b23a3d6c4e57a0c540449396ff0aaa07ead60b5c94e0596c1224c42f8b7a8aa0f6c2ba6b52e0ec5309e177c73232735100f7d70ca168f5e3d9eefa84bee489c45497808b6789c3f62e77514ac57665fdaec782a1ceca1ee6854de4e6b72306f9969bb432e5ae9c2545c6b9da914b90b937cc7cb9c890301ae443e7055b2faf86941c48f11d8d3c6a06c85ad91a76aa402b8f5eab96a3305ba78e21cb87d10f205b810714c1ffc6097b9e2decdfaba164e750d6a94dc1360758eb0a6cc96c70075b99e9b18bffdcc00f686db1d35aba63"], 0x0) io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 9.132757072s ago: executing program 4 (id=8779): userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket(0x28, 0x2, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r3 = openat$vimc2(0xffffff9c, &(0x7f0000005cc0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000005e00)={0x5, 0x7, 0x78ba96cc09fd2886, {0xc, @pix_mp={0x3, 0x1, 0x30324c4a, 0x3, 0x4, [{0xfffffffd, 0x5}, {0x2, 0x7fffffff}, {0x400081, 0x1}, {0x1, 0x2}, {0x6, 0x4}, {0x1, 0x1}, {0x3, 0xe90f}, {0x3ad7, 0x5}], 0x0, 0xf, 0x6, 0x1, 0x4}}, 0x80000001}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_emit_ethernet(0x10b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 8.816255938s ago: executing program 0 (id=8780): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket(0x28, 0x2, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r3 = openat$vimc2(0xffffff9c, &(0x7f0000005cc0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000005e00)={0x5, 0x7, 0x78ba96cc09fd2886, {0xc, @pix_mp={0x3, 0x1, 0x30324c4a, 0x3, 0x4, [{0xfffffffd, 0x5}, {0x2, 0x7fffffff}, {0x400081, 0x1}, {0x1, 0x2}, {0x6, 0x4}, {0x1, 0x1}, {0x3, 0xe90f}, {0x3ad7, 0x5}], 0x0, 0xf, 0x6, 0x1, 0x4}}, 0x80000001}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_emit_ethernet(0x10b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 8.724740839s ago: executing program 5 (id=8781): r0 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x101c, 0x4, 0x0, 0x0, 0x5, 0x4}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001200050928bd7000ffdbdf25210d0b004e224e26fcffffff230900000100008006000000010400000600000003000000", @ANYRESHEX=0x0], 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x4) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_usb_connect$cdc_ecm(0x2, 0x6d, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x80, 0xf0, 0x3, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x10, {{0xa, 0x24, 0x6, 0x0, 0x0, "714a67165b"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x5, 0xc, 0xa0}, [@dmm={0x7, 0x24, 0x14, 0x0, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}, @ncm={0x6, 0x24, 0x1a, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x8, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x9, 0xfd}}}}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0xe, 0x9, 0x1, 0xff, 0x4}, 0xbc, &(0x7f0000000580)={0x5, 0xf, 0xbc, 0x6, [@generic={0x45, 0x10, 0xa, "e734a0588efeafbefd9d3d202382a227a39ebedabc8f419d953d3ee0940736d77a752e084d9f199b9983801dd72181ce008946025712de8e3ff3f47724099443b2ea"}, @generic={0x44, 0x10, 0xb, "1e4453c4042b684e2d933006fe1e2ffa82821cf5d560d7ea81897f3ef382eef0ed909877c6ce0296be309115f3744103a84aaaba486a2482c4f474b8e73f479cac"}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x400, 0xf000}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0xb, 0xb, 0x9, 0xc}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "dcd937c7732e135fa02fa37b3d944e43"}]}, 0xa, [{0x5e, &(0x7f0000000640)=@string={0x5e, 0x3, "031d0f6b0d438adea241bc5dc9dad8d55957a49dc34f72a990e14d3e4706cd094f3406a2d57a6f77194db41c5703d00d4403e648fb7056757157c4eda8d6071ca329f6b2c5a61b816d8d4ca5434aefdf80bed8b258f94a52e79fbfe9"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x812}}, {0xec, &(0x7f0000000800)=@string={0xec, 0x3, "a1dc2f0ef7fdb296a949bd919776b49991c4a7037d3d360fe08d7802d3d502c88bb90c954dcb1da4775f9890f281b0415ed4d6b8e97d02faef6e234353c0bd968f71dab113d38202773feb8894f94235957c2edf482edbdfd8b68577a7bacf7510f0af4620e69c9f8a84613e86a006f574220eb7de2106af08edeed801a630b55bf3d5a082e211a60dc11528018edf96541a1c5590d6f318901e3a07ee1eb7583fad24dc07a051d6c0f41d989b718a67435555d7993e7da79f1a33a70ad768134e295c281761140fd34b8d149f6da24b94f2ec13b4550133e366d4b3ba1ea5bca2a5a3afaf2a5a62e7de"}}, {0x28, &(0x7f0000000740)=@string={0x28, 0x3, "894bab5daffd9361ea9a7b18a2e98e2dac7920b8cd3527f1c2c860b5bc6edb38ea7ea2c45fd2"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x409}}, {0x96, &(0x7f0000000940)=@string={0x96, 0x3, "ccdedaf8b364172e2c919d6d5883e662da8d634d5564a6ce71761f3174a4b982dd6bfb9c68562cde305e09eb03dbdae335dedc7c22af96a746eaa7c3f3c4b8b27103401f195c6958f479fa95abbc06a9677614237d5bcf1b9a54b3c8a3ae3f1fdc572103a4caa37ca6d5184942dd05218051223790c6e14040d276af002a21d70f8aebffe164182c03f09eb21ed1963b66f51d3a"}}, {0x35, &(0x7f0000000a00)=@string={0x35, 0x3, "086e548b8d17f7b241f398e9d3a3a27f190bc8364c8b02ca2bae83d29c1c350debfb0364ac23286d2ab487e36861d3130a50f0"}}, {0x65, &(0x7f0000000a40)=@string={0x65, 0x3, "b1ac7183b24769cdf521ea970bac45a9743787d2ecb98e373f6815931f0efab767be9b3e7725c86b36302be6f5859e9af9c82fdf7a9e83b96cd62e74a18478e022fdd3fa7e21aa17ddd548130afaa52829acc96ce40b2e16ffc7bcc906d0338ea20de7"}}]}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) preadv(r5, &(0x7f0000000500)=[{&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f00000002c0)=""/187, 0xbb}, {0x0}, {&(0x7f0000000380)=""/159, 0x9f}, {&(0x7f0000000240)}, {&(0x7f0000000440)=""/138, 0x8a}], 0x6, 0x3, 0x75) ioctl$UI_DEV_DESTROY(r4, 0x5502) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xdc, 0xcf, 0x80, 0x40, 0x14cd, 0x6116, 0x160, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x38, 0xab}}]}}]}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) write$cgroup_subtree(r3, &(0x7f0000000180)={[{0x2d, 'cpuacct'}, {0x2d, 'cpu'}]}, 0xe) 7.969900366s ago: executing program 3 (id=8782): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x180, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x150, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x0, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x0, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xfffffffffffffdac, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x11a8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r5, &(0x7f0000000000)='\x00', 0x1, 0x800, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @loopback, 0x8080}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x1840}, 0x40c0080) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x80079a0) 7.606942391s ago: executing program 4 (id=8783): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x180, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x150, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x0, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x0, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xfffffffffffffdac, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x11a8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r5, &(0x7f0000000000)='\x00', 0x1, 0x800, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @loopback, 0x8080}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x1840}, 0x40c0080) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x80079a0) 6.827492901s ago: executing program 0 (id=8784): userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket(0x28, 0x2, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r3 = openat$vimc2(0xffffff9c, &(0x7f0000005cc0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000005e00)={0x5, 0x7, 0x78ba96cc09fd2886, {0xc, @pix_mp={0x3, 0x1, 0x30324c4a, 0x3, 0x4, [{0xfffffffd, 0x5}, {0x2, 0x7fffffff}, {0x400081, 0x1}, {0x1, 0x2}, {0x6, 0x4}, {0x1, 0x1}, {0x3, 0xe90f}, {0x3ad7, 0x5}], 0x0, 0xf, 0x6, 0x1, 0x4}}, 0x80000001}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_emit_ethernet(0x10b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 5.952804s ago: executing program 3 (id=8785): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r2 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r2, 0xffffffffffffffff, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64=r8, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 5.872584952s ago: executing program 4 (id=8786): userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket(0x28, 0x2, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r3 = openat$vimc2(0xffffff9c, &(0x7f0000005cc0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000005e00)={0x5, 0x7, 0x78ba96cc09fd2886, {0xc, @pix_mp={0x3, 0x1, 0x30324c4a, 0x3, 0x4, [{0xfffffffd, 0x5}, {0x2, 0x7fffffff}, {0x400081, 0x1}, {0x1, 0x2}, {0x6, 0x4}, {0x1, 0x1}, {0x3, 0xe90f}, {0x3ad7, 0x5}], 0x0, 0xf, 0x6, 0x1, 0x4}}, 0x80000001}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_emit_ethernet(0x10b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 5.320164846s ago: executing program 5 (id=8787): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r2 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r2, 0xffffffffffffffff, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64=r8, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 4.822978867s ago: executing program 0 (id=8788): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB="08002600851600000a00180000"], 0x4c}}, 0x0) 4.784620544s ago: executing program 4 (id=8789): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r2 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r2, 0xffffffffffffffff, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64=r8, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 4.645441978s ago: executing program 0 (id=8790): userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket(0x28, 0x2, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r3 = openat$vimc2(0xffffff9c, &(0x7f0000005cc0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000005e00)={0x5, 0x7, 0x78ba96cc09fd2886, {0xc, @pix_mp={0x3, 0x1, 0x30324c4a, 0x3, 0x4, [{0xfffffffd, 0x5}, {0x2, 0x7fffffff}, {0x400081, 0x1}, {0x1, 0x2}, {0x6, 0x4}, {0x1, 0x1}, {0x3, 0xe90f}, {0x3ad7, 0x5}], 0x0, 0xf, 0x6, 0x1, 0x4}}, 0x80000001}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_emit_ethernet(0x10b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 3.968144469s ago: executing program 3 (id=8791): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r2 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r2, 0xffffffffffffffff, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64=r8, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 2.839272796s ago: executing program 5 (id=8792): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r2 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r2, 0xffffffffffffffff, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64=r8, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 2.794002444s ago: executing program 4 (id=8793): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1c0, 0x194, 0x194, 0x1c0, 0x194, 0x3, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'veth1_to_team\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x38, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x1b, 0x2f, 0x22, 0x40, 0x1d, 0x18, 0xb, 0x2e, 0x29, 0x2a, 0x12, 0x2, 0x1a, 0x32, 0x39, 0x3f], 0x0, 0x8e, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec", 0x77}], 0x1}, 0x4040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000044000000", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a801800"], 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000090000000000000000c3a0f8ff4100", @ANYRES32=0x0, @ANYRES64], &(0x7f0000000040)='GPL\x00', 0x3, 0x96, &(0x7f00000015c0)=""/150}, 0x94) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r10, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.715928802s ago: executing program 3 (id=8794): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r2 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r2, 0xffffffffffffffff, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64=r8, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 2.149596028s ago: executing program 5 (id=8795): userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket(0x28, 0x2, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r3 = openat$vimc2(0xffffff9c, &(0x7f0000005cc0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000005e00)={0x5, 0x7, 0x78ba96cc09fd2886, {0xc, @pix_mp={0x3, 0x1, 0x30324c4a, 0x3, 0x4, [{0xfffffffd, 0x5}, {0x2, 0x7fffffff}, {0x400081, 0x1}, {0x1, 0x2}, {0x6, 0x4}, {0x1, 0x1}, {0x3, 0xe90f}, {0x3ad7, 0x5}], 0x0, 0xf, 0x6, 0x1, 0x4}}, 0x80000001}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_emit_ethernet(0x10b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 915.483463ms ago: executing program 3 (id=8796): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x180, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x150, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x0, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x0, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xfffffffffffffdac, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x11a8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r6, &(0x7f0000000000)='\x00', 0x1, 0x800, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @loopback, 0x8080}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x1840}, 0x40c0080) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x80079a0) 875.576802ms ago: executing program 4 (id=8797): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000080)={0x10000, 0x80000000}) ioctl$KVM_CAP_X86_GUEST_MODE(r3, 0x4068aea3, 0x0) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = dup(r4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) gettid() timer_create(0x0, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000a40)={&(0x7f0000000640)=[{0x7, 0x10, 0x81, &(0x7f0000000080)="15075c33fa1ffa186dd1032695966e2c12dee700fef21509ea77ac6256c15375ffb29b1d7283e9f38b0961a78bbc7903368dad004d11fc37a1e2adb0a21c43f27491315f216b9c9b756d4fe9f6e693c226f086a87ddac540c0d545f5b2e30fa9b8926ea731f6b4644e260ca82877edd226ebf35d42717e725ad9db8a14b404455b"}, {0xe, 0x400, 0x0, &(0x7f0000000140)}, {0x9, 0x0, 0xd, &(0x7f0000000000)="21298e06ae2f1915ea1a9b37a5"}, {0x9, 0x8000, 0x0, &(0x7f00000002c0)}, {0x7, 0xde01, 0xab, &(0x7f0000000380)="0f0b3df060a7b3f6d1405c7ac13b59aca1f9f634612248766e2acde66827a670879d68e15af693c7d234190e65c6f4eaa79463ef901550556b64c46a6a76caf946fd0f4b95998a6286d4ff8b1556a0baecf54d3ef52a568bea8119903f07665ef9778aa1304e5c87d0d503d1ec526610e840bc3bcb016dcd9e31274cd0866c1798760619414356f682bfda435a9cb7c5dbe84c264fd425b18982f6af31139c52c3b307b02ebbe6eaacac7e"}, {0xffff, 0xa00, 0xe5, &(0x7f0000000440)="1d1d1366bb9fc435169814d3416f9bb45a9288f8b900b9b71ffb6387b90c4242cc990932607c72ae44728f8f749431c77366fb62ae215e9379e9189b674dcb7d2ca35bb6b5ba01e41a00b09cc3399e12b2721dbe36322b91281887ecff56b2358f949956dffc9263b7f89ae482052275be675830d228dc109e3f61b4a69fa581bf2f6ebc751a423fd813b84464b8c503dd22015616bbbb3aa91cff18fab277653e34ebb78103191a41505ada830b07a4bf8bb22776a9f96309801c6c7bfa02dbf4e05f63cb30864003d1dda1eb1b07ae8d3ae4416ae1a67b8adcc43cd33466356cf2582f3e"}, {0x5, 0xe411, 0x168, &(0x7f0000001740)="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"}, {0x0, 0x200, 0x0, 0x0}], 0x8}) 156.26368ms ago: executing program 5 (id=8798): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018"], 0x4c}}, 0x0) 0s ago: executing program 0 (id=8799): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1c0, 0x194, 0x194, 0x1c0, 0x194, 0x3, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'veth1_to_team\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x38, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x1b, 0x2f, 0x22, 0x40, 0x1d, 0x18, 0xb, 0x2e, 0x29, 0x2a, 0x12, 0x2, 0x1a, 0x32, 0x39, 0x3f], 0x0, 0x8e, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec", 0x77}], 0x1}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000090000000000000000c3a0f8ff4100", @ANYRES32=0x0, @ANYRES64], &(0x7f0000000040)='GPL\x00', 0x3, 0x96, &(0x7f00000015c0)=""/150}, 0x94) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): igh-speed USB device number 112 using dummy_hcd [ 1609.802104][ T875] usb 5-1: Using ep0 maxpacket: 32 [ 1610.023456][ T2335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8300'. [ 1610.098407][ T875] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1610.108206][ T875] usb 5-1: config 0 has no interface number 0 [ 1610.114295][ T875] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1610.604078][ T875] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1610.622256][ T875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.640802][ T875] usb 5-1: Product: syz [ 1610.644986][ T875] usb 5-1: Manufacturer: syz [ 1610.659945][ T875] usb 5-1: SerialNumber: syz [ 1610.758576][ T875] usb 5-1: config 0 descriptor?? [ 1610.770195][ T875] smsc75xx v1.0.0 [ 1610.773846][ T875] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1610.823593][ T875] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1610.835484][T16978] usb 2-1: USB disconnect, device number 3 [ 1612.107445][ T875] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1612.169800][ T5922] usb 5-1: USB disconnect, device number 112 [ 1612.357466][ T875] usb 4-1: Using ep0 maxpacket: 32 [ 1612.382234][ T875] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 1612.390837][ T875] usb 4-1: config 9 has no interface number 0 [ 1612.398359][ T875] usb 4-1: config 9 interface 37 has no altsetting 0 [ 1612.472510][ T875] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1612.481787][ T875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.507781][ T875] usb 4-1: Product: х [ 1612.513466][ T875] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣 [ 1612.533568][ C0] vkms_vblank_simulate: vblank timer overrun [ 1612.549845][ T875] usb 4-1: SerialNumber: syz [ 1614.475138][ T875] gspca_main: spca506-2.14.0 probing 0734:043b [ 1614.574339][ T875] usb 4-1: USB disconnect, device number 108 [ 1615.074247][ T2365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8305'. [ 1615.394191][ T2382] bond0: option lp_interval: invalid value (0) [ 1615.401178][ T2382] bond0: option lp_interval: allowed values 1 - 2147483647 [ 1615.563788][ T875] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1615.737963][ T875] usb 3-1: Using ep0 maxpacket: 32 [ 1615.842249][ T875] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1615.900232][ T875] usb 3-1: config 0 has no interface number 0 [ 1615.927836][ T875] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1616.080769][ T5922] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1616.205342][ T875] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1616.225126][ T875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.237419][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 1616.306552][ T875] usb 3-1: Product: syz [ 1616.316507][ T875] usb 3-1: Manufacturer: syz [ 1616.326960][ T875] usb 3-1: SerialNumber: syz [ 1616.348183][ T875] usb 3-1: config 0 descriptor?? [ 1616.410923][ T5922] usb 2-1: config 9 has an invalid interface number: 37 but max is 0 [ 1616.425549][ T5922] usb 2-1: config 9 has no interface number 0 [ 1616.432466][ T5922] usb 2-1: config 9 interface 37 has no altsetting 0 [ 1616.463975][ T875] smsc75xx v1.0.0 [ 1616.467726][ T875] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1616.480486][ T875] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 1616.511441][ T5922] usb 2-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1616.545734][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.554776][ T5922] usb 2-1: Product: х [ 1616.559217][ T5922] usb 2-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣 [ 1616.597693][ T5922] usb 2-1: SerialNumber: syz [ 1616.790195][ T2402] netlink: 'syz.0.8312': attribute type 17 has an invalid length. [ 1617.307585][ T875] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1618.067634][ T875] usb 4-1: Using ep0 maxpacket: 32 [ 1618.175158][ T875] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 1618.184374][ T875] usb 4-1: config 9 has no interface number 0 [ 1618.193384][ T875] usb 4-1: config 9 interface 37 has no altsetting 0 [ 1618.210429][ T875] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1618.220436][ T875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.229637][ T875] usb 4-1: Product: х [ 1618.235668][ T875] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣 [ 1618.258203][ T875] usb 4-1: SerialNumber: syz [ 1618.821058][ T5922] gspca_main: spca506-2.14.0 probing 0734:043b [ 1619.034005][ T5922] usb 2-1: USB disconnect, device number 4 [ 1619.504419][ T2432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8317'. [ 1619.800053][ T875] gspca_main: spca506-2.14.0 probing 0734:043b [ 1619.963802][ T875] usb 4-1: USB disconnect, device number 109 [ 1620.884907][ T2449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8319'. [ 1621.137485][ T875] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1621.167756][ T5922] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1621.307562][ T875] usb 2-1: Using ep0 maxpacket: 32 [ 1621.314836][ T875] usb 2-1: config 9 has an invalid interface number: 37 but max is 0 [ 1621.329641][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 1621.335892][ T875] usb 2-1: config 9 has no interface number 0 [ 1621.344810][ T5922] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1621.354754][ T5922] usb 5-1: config 0 has no interface number 0 [ 1621.362362][ T875] usb 2-1: config 9 interface 37 has no altsetting 0 [ 1621.370266][ T5922] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1621.386065][ T875] usb 2-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1621.398483][ T5922] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1621.409315][ T875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.417800][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.426187][ T875] usb 2-1: Product: syz [ 1621.430788][ T5922] usb 5-1: Product: syz [ 1621.434964][ T5922] usb 5-1: Manufacturer: syz [ 1621.440075][ T875] usb 2-1: Manufacturer: syz [ 1621.444762][ T875] usb 2-1: SerialNumber: syz [ 1621.451088][ T5922] usb 5-1: SerialNumber: syz [ 1621.469668][ T5922] usb 5-1: config 0 descriptor?? [ 1621.480092][ T5922] smsc75xx v1.0.0 [ 1621.483857][ T5922] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1621.496471][ T5922] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1622.646085][ T5922] usb 3-1: USB disconnect, device number 92 [ 1623.096306][ T875] gspca_main: spca506-2.14.0 probing 0734:043b [ 1623.254607][ T875] usb 2-1: USB disconnect, device number 5 [ 1623.587413][T16978] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1623.770728][T16978] usb 4-1: Using ep0 maxpacket: 16 [ 1623.800175][T16978] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1623.821962][T16978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1623.850836][T16978] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1623.860721][T16978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.887077][T16978] usb 4-1: Product: syz [ 1623.902077][T16978] usb 4-1: Manufacturer: syz [ 1623.918063][T16978] usb 4-1: SerialNumber: syz [ 1623.938778][T16978] usb 4-1: config 0 descriptor?? [ 1624.017579][ T2474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8324'. [ 1624.090444][T16978] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1624.106542][T16978] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1624.680087][ T5901] usb 5-1: USB disconnect, device number 113 [ 1625.075457][ T2484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1625.090857][ T2484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1625.457502][ T5901] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1625.577848][T16978] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1625.584402][T16978] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1625.610088][T16978] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1625.627622][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 1625.643216][ T5901] usb 5-1: config 9 has an invalid interface number: 37 but max is 0 [ 1625.653002][T16978] em28xx 4-1:0.0: No AC97 audio processor [ 1625.680399][ T5901] usb 5-1: config 9 has no interface number 0 [ 1625.718982][ T5901] usb 5-1: config 9 interface 37 has no altsetting 0 [ 1625.744122][ T5901] usb 5-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1625.792526][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.970565][ T5901] usb 5-1: Product: х [ 1625.976312][ T5901] usb 5-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣 [ 1626.081906][ T5901] usb 5-1: SerialNumber: syz [ 1626.136562][ T2500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8327'. [ 1626.454666][ T5922] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1626.673411][T16978] usb 4-1: USB disconnect, device number 110 [ 1626.682933][T16978] em28xx 4-1:0.0: Disconnecting em28xx [ 1626.843621][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 1626.850118][T16978] em28xx 4-1:0.0: Freeing device [ 1626.928370][ T5922] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1626.942656][ T5922] usb 2-1: config 0 has no interface number 0 [ 1626.956390][ T5922] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1627.051896][ T5922] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1627.061319][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.073551][ T5922] usb 2-1: Product: syz [ 1627.078620][ T5922] usb 2-1: Manufacturer: syz [ 1627.083707][ T5922] usb 2-1: SerialNumber: syz [ 1627.105058][ T5922] usb 2-1: config 0 descriptor?? [ 1627.224445][ T2505] netlink: 'syz.3.8329': attribute type 17 has an invalid length. [ 1627.265800][ T5922] smsc75xx v1.0.0 [ 1627.270288][ T5922] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1627.293616][ T5922] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1627.371546][ T2512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8330'. [ 1627.984433][ T5901] gspca_main: spca506-2.14.0 probing 0734:043b [ 1628.225050][ T5901] usb 5-1: USB disconnect, device number 114 [ 1628.382847][ T2523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8331'. [ 1628.747440][ T5901] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1629.082595][ T2519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8328'. [ 1629.197515][ T5922] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1629.337577][T16978] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1629.347508][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 1629.355060][ T5922] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 1629.363975][ T5922] usb 4-1: config 9 has no interface number 0 [ 1629.372605][ T5922] usb 4-1: config 9 interface 37 has no altsetting 0 [ 1629.390795][ T5922] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1629.402011][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.410495][ T5922] usb 4-1: Product: х [ 1629.415040][ T5922] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣 [ 1629.436350][ T5922] usb 4-1: SerialNumber: syz [ 1629.527385][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 1629.532727][T16978] usb 3-1: Using ep0 maxpacket: 32 [ 1629.558267][ T5901] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1629.584030][ T5901] usb 5-1: config 0 has no interface number 0 [ 1629.607597][ T5901] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1629.623439][T16978] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1629.688598][T16978] usb 3-1: config 0 has no interface number 0 [ 1629.709935][T16978] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1629.718587][ T5901] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1629.747945][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.765716][T16978] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1629.777430][ T5901] usb 5-1: Product: syz [ 1629.781653][ T5901] usb 5-1: Manufacturer: syz [ 1629.787395][T16978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.817463][ T5901] usb 5-1: SerialNumber: syz [ 1629.867519][T16978] usb 3-1: Product: syz [ 1629.889001][T16978] usb 3-1: Manufacturer: syz [ 1629.898568][ T5901] usb 5-1: config 0 descriptor?? [ 1629.905271][T16978] usb 3-1: SerialNumber: syz [ 1629.978290][T16978] usb 3-1: config 0 descriptor?? [ 1630.268812][ T5901] smsc75xx v1.0.0 [ 1630.273554][ T5901] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1630.292210][ T5901] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1630.366834][T16978] smsc75xx v1.0.0 [ 1630.371170][T16978] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1630.393906][T16978] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 1630.436927][ T2538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8333'. [ 1631.615524][T16978] usb 5-1: USB disconnect, device number 115 [ 1631.619163][ T5922] gspca_main: spca506-2.14.0 probing 0734:043b [ 1631.723039][ T5922] usb 4-1: USB disconnect, device number 111 [ 1631.895391][ T2546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8334'. [ 1632.039216][ T5922] usb 2-1: USB disconnect, device number 6 [ 1632.177451][ T5909] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1632.397398][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 1632.427473][ T5909] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1632.441386][ T5909] usb 5-1: config 0 has no interface number 0 [ 1632.467568][ T5909] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1632.500670][ T2560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8336'. [ 1632.550331][ T5909] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1632.567518][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.622824][ T5909] usb 5-1: Product: syz [ 1632.632747][ T5909] usb 5-1: Manufacturer: syz [ 1632.637580][ T5909] usb 5-1: SerialNumber: syz [ 1632.650571][ T5909] usb 5-1: config 0 descriptor?? [ 1632.758834][ T5909] smsc75xx v1.0.0 [ 1632.772008][ T5909] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1632.798055][ T5909] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1632.897401][ T5922] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1633.157612][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 1633.427410][ T5922] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1633.461353][ T5922] usb 2-1: config 0 has no interface number 0 [ 1633.501398][ T5922] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1633.607493][ T5922] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1633.648879][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.737576][ T5922] usb 2-1: Product: syz [ 1633.742005][ T5922] usb 2-1: Manufacturer: syz [ 1633.746621][ T5922] usb 2-1: SerialNumber: syz [ 1633.834101][ T5922] usb 2-1: config 0 descriptor?? [ 1633.851201][ T5922] smsc75xx v1.0.0 [ 1633.856353][ T5922] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1633.878307][ T5922] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1633.981179][ T5922] usb 3-1: USB disconnect, device number 93 [ 1634.418329][ T2579] netlink: 'syz.2.8338': attribute type 4 has an invalid length. [ 1634.515189][ T2582] bond0: option lp_interval: invalid value (0) [ 1634.525932][ T2582] bond0: option lp_interval: allowed values 1 - 2147483647 [ 1634.627415][ T5922] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1634.780614][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 1634.788812][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1634.801903][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1634.816530][ T5922] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1634.828230][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.837277][ T5922] usb 4-1: Product: syz [ 1634.841809][ T5922] usb 4-1: Manufacturer: syz [ 1634.847904][ T5922] usb 4-1: SerialNumber: syz [ 1634.855508][ T5922] usb 4-1: config 0 descriptor?? [ 1634.865482][ T5922] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1634.875106][ T5922] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1635.521185][ T875] usb 2-1: USB disconnect, device number 7 [ 1635.669430][ T2584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1635.680470][T16978] usb 5-1: USB disconnect, device number 116 [ 1635.686938][ T2584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1635.812275][ T2595] netlink: 'syz.1.8341': attribute type 17 has an invalid length. [ 1635.895073][ T2597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8342'. [ 1636.379701][ T5922] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1636.386915][ T5922] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1636.394714][ T5922] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1636.402840][ T5922] em28xx 4-1:0.0: No AC97 audio processor [ 1637.445311][ T5922] usb 4-1: USB disconnect, device number 112 [ 1637.453351][ T5922] em28xx 4-1:0.0: Disconnecting em28xx [ 1637.614337][ T5922] em28xx 4-1:0.0: Freeing device [ 1637.773115][ T2616] netlink: 'syz.3.8345': attribute type 4 has an invalid length. [ 1637.998503][T16978] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1638.247409][T16978] usb 2-1: Using ep0 maxpacket: 32 [ 1638.273714][T16978] usb 2-1: config 9 has an invalid interface number: 37 but max is 0 [ 1638.293464][T16978] usb 2-1: config 9 has no interface number 0 [ 1638.320308][T16978] usb 2-1: config 9 interface 37 has no altsetting 0 [ 1638.355442][T16978] usb 2-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1638.372620][T16978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.394586][T16978] usb 2-1: Product: х [ 1638.407383][T16978] usb 2-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣 [ 1638.454295][T16978] usb 2-1: SerialNumber: syz [ 1639.012066][ T2634] netlink: 'syz.3.8347': attribute type 4 has an invalid length. [ 1639.027047][ T2634] netlink: 'syz.3.8347': attribute type 17 has an invalid length. [ 1639.927473][ T5922] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1640.177940][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 1640.395854][ T5922] usb 5-1: config 9 has an invalid interface number: 37 but max is 0 [ 1640.405104][ T5922] usb 5-1: config 9 has no interface number 0 [ 1640.413033][ T5922] usb 5-1: config 9 interface 37 has no altsetting 0 [ 1640.429460][ T5922] usb 5-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1640.443874][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.476202][ T5922] usb 5-1: Product: х [ 1640.492452][ T5922] usb 5-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣 [ 1640.557105][ T5922] usb 5-1: SerialNumber: syz [ 1640.698539][ T2648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8350'. [ 1640.967554][ T875] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1641.137590][ T875] usb 4-1: Using ep0 maxpacket: 32 [ 1641.171392][ T875] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1641.209616][ T875] usb 4-1: config 0 has no interface number 0 [ 1641.227305][ C0] hrtimer: interrupt took 349376 ns [ 1641.245649][ T875] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1641.293813][ T875] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1641.326634][ T875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.377804][ T875] usb 4-1: Product: syz [ 1641.392536][ T875] usb 4-1: Manufacturer: syz [ 1641.409472][ T875] usb 4-1: SerialNumber: syz [ 1641.450388][ T875] usb 4-1: config 0 descriptor?? [ 1641.503126][ T875] smsc75xx v1.0.0 [ 1641.512093][ T875] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1641.605699][ T875] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 1642.381062][ T5922] gspca_main: spca506-2.14.0 probing 0734:043b [ 1642.501874][ T2651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8349'. [ 1642.590271][ T5922] usb 5-1: USB disconnect, device number 117 [ 1642.849158][ T2664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8353'. [ 1643.117461][ T1956] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1643.127778][ T5922] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1643.260698][T16978] gspca_main: spca506-2.14.0 probing 0734:043b [ 1643.327599][ T1956] usb 5-1: Using ep0 maxpacket: 32 [ 1643.336639][ T1956] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1643.346157][ T1956] usb 5-1: config 0 has no interface number 0 [ 1643.354407][ T1956] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1643.376692][ T1956] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1643.388608][ T1956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.397678][ T1956] usb 5-1: Product: syz [ 1643.402534][ T1956] usb 5-1: Manufacturer: syz [ 1643.408046][ T1956] usb 5-1: SerialNumber: syz [ 1643.416411][ T1956] usb 5-1: config 0 descriptor?? [ 1643.422534][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 1643.440162][ T1956] smsc75xx v1.0.0 [ 1643.444777][ T1956] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1643.458898][ T1956] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1643.535057][T16978] usb 2-1: USB disconnect, device number 8 [ 1643.982981][T16978] usb 4-1: USB disconnect, device number 113 [ 1645.824577][T16978] usb 5-1: USB disconnect, device number 118 [ 1646.407661][T16978] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1646.699726][T16978] usb 2-1: Using ep0 maxpacket: 32 [ 1646.797750][T16978] usb 2-1: config 9 has an invalid interface number: 37 but max is 0 [ 1646.809246][T16978] usb 2-1: config 9 has no interface number 0 [ 1646.837724][T16978] usb 2-1: config 9 interface 37 has no altsetting 0 [ 1646.938956][T16978] usb 2-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1646.956622][T16978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.969625][T16978] usb 2-1: Product: syz [ 1646.977370][T16978] usb 2-1: Manufacturer: syz [ 1646.989912][T16978] usb 2-1: SerialNumber: syz [ 1647.362660][ T875] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1647.537484][ T875] usb 4-1: Using ep0 maxpacket: 32 [ 1647.562233][ T875] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 1647.584632][ T875] usb 4-1: config 9 has no interface number 0 [ 1647.605485][ T875] usb 4-1: config 9 interface 37 has no altsetting 0 [ 1647.663792][ T875] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1647.686733][ T875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.712276][ T875] usb 4-1: Product: х [ 1647.722190][ T875] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣 [ 1647.797530][ T875] usb 4-1: SerialNumber: syz [ 1647.910214][T16978] gspca_main: spca506-2.14.0 probing 0734:043b [ 1647.934014][ T2706] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8358'. [ 1648.410181][T16978] usb 2-1: USB disconnect, device number 9 [ 1648.549135][ T5922] usb 3-1: unable to read config index 0 descriptor/start: -110 [ 1648.587690][ T5833] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1648.629237][ T5922] usb 3-1: can't read configurations, error -110 [ 1648.788164][ T5922] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1648.908148][ T5833] usb 5-1: Using ep0 maxpacket: 32 [ 1649.059969][ T5833] usb 5-1: config 9 has an invalid interface number: 37 but max is 0 [ 1649.077258][ T5922] usb 3-1: device descriptor read/64, error -32 [ 1649.146099][ T5833] usb 5-1: config 9 has no interface number 0 [ 1649.182841][ T5833] usb 5-1: config 9 interface 37 has no altsetting 0 [ 1649.248405][ T5922] usb usb3-port1: attempt power cycle [ 1649.435799][ T2720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8361'. [ 1649.639111][ T5922] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1649.697731][ T5922] usb 3-1: device descriptor read/8, error -32 [ 1649.707575][T16978] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1649.927494][T16978] usb 2-1: Using ep0 maxpacket: 32 [ 1649.939996][T16978] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1649.997637][T16978] usb 2-1: config 0 has no interface number 0 [ 1650.053847][T16978] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1650.067683][ T5922] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1650.138012][ T5922] usb 3-1: device descriptor read/8, error -32 [ 1650.167823][T16978] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1650.226003][T16978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.288789][ T5922] usb usb3-port1: unable to enumerate USB device [ 1650.320414][T16978] usb 2-1: Product: syz [ 1650.352445][T16978] usb 2-1: Manufacturer: syz [ 1650.411839][T16978] usb 2-1: SerialNumber: syz [ 1650.420663][ T875] gspca_main: spca506-2.14.0 probing 0734:043b [ 1650.530791][T16978] usb 2-1: config 0 descriptor?? [ 1650.618569][ T875] usb 4-1: USB disconnect, device number 114 [ 1650.643186][T16978] smsc75xx v1.0.0 [ 1650.647162][T16978] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1650.725020][T16978] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1651.151090][ T5833] usb 5-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1651.165810][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.197007][ T5833] usb 5-1: Product: х [ 1651.203899][ T5833] usb 5-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣 [ 1651.236169][ T5833] usb 5-1: can't set config #9, error -71 [ 1651.294675][ T5833] usb 5-1: USB disconnect, device number 119 [ 1651.453197][ T2728] bond0: option lp_interval: invalid value (0) [ 1651.460300][ T2728] bond0: option lp_interval: allowed values 1 - 2147483647 [ 1651.572583][ T2742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8365'. [ 1651.857420][T16978] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1652.167403][ T1956] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1652.231108][T16978] usb 5-1: Using ep0 maxpacket: 32 [ 1652.260019][T16978] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1652.294271][T16978] usb 5-1: config 0 has no interface number 0 [ 1652.327396][T16978] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1652.410669][ T1956] usb 4-1: Using ep0 maxpacket: 32 [ 1652.424633][T16978] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1652.437122][ T1956] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 1652.450972][ T1956] usb 4-1: config 9 has no interface number 0 [ 1652.463884][T16978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.484634][ T1956] usb 4-1: config 9 interface 37 has no altsetting 0 [ 1652.503966][T16978] usb 5-1: Product: syz [ 1652.584451][T16978] usb 5-1: Manufacturer: syz [ 1652.589405][T16978] usb 5-1: SerialNumber: syz [ 1652.610030][ T1956] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1652.621361][T16978] usb 5-1: config 0 descriptor?? [ 1652.631057][ T1956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.660242][ T1956] usb 4-1: Product: х [ 1652.690979][ T1956] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣 [ 1652.731142][T16978] smsc75xx v1.0.0 [ 1652.742721][T16978] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1652.810225][T16978] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1652.822677][ T1956] usb 4-1: SerialNumber: syz [ 1653.240724][T16978] usb 2-1: USB disconnect, device number 10 [ 1653.521769][ T2747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8367'. [ 1654.256789][ T2756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8368'. [ 1654.528125][ T5833] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1654.946307][ T1956] gspca_main: spca506-2.14.0 probing 0734:043b [ 1655.117506][ T5833] usb 2-1: Using ep0 maxpacket: 32 [ 1655.137171][ T5833] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1655.168434][ T5833] usb 2-1: config 0 has no interface number 0 [ 1655.188794][ T1956] usb 4-1: USB disconnect, device number 115 [ 1655.226407][ T5833] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1655.274482][ T2761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8369'. [ 1655.597515][ T1956] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1655.606943][ T5833] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1655.618254][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.629219][ T5833] usb 2-1: Product: syz [ 1655.633847][ T5833] usb 2-1: Manufacturer: syz [ 1655.641183][ T5833] usb 2-1: SerialNumber: syz [ 1655.661906][ T5833] usb 2-1: config 0 descriptor?? [ 1655.703039][ T5833] smsc75xx v1.0.0 [ 1655.706899][ T5833] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1655.720884][ T5833] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1656.097760][ T1956] usb 4-1: Using ep0 maxpacket: 32 [ 1656.406010][ T1956] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1656.414950][ T1956] usb 4-1: config 0 has no interface number 0 [ 1656.423450][ T1956] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1657.094189][T16978] usb 5-1: USB disconnect, device number 120 [ 1657.345063][ T2774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1657.363245][ T2774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1657.391900][ T2774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1657.418068][ T2774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1657.433150][ T2774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1657.591415][ T2777] bond0: option lp_interval: invalid value (0) [ 1657.617698][ T2777] bond0: option lp_interval: allowed values 1 - 2147483647 [ 1657.674151][ T2776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8372'. [ 1657.772916][ T5833] usb 2-1: USB disconnect, device number 11 [ 1658.007625][T16978] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1658.326604][ T1956] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1658.379319][ T1956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.457845][ T1956] usb 4-1: Product: syz [ 1658.494566][ T1956] usb 4-1: Manufacturer: syz [ 1658.551202][T16978] usb 5-1: Using ep0 maxpacket: 32 [ 1658.591137][T16978] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1658.602944][ T1956] usb 4-1: config 0 descriptor?? [ 1658.631088][T16978] usb 5-1: config 0 has no interface number 0 [ 1658.711928][ T1956] usb 4-1: can't set config #0, error -71 [ 1658.747631][T16978] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1658.835280][ T1956] usb 4-1: USB disconnect, device number 116 [ 1658.922539][ T2779] chnl_net:caif_netlink_parms(): no params data found [ 1659.048439][T16978] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1659.061278][T16978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.158154][T16978] usb 5-1: Product: syz [ 1659.198463][T16978] usb 5-1: Manufacturer: syz [ 1659.241813][T16978] usb 5-1: SerialNumber: syz [ 1659.315830][ T2795] netlink: 'syz.3.8375': attribute type 4 has an invalid length. [ 1659.338259][T16978] usb 5-1: config 0 descriptor?? [ 1659.371125][T16978] smsc75xx v1.0.0 [ 1659.377231][T16978] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1659.397128][T16978] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1659.512797][ T2774] Bluetooth: hci3: command tx timeout [ 1659.950496][ T2779] bridge0: port 1(bridge_slave_0) entered blocking state [ 1659.977708][ T2779] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.992013][ T2779] bridge_slave_0: entered allmulticast mode [ 1660.003231][ T2779] bridge_slave_0: entered promiscuous mode [ 1660.014464][ T2779] bridge0: port 2(bridge_slave_1) entered blocking state [ 1660.027668][ T2779] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.036684][ T2779] bridge_slave_1: entered allmulticast mode [ 1660.084328][ T2779] bridge_slave_1: entered promiscuous mode [ 1660.349709][ T2779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1660.399804][ T2779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1660.750628][ T2779] team0: Port device team_slave_0 added [ 1660.803502][ T2779] team0: Port device team_slave_1 added [ 1660.908732][ T2820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8377'. [ 1661.096024][ T2779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1661.105283][ T2779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1661.132538][ C0] vkms_vblank_simulate: vblank timer overrun [ 1661.141341][ T2779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1661.155494][ T2779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1661.163498][ T2779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1661.192195][ C0] vkms_vblank_simulate: vblank timer overrun [ 1661.224614][ T2779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1661.438938][ T2828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8378'. [ 1661.540509][ T2779] hsr_slave_0: entered promiscuous mode [ 1661.551632][ T2779] hsr_slave_1: entered promiscuous mode [ 1661.570214][ T2779] debugfs: 'hsr0' already exists in 'hsr' [ 1661.578875][ T2774] Bluetooth: hci3: command tx timeout [ 1661.592010][ T2779] Cannot create hsr debugfs directory [ 1661.707424][T16978] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1661.917515][T16978] usb 4-1: Using ep0 maxpacket: 32 [ 1661.944202][T16978] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1662.002210][T16978] usb 4-1: config 0 has no interface number 0 [ 1662.025673][T16978] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1662.057248][T16978] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1662.096558][T16978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.121783][T16978] usb 4-1: Product: syz [ 1662.135210][T16978] usb 4-1: Manufacturer: syz [ 1662.158539][T16978] usb 4-1: SerialNumber: syz [ 1662.215631][T16978] usb 4-1: config 0 descriptor?? [ 1662.339047][T16978] smsc75xx v1.0.0 [ 1662.344126][T16978] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1662.417737][T16978] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 1662.590594][ T2779] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1662.765219][ T5833] usb 5-1: USB disconnect, device number 121 [ 1663.327429][ T875] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1663.394959][ T2779] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1663.413594][ T2840] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8381'. [ 1663.545299][ T875] usb 5-1: Using ep0 maxpacket: 32 [ 1663.599820][ T875] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1663.609779][ T875] usb 5-1: config 0 has no interface number 0 [ 1663.622881][ T875] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1663.660237][ T2774] Bluetooth: hci3: command tx timeout [ 1663.660988][ T875] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1663.679597][ T875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.691364][ T875] usb 5-1: Product: syz [ 1663.696840][ T875] usb 5-1: Manufacturer: syz [ 1663.705244][ T875] usb 5-1: SerialNumber: syz [ 1663.716534][ T875] usb 5-1: config 0 descriptor?? [ 1663.752349][ T875] smsc75xx v1.0.0 [ 1663.757076][ T875] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1663.780216][ T875] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1663.916037][ T2779] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1664.440018][ T5833] usb 4-1: USB disconnect, device number 117 [ 1664.565491][ T2779] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1664.712244][ T2861] netlink: 'syz.1.8384': attribute type 4 has an invalid length. [ 1664.803748][ T2865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8383'. [ 1665.363532][ T2779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1665.467856][ T2779] 8021q: adding VLAN 0 to HW filter on device team0 [ 1665.521116][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1665.529851][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1665.603434][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1665.613216][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1665.738458][ T2774] Bluetooth: hci3: command tx timeout [ 1665.755345][ T5833] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1666.068036][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 1666.079330][ T5833] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1666.174669][ T5833] usb 4-1: config 0 has no interface number 0 [ 1666.270633][ T2779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1666.354120][ T5833] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1666.493017][ T2779] veth0_vlan: entered promiscuous mode [ 1666.577132][ T2779] veth1_vlan: entered promiscuous mode [ 1666.737511][ T5922] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1666.741368][ T2779] veth0_macvtap: entered promiscuous mode [ 1666.790412][ T5833] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1666.808364][ T2779] veth1_macvtap: entered promiscuous mode [ 1666.923474][ T2779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1666.994137][ T2779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1667.033868][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.047528][ T5833] usb 4-1: Product: syz [ 1667.051950][ T5833] usb 4-1: Manufacturer: syz [ 1667.056683][ T5833] usb 4-1: SerialNumber: syz [ 1667.071357][ T5833] usb 4-1: config 0 descriptor?? [ 1667.082820][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.159944][ T5833] smsc75xx v1.0.0 [ 1667.179181][ T5833] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1667.222902][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.264103][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.323682][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.488021][ T5833] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 1668.033132][ T1956] usb 5-1: USB disconnect, device number 122 [ 1668.761489][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1668.800998][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1668.840974][T24550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1668.860113][T24550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1668.907599][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 1669.109422][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.116722][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.404656][ T2904] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8370'. [ 1669.619119][T27504] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1670.047478][T27504] usb 5-1: Using ep0 maxpacket: 32 [ 1670.469209][ T5922] usb 2-1: device descriptor read/all, error -71 [ 1670.631565][T27504] usb 5-1: config 9 has an invalid interface number: 37 but max is 0 [ 1670.645448][T27504] usb 5-1: config 9 has no interface number 0 [ 1670.659656][T27504] usb 5-1: config 9 interface 37 has no altsetting 0 [ 1670.687400][T27504] usb 5-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1670.706770][T27504] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.726209][T27504] usb 5-1: Product: syz [ 1670.742036][T27504] usb 5-1: Manufacturer: syz [ 1670.758906][T27504] usb 5-1: SerialNumber: syz [ 1671.560098][T27504] usb 5-1: can't set config #9, error -71 [ 1671.576587][T27504] usb 5-1: USB disconnect, device number 123 [ 1671.654165][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.675848][ T2910] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8390'. [ 1671.705443][ T2912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8389'. [ 1671.728627][ T5922] usb 4-1: USB disconnect, device number 118 [ 1671.749409][ T5909] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1672.007452][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 1672.019426][ T5909] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1672.028370][ T5909] usb 2-1: config 0 has no interface number 0 [ 1672.037819][ T5909] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1672.059264][ T5909] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1672.079237][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.100180][ T5909] usb 2-1: Product: syz [ 1672.110490][ T5909] usb 2-1: Manufacturer: syz [ 1672.120511][ T5909] usb 2-1: SerialNumber: syz [ 1672.607947][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.611829][ T5909] usb 2-1: config 0 descriptor?? [ 1672.826426][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.876188][ T5909] smsc75xx v1.0.0 [ 1672.901755][ T5909] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1672.975558][ T49] team0: Port device netdevsim0 removed [ 1673.001392][ T5909] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1673.036175][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.488676][ T49] bridge_slave_1: left allmulticast mode [ 1673.495076][ T49] bridge_slave_1: left promiscuous mode [ 1673.557810][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.600444][ T49] bridge_slave_0: left allmulticast mode [ 1673.608648][ T49] bridge_slave_0: left promiscuous mode [ 1673.615004][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.007606][T16978] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1674.317436][T16978] usb 4-1: Using ep0 maxpacket: 32 [ 1674.364557][T16978] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 1674.401019][T16978] usb 4-1: config 9 has no interface number 0 [ 1674.429674][T16978] usb 4-1: config 9 interface 37 has no altsetting 0 [ 1674.577415][T27504] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1674.594740][T16978] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1674.733601][T16978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.752929][T16978] usb 4-1: Product: х [ 1674.763790][T16978] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣 [ 1674.798682][ T875] usb 2-1: USB disconnect, device number 14 [ 1674.864380][T27504] usb 5-1: Using ep0 maxpacket: 32 [ 1674.934635][T27504] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1674.981851][T16978] usb 4-1: SerialNumber: syz [ 1675.099393][T27504] usb 5-1: config 0 has no interface number 0 [ 1675.163436][T27504] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1675.206204][ T2941] netlink: 'syz.1.8395': attribute type 4 has an invalid length. [ 1675.242233][T27504] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1675.262012][ T49] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1675.632006][T27504] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.705890][ T49] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1675.730564][T27504] usb 5-1: Product: syz [ 1675.735352][T27504] usb 5-1: Manufacturer: syz [ 1675.796392][T27504] usb 5-1: SerialNumber: syz [ 1675.806060][ T2947] netlink: 'syz.1.8395': attribute type 17 has an invalid length. [ 1675.817633][ T49] bridge1 (unregistering): left promiscuous mode [ 1675.842404][ T2946] netlink: 'syz.0.8396': attribute type 4 has an invalid length. [ 1675.900667][T27504] usb 5-1: config 0 descriptor?? [ 1675.966729][ T49] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1676.263613][ T2950] netlink: 'syz.0.8396': attribute type 17 has an invalid length. [ 1676.272872][ T49] bridge2 (unregistering): left promiscuous mode [ 1676.273790][T27504] smsc75xx v1.0.0 [ 1676.292278][T27504] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1676.710346][T27504] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1676.771358][ T49] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 1676.815522][ T49] bridge3 (unregistering): left promiscuous mode [ 1677.460729][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1677.473429][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1677.493088][ T49] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1677.518742][ T49] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1677.532663][ T49] bond0 (unregistering): Released all slaves [ 1677.994413][ T49] bond1 (unregistering): Released all slaves [ 1678.241200][ T49] bond2 (unregistering): Released all slaves [ 1678.256066][ T49] bond3 (unregistering): Released all slaves [ 1678.435560][T16978] gspca_main: spca506-2.14.0 probing 0734:043b [ 1678.552267][ T49] bond4 (unregistering): Released all slaves [ 1678.730249][T16978] usb 4-1: USB disconnect, device number 119 [ 1678.863027][ T49] bond5 (unregistering): Released all slaves [ 1678.894445][ T49] bond6 (unregistering): Released all slaves [ 1678.915885][ T49] bond7 (unregistering): Released all slaves [ 1678.988000][ T2936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8394'. [ 1679.486536][T16978] usb 5-1: USB disconnect, device number 124 [ 1679.517430][ T5909] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1679.577600][ T2958] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8397'. [ 1679.819758][ T49] tipc: Left network mode [ 1679.947442][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 1680.030858][ T5909] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1680.047886][T16978] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1680.103124][ T2986] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8399'. [ 1680.227488][T16978] usb 2-1: Using ep0 maxpacket: 32 [ 1680.250137][T16978] usb 2-1: config 9 has an invalid interface number: 37 but max is 0 [ 1680.269809][ T5909] usb 4-1: config 0 has no interface number 0 [ 1680.277388][ T5909] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1680.291500][T16978] usb 2-1: config 9 has no interface number 0 [ 1680.313837][T16978] usb 2-1: config 9 interface 37 has no altsetting 0 [ 1680.349869][T16978] usb 2-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1680.374046][T16978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.389568][ T5909] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1680.404045][T16978] usb 2-1: Product: х [ 1680.416765][T16978] usb 2-1: SerialNumber: syz [ 1680.565764][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.637066][ T5909] usb 4-1: Product: syz [ 1680.657868][ T5909] usb 4-1: Manufacturer: syz [ 1680.667620][ T5909] usb 4-1: SerialNumber: syz [ 1680.798818][ T5909] usb 4-1: config 0 descriptor?? [ 1680.855445][ T5909] smsc75xx v1.0.0 [ 1680.915557][ T5909] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1681.030705][ T5909] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 1682.453329][T14248] usb 4-1: USB disconnect, device number 120 [ 1682.799104][ T3003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8401'. [ 1683.146666][T16978] gspca_main: spca506-2.14.0 probing 0734:043b [ 1683.197606][ T5909] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1683.427403][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 1683.443624][T16978] usb 2-1: USB disconnect, device number 15 [ 1683.553374][ T5909] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1683.597466][ T5909] usb 4-1: config 0 has no interface number 0 [ 1683.690154][ T5909] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1683.715218][ T5909] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1683.747677][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.823151][ T5909] usb 4-1: Product: syz [ 1683.851457][ T5909] usb 4-1: Manufacturer: syz [ 1683.916408][ T5909] usb 4-1: SerialNumber: syz [ 1683.949529][ T5909] usb 4-1: config 0 descriptor?? [ 1683.980210][ T5909] smsc75xx v1.0.0 [ 1683.983898][ T5909] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1684.041437][ T3019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8404'. [ 1684.052950][ T5909] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 1684.125083][ T49] hsr_slave_0: left promiscuous mode [ 1684.127885][T16978] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1684.183242][ T49] hsr_slave_1: left promiscuous mode [ 1684.209346][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1684.275818][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1684.319482][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1684.449726][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1684.476833][T16978] usb 2-1: Using ep0 maxpacket: 32 [ 1684.518983][T16978] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1684.533014][T16978] usb 2-1: config 0 has no interface number 0 [ 1684.610417][ T49] veth1_macvtap: left promiscuous mode [ 1684.629550][T16978] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1684.647075][ T49] veth0_macvtap: left promiscuous mode [ 1684.685796][T16978] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1684.707050][T16978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.733260][T16978] usb 2-1: Product: syz [ 1684.748941][T16978] usb 2-1: Manufacturer: syz [ 1684.770174][T16978] usb 2-1: SerialNumber: syz [ 1684.795922][T16978] usb 2-1: config 0 descriptor?? [ 1684.805127][ T49] veth1_vlan: left promiscuous mode [ 1684.890614][T16978] smsc75xx v1.0.0 [ 1684.916338][T16978] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1685.007750][T16978] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1685.333559][ T3024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8404'. [ 1686.644939][ T1956] usb 2-1: USB disconnect, device number 16 [ 1687.106589][ T3035] netlink: 'syz.1.8406': attribute type 4 has an invalid length. [ 1687.322362][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1687.364762][ T3042] netlink: 'syz.1.8406': attribute type 17 has an invalid length. [ 1687.408748][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1689.932325][ T3051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8409'. [ 1690.497906][ T1956] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1690.618252][T16978] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1690.687542][ T1956] usb 5-1: Using ep0 maxpacket: 32 [ 1690.713504][ T1956] usb 5-1: config 9 has an invalid interface number: 37 but max is 0 [ 1690.736707][ T1956] usb 5-1: config 9 has no interface number 0 [ 1690.751652][ T1956] usb 5-1: config 9 interface 37 has no altsetting 0 [ 1690.782217][ T1956] usb 5-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1690.797879][T16978] usb 2-1: Using ep0 maxpacket: 32 [ 1690.816426][ T1956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.841303][T16978] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1690.860457][T16978] usb 2-1: config 0 has no interface number 0 [ 1690.870506][ T1956] usb 5-1: Product: syz [ 1690.875979][ T1956] usb 5-1: Manufacturer: syz [ 1690.889004][T16978] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1690.901657][ T1956] usb 5-1: SerialNumber: syz [ 1690.932802][T16978] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1690.979545][T16978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.007150][T16978] usb 2-1: Product: syz [ 1691.018700][T16978] usb 2-1: Manufacturer: syz [ 1691.031969][T16978] usb 2-1: SerialNumber: syz [ 1691.060734][T16978] usb 2-1: config 0 descriptor?? [ 1691.091792][T16978] smsc75xx v1.0.0 [ 1691.105287][T16978] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1691.143678][T16978] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1691.280857][ T3049] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8408'. [ 1691.317532][ T3060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8410'. [ 1693.046159][ T1956] gspca_main: spca506-2.14.0 probing 0734:043b [ 1693.080962][ T875] usb 4-1: USB disconnect, device number 121 [ 1693.464632][ T5922] usb 2-1: USB disconnect, device number 17 [ 1693.735488][ T1956] usb 5-1: USB disconnect, device number 125 [ 1694.149159][ T3099] netlink: 'syz.3.8412': attribute type 4 has an invalid length. [ 1694.187031][ T3099] netlink: 'syz.3.8412': attribute type 17 has an invalid length. [ 1694.391117][ T3102] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8414'. [ 1694.597410][ T1956] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1694.757507][ T1956] usb 5-1: Using ep0 maxpacket: 32 [ 1694.814224][ T1956] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1694.847601][ T1956] usb 5-1: config 0 has no interface number 0 [ 1694.854090][ T1956] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1694.925229][ T1956] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1694.946203][ T1956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.974841][ T1956] usb 5-1: Product: syz [ 1694.987464][ T1956] usb 5-1: Manufacturer: syz [ 1695.008645][ T1956] usb 5-1: SerialNumber: syz [ 1695.048980][ T1956] usb 5-1: config 0 descriptor?? [ 1695.083977][ T1956] smsc75xx v1.0.0 [ 1695.097872][ T1956] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1695.140913][ T1956] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1695.661189][ T3120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8415'. [ 1696.362610][ T875] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1696.742546][ T875] usb 4-1: Using ep0 maxpacket: 32 [ 1696.888222][ T875] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1696.899790][ T875] usb 4-1: config 0 has no interface number 0 [ 1696.907614][ T875] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1696.940563][ T875] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1696.979398][ T875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.018512][ T875] usb 4-1: Product: syz [ 1697.027385][ T875] usb 4-1: Manufacturer: syz [ 1697.037595][ T875] usb 4-1: SerialNumber: syz [ 1697.070282][ T875] usb 4-1: config 0 descriptor?? [ 1697.087933][ T5909] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1697.140623][T16978] usb 5-1: USB disconnect, device number 126 [ 1697.259363][ T875] smsc75xx v1.0.0 [ 1697.264612][ T875] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1697.337500][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 1697.343134][ T875] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 1697.381249][ T5909] usb 2-1: config 9 has an invalid interface number: 37 but max is 0 [ 1697.391128][ T5909] usb 2-1: config 9 has no interface number 0 [ 1697.427616][ T5909] usb 2-1: config 9 interface 37 has no altsetting 0 [ 1697.907439][ T1956] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1698.067511][ T1956] usb 5-1: Using ep0 maxpacket: 32 [ 1698.085452][ T1956] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1698.109554][ T1956] usb 5-1: config 0 has no interface number 0 [ 1698.130487][ T1956] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1698.170606][ T1956] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1698.199905][ T1956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.241234][ T1956] usb 5-1: Product: syz [ 1698.255398][ T1956] usb 5-1: Manufacturer: syz [ 1698.271440][ T1956] usb 5-1: SerialNumber: syz [ 1698.302240][ T1956] usb 5-1: config 0 descriptor?? [ 1698.339689][ T1956] smsc75xx v1.0.0 [ 1698.349988][ T1956] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1698.388241][ T1956] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1699.105192][ T49] IPVS: stop unused estimator thread 0... [ 1699.118307][ T3138] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8418'. [ 1699.274083][ T3145] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8419'. [ 1699.302625][ T5909] usb 2-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1699.312325][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.390175][ T5909] usb 2-1: Product: syz [ 1699.413029][ T5909] usb 2-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣 [ 1699.433857][ C0] vkms_vblank_simulate: vblank timer overrun [ 1699.496953][T16978] usb 4-1: USB disconnect, device number 122 [ 1699.562114][ T3149] netlink: 'syz.1.8420': attribute type 4 has an invalid length. [ 1699.661199][ T3149] netlink: 'syz.1.8420': attribute type 17 has an invalid length. [ 1700.235292][ T5909] usb 2-1: can't set config #9, error -71 [ 1700.364080][ T5909] usb 2-1: USB disconnect, device number 18 [ 1700.776679][ T3160] netlink: 'syz.3.8422': attribute type 4 has an invalid length. [ 1700.804182][ T3160] netlink: 'syz.3.8422': attribute type 17 has an invalid length. [ 1700.986562][ T3164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8423'. [ 1701.417388][T16978] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1701.617435][T16978] usb 2-1: Using ep0 maxpacket: 32 [ 1702.202769][T16978] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1702.240850][T16978] usb 2-1: config 0 has no interface number 0 [ 1702.267054][T16978] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1702.321123][T16978] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1702.349103][T16978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.382144][T16978] usb 2-1: Product: syz [ 1702.386855][T16978] usb 2-1: Manufacturer: syz [ 1702.415114][T16978] usb 2-1: SerialNumber: syz [ 1702.468288][T16978] usb 2-1: config 0 descriptor?? [ 1702.544268][T16978] smsc75xx v1.0.0 [ 1702.553006][T16978] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1702.575827][T16978] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1703.182512][ T5922] usb 5-1: USB disconnect, device number 127 [ 1703.830793][ T3188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8426'. [ 1704.207392][ T5922] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1704.399330][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 1704.426732][ T5922] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1704.443910][T14248] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1704.468276][ T5922] usb 5-1: config 0 has no interface number 0 [ 1704.495557][ T5922] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1704.558974][ T5922] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1704.590877][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.622293][ T5922] usb 5-1: Product: syz [ 1704.684546][ T5922] usb 5-1: Manufacturer: syz [ 1704.706741][ T5922] usb 5-1: SerialNumber: syz [ 1704.729538][ T5922] usb 5-1: config 0 descriptor?? [ 1704.767779][ T5922] smsc75xx v1.0.0 [ 1704.772764][ T5922] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1704.810946][T14248] usb 4-1: Using ep0 maxpacket: 32 [ 1704.870993][ T5922] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1704.960945][T14248] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 1704.999301][T14248] usb 4-1: config 9 has no interface number 0 [ 1705.044110][T14248] usb 4-1: config 9 interface 37 has no altsetting 0 [ 1705.198762][ T3187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8426'. [ 1705.536428][T14248] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1705.574398][T14248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.601971][T14248] usb 4-1: Product: х [ 1705.624701][T14248] usb 4-1: SerialNumber: syz [ 1707.010102][ T1956] usb 2-1: USB disconnect, device number 19 [ 1707.841144][ T1956] usb 5-1: USB disconnect, device number 2 [ 1708.275735][ T3237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8430'. [ 1708.577758][T16978] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1708.767962][T16978] usb 5-1: Using ep0 maxpacket: 32 [ 1708.798257][T16978] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1708.837559][T16978] usb 5-1: config 0 has no interface number 0 [ 1708.865307][T16978] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1708.909607][T16978] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1708.947533][T16978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.967385][T16978] usb 5-1: Product: syz [ 1708.971744][T16978] usb 5-1: Manufacturer: syz [ 1708.976884][T16978] usb 5-1: SerialNumber: syz [ 1709.011954][T16978] usb 5-1: config 0 descriptor?? [ 1709.049559][T16978] smsc75xx v1.0.0 [ 1709.062417][T16978] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1709.087974][T16978] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1709.195868][T14248] gspca_main: spca506-2.14.0 probing 0734:043b [ 1709.407673][ T3250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8432'. [ 1709.491205][ T3253] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8431'. [ 1709.687463][ T5922] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1709.695696][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 1709.867461][ T5922] usb 2-1: device descriptor read/64, error -32 [ 1710.137626][ T5922] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1710.166496][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 1710.327926][ T5922] usb 2-1: device descriptor read/64, error -32 [ 1710.471068][ T5922] usb usb2-port1: attempt power cycle [ 1710.579815][T14248] usb 4-1: USB disconnect, device number 123 [ 1710.918766][ T5922] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1711.029829][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 1711.037533][ T5922] usb 2-1: device descriptor read/8, error -32 [ 1711.157574][ T5922] raw-gadget.2 gadget.1: failed to queue suspend event [ 1711.308077][ T5922] raw-gadget.2 gadget.1: failed to queue reset event [ 1711.437662][ T5922] raw-gadget.2 gadget.1: failed to queue resume event [ 1711.512140][ T5922] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1711.597636][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 1711.605108][ T5922] usb 2-1: device descriptor read/8, error -32 [ 1711.727638][ T5922] raw-gadget.2 gadget.1: failed to queue suspend event [ 1711.734817][ T5922] usb usb2-port1: unable to enumerate USB device [ 1712.825589][ T3287] input: syz1 as /devices/virtual/input/input153 [ 1712.869106][ T3285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8435'. [ 1713.187575][T14248] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1713.401494][T14248] usb 2-1: Using ep0 maxpacket: 32 [ 1713.439853][ T5922] usb 5-1: USB disconnect, device number 3 [ 1713.527079][T14248] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1713.540774][T14248] usb 2-1: config 0 has no interface number 0 [ 1713.547088][T14248] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1713.560210][T14248] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1713.575118][T14248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.584509][T14248] usb 2-1: Product: syz [ 1713.591185][T14248] usb 2-1: Manufacturer: syz [ 1713.596166][T14248] usb 2-1: SerialNumber: syz [ 1713.613949][T14248] usb 2-1: config 0 descriptor?? [ 1713.663820][T14248] smsc75xx v1.0.0 [ 1713.681818][ T3293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8437'. [ 1713.703216][T14248] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1713.787961][T14248] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1713.987431][ T5922] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1714.019762][ T3301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8439'. [ 1714.159056][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 1714.173762][ T5922] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1714.203102][ T5922] usb 5-1: config 0 has no interface number 0 [ 1714.230156][ T5922] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1714.256351][ T5922] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1714.286790][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.341161][ T5922] usb 5-1: Product: syz [ 1714.345930][ T5922] usb 5-1: Manufacturer: syz [ 1714.376717][ T5922] usb 5-1: SerialNumber: syz [ 1714.479002][ T5922] usb 5-1: config 0 descriptor?? [ 1714.510537][ T5922] smsc75xx v1.0.0 [ 1714.514271][ T5922] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1714.584787][ T5922] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1716.641919][ T5922] usb 5-1: USB disconnect, device number 4 [ 1716.799893][ T875] usb 2-1: USB disconnect, device number 24 [ 1716.934116][ T3316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8442'. [ 1717.227473][T14248] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1717.547702][T14248] usb 5-1: Using ep0 maxpacket: 32 [ 1717.567435][ T875] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1717.807516][ T875] usb 2-1: Using ep0 maxpacket: 32 [ 1718.003330][T14248] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1718.037148][T14248] usb 5-1: config 0 has no interface number 0 [ 1718.063352][T14248] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1718.102210][ T5922] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1718.128237][T14248] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1718.159879][T14248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.201085][T14248] usb 5-1: Product: syz [ 1718.205505][T14248] usb 5-1: Manufacturer: syz [ 1718.237185][T14248] usb 5-1: SerialNumber: syz [ 1718.259696][T14248] usb 5-1: config 0 descriptor?? [ 1718.444332][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 1718.563673][ T5922] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 1718.589138][ T5922] usb 4-1: config 9 has no interface number 0 [ 1718.606261][ T5922] usb 4-1: config 9 interface 37 has no altsetting 0 [ 1718.671903][ T5922] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1718.686824][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.717968][ T5922] usb 4-1: Product: х [ 1718.740513][ T5922] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或 [ 1718.871019][ T5922] usb 4-1: SerialNumber: syz [ 1719.661688][T14248] smsc75xx v1.0.0 [ 1719.665666][T14248] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1719.676600][T14248] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1719.742211][ T875] usb 2-1: config 9 has an invalid interface number: 37 but max is 0 [ 1719.751358][ T875] usb 2-1: config 9 has no interface number 0 [ 1719.758007][ T875] usb 2-1: config 9 interface 37 has no altsetting 0 [ 1719.831128][T14248] usb 5-1: USB disconnect, device number 5 [ 1720.054433][ T875] usb 2-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1720.064512][ T875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.073506][ T875] usb 2-1: Product: х [ 1720.084641][ T875] usb 2-1: can't set config #9, error -71 [ 1720.095918][ T875] usb 2-1: USB disconnect, device number 25 [ 1720.498179][T14248] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1720.685568][T14248] usb 5-1: Using ep0 maxpacket: 32 [ 1720.713244][T14248] usb 5-1: config 9 has an invalid interface number: 37 but max is 0 [ 1720.722055][T14248] usb 5-1: config 9 has no interface number 0 [ 1720.728957][T14248] usb 5-1: config 9 interface 37 has no altsetting 0 [ 1720.856315][T14248] usb 5-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1720.866836][T14248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.875430][T14248] usb 5-1: Product: х [ 1720.884557][T14248] usb 5-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐 [ 1720.886704][ T5922] gspca_main: spca506-2.14.0 probing 0734:043b [ 1720.942858][T14248] usb 5-1: SerialNumber: syz [ 1721.591906][ T5922] usb 4-1: USB disconnect, device number 124 [ 1722.802691][ T3359] input: syz1 as /devices/virtual/input/input154 [ 1723.098263][ T1956] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1723.257393][T16978] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1723.270066][ T1956] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1723.289765][ T1956] usb 2-1: not running at top speed; connect to a high speed hub [ 1723.539982][ T1956] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1723.553872][T14248] gspca_main: spca506-2.14.0 probing 0734:043b [ 1723.567391][T16978] usb 4-1: Using ep0 maxpacket: 32 [ 1723.583335][ T1956] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1723.592028][T16978] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 1723.620675][ T1956] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1723.630337][T16978] usb 4-1: config 9 has no interface number 0 [ 1723.636744][ T1956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.645146][T16978] usb 4-1: config 9 interface 37 has no altsetting 0 [ 1723.652667][ T1956] usb 2-1: Product: ࠒ [ 1723.661854][ T1956] usb 2-1: Manufacturer: ᠌ [ 1723.668467][ T1956] usb 2-1: SerialNumber: ฯﷷ隲䦩醽皗馴쒑Χ㵽༶跠ɸ헓젂릋锌쭍ꐝ彷邘臲䆰푞룖緩拓滯䌣쁓隽熏뇚팓ʂ㽷裫璉㕂粕⹈뛘瞅몧痏䚯龜蒊㹡ꂆ≴뜎⇞꼆ꘁ따ꃕꘑ섍⠕踁雟ᩔ唜횐ᣳẐܺỮ墷괿ꀇ홑頝熛枊啃흕㺙Ᵹ᪟ꜳ휊፨⥎⡜愗༔䯓ᒍ涟䮢Ꮼ喴㌁曣돔Ẻ벥ꖢ꾣⪯扚 [ 1723.704387][T16978] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1723.714349][T16978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.734343][T16978] usb 4-1: Product: х [ 1723.738919][T16978] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣 [ 1724.038920][ T3357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1724.075589][T16978] usb 4-1: SerialNumber: syz [ 1724.154193][T14248] usb 5-1: USB disconnect, device number 6 [ 1724.174561][ T3357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1724.241069][ T1956] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 1724.287039][ T1956] usb 2-1: USB disconnect, device number 26 [ 1724.671483][ T3370] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8452'. [ 1726.038448][T16978] gspca_main: spca506-2.14.0 probing 0734:043b [ 1726.495954][T16978] usb 4-1: USB disconnect, device number 125 [ 1726.771003][ T3395] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8456'. [ 1727.027358][ T1956] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1727.057673][T16978] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1727.187499][ T1956] usb 5-1: Using ep0 maxpacket: 32 [ 1727.257718][T16978] usb 4-1: Using ep0 maxpacket: 32 [ 1727.264998][ T1956] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1727.275609][T16978] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 1727.328535][ T1956] usb 5-1: config 0 has no interface number 0 [ 1727.342484][T16978] usb 4-1: config 9 has no interface number 0 [ 1727.362281][ T1956] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1727.369454][T16978] usb 4-1: config 9 interface 37 has no altsetting 0 [ 1727.442951][ T1956] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1727.487185][T16978] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1727.498091][ T1956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.525889][ T1956] usb 5-1: Product: syz [ 1727.560391][ T1956] usb 5-1: Manufacturer: syz [ 1727.566807][T16978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.580218][ T1956] usb 5-1: SerialNumber: syz [ 1727.625860][T16978] usb 4-1: Product: х [ 1727.649262][ T1956] usb 5-1: config 0 descriptor?? [ 1727.668656][T16978] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣 [ 1727.742217][ T1956] smsc75xx v1.0.0 [ 1727.745897][ T1956] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1727.812338][T16978] usb 4-1: SerialNumber: syz [ 1727.861980][ T1956] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1728.360504][ T3413] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8459'. [ 1729.760252][T16978] gspca_main: spca506-2.14.0 probing 0734:043b [ 1729.801986][ T3426] netlink: 304 bytes leftover after parsing attributes in process `syz.1.8461'. [ 1729.814457][ T3426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8461'. [ 1730.077694][T16978] usb 4-1: USB disconnect, device number 126 [ 1730.552377][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.559941][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.520228][T16978] usb 5-1: USB disconnect, device number 7 [ 1731.883915][ T3446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8465'. [ 1731.939490][T16978] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1732.107340][T16978] usb 5-1: Using ep0 maxpacket: 16 [ 1732.157518][ T1956] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1732.294927][ T3453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8468'. [ 1732.367012][T16978] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1732.398031][T16978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1732.644743][T16978] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1732.655038][T16978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.731323][ T1956] usb 2-1: Using ep0 maxpacket: 32 [ 1732.777741][T14248] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1732.798232][T16978] usb 5-1: Product: syz [ 1732.827766][ T1956] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1732.836088][ T1956] usb 2-1: config 0 has no interface number 0 [ 1732.843178][T16978] usb 5-1: Manufacturer: syz [ 1732.878171][T16978] usb 5-1: SerialNumber: syz [ 1732.908337][ T1956] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1732.920176][T16978] usb 5-1: config 0 descriptor?? [ 1732.957429][ T1956] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1732.966507][ T1956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.023945][T16978] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1733.042219][T16978] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1733.060011][T14248] usb 4-1: Using ep0 maxpacket: 32 [ 1733.116053][ T1956] usb 2-1: Product: syz [ 1733.126346][ T1956] usb 2-1: Manufacturer: syz [ 1733.147423][ T1956] usb 2-1: SerialNumber: syz [ 1733.229287][T14248] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 1733.240614][ T1956] usb 2-1: config 0 descriptor?? [ 1733.267635][T14248] usb 4-1: config 9 has no interface number 0 [ 1733.290667][T14248] usb 4-1: config 9 interface 37 has no altsetting 0 [ 1733.338026][ T1956] smsc75xx v1.0.0 [ 1733.351963][ T1956] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1733.463930][ T1956] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1734.022471][ T3461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1734.050990][ T3461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1734.259733][T14248] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1734.300209][T14248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.324124][T14248] usb 4-1: Product: х [ 1734.335248][T14248] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢ [ 1734.403153][T14248] usb 4-1: SerialNumber: syz [ 1734.470135][T16978] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1734.476723][T16978] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1734.484208][T16978] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1734.497921][T16978] em28xx 5-1:0.0: No AC97 audio processor [ 1734.838729][T14248] gspca_main: spca506-2.14.0 probing 0734:043b [ 1735.143130][T14248] usb 4-1: USB disconnect, device number 127 [ 1735.422228][T16978] usb 5-1: USB disconnect, device number 8 [ 1735.429048][T16978] em28xx 5-1:0.0: Disconnecting em28xx [ 1735.464724][T16978] em28xx 5-1:0.0: Freeing device [ 1735.793792][T16978] usb 2-1: USB disconnect, device number 27 [ 1736.246757][ T5922] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1737.677868][ T3494] netlink: 304 bytes leftover after parsing attributes in process `syz.4.8476'. [ 1737.712027][ T3494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8476'. [ 1737.744214][ T3496] netlink: 304 bytes leftover after parsing attributes in process `syz.5.8475'. [ 1737.763600][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 1737.772025][ T3496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8475'. [ 1737.850780][ T3498] binder: 3485:3498 ioctl c018620c 80000380 returned -22 [ 1738.186356][ T5922] usb 4-1: device descriptor read/all, error -71 [ 1738.621645][ T3505] binder: 3501:3505 ioctl c018620c 80000380 returned -22 [ 1739.129494][ T3519] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8480'. [ 1739.371885][ T5909] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1739.567381][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 1739.570099][ T3530] binder: 3522:3530 ioctl c018620c 80000380 returned -22 [ 1739.592443][ T5909] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1739.614019][ T5909] usb 5-1: config 0 has no interface number 0 [ 1739.640310][ T5909] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1739.725711][ T5909] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1739.752202][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.798108][ T5909] usb 5-1: Product: syz [ 1739.803144][ T5909] usb 5-1: Manufacturer: syz [ 1739.814753][ T5909] usb 5-1: SerialNumber: syz [ 1739.838682][ T5909] usb 5-1: config 0 descriptor?? [ 1739.870434][ T5909] smsc75xx v1.0.0 [ 1739.874121][ T5909] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1739.888672][ T5909] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1739.937904][ T5922] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1740.097352][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 1740.175818][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1740.305230][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1740.460466][ T5922] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1740.507445][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.646594][ T5922] usb 4-1: Product: syz [ 1740.652150][ T5922] usb 4-1: Manufacturer: syz [ 1740.737110][ T5922] usb 4-1: SerialNumber: syz [ 1740.748954][ T5922] usb 4-1: config 0 descriptor?? [ 1740.836685][ T5922] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1740.977759][ T5922] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1741.898265][ T3549] binder: 3545:3549 ioctl c018620c 80000380 returned -22 [ 1741.972413][ T3551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1741.990142][ T3551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1742.457629][ T5922] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1742.465373][ T5922] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1742.503383][ T5922] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1742.569926][ T5922] em28xx 4-1:0.0: No AC97 audio processor [ 1742.585821][ T5909] usb 5-1: USB disconnect, device number 9 [ 1743.062528][ T3566] binder: 3559:3566 ioctl c018620c 80000380 returned -22 [ 1743.077867][ T3571] binder: 3563:3571 ioctl c018620c 80000380 returned -22 [ 1743.107122][T14248] usb 4-1: USB disconnect, device number 4 [ 1743.114899][T14248] em28xx 4-1:0.0: Disconnecting em28xx [ 1743.123846][T14248] em28xx 4-1:0.0: Freeing device [ 1744.971255][ T3604] netlink: 304 bytes leftover after parsing attributes in process `syz.0.8497'. [ 1744.980857][ T3604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8497'. [ 1745.226537][ T3605] binder: 3596:3605 ioctl c018620c 80000380 returned -22 [ 1746.477310][ T3619] binder: 3614:3619 ioctl c018620c 80000380 returned -22 [ 1746.647448][T14248] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1746.817423][T14248] usb 5-1: Using ep0 maxpacket: 32 [ 1746.850519][ T3623] netlink: 304 bytes leftover after parsing attributes in process `syz.1.8500'. [ 1746.885929][ T3623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8500'. [ 1746.909011][T14248] usb 5-1: config 9 has an invalid interface number: 37 but max is 0 [ 1746.956862][T14248] usb 5-1: config 9 has no interface number 0 [ 1747.010661][T14248] usb 5-1: config 9 interface 37 has no altsetting 0 [ 1747.163218][T14248] usb 5-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1747.225295][T14248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.254032][T14248] usb 5-1: Product: х [ 1747.274185][T14248] usb 5-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣 [ 1747.370672][T14248] usb 5-1: SerialNumber: syz [ 1748.287601][T14248] usb 5-1: can't set config #9, error -71 [ 1748.364994][T14248] usb 5-1: USB disconnect, device number 10 [ 1748.792646][ T3646] netlink: 304 bytes leftover after parsing attributes in process `syz.5.8505'. [ 1748.803779][ T3646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8505'. [ 1749.145223][ T3647] binder: 3637:3647 ioctl c018620c 80000380 returned -22 [ 1750.710585][ T3669] netlink: 304 bytes leftover after parsing attributes in process `syz.0.8510'. [ 1750.724748][ T3669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8510'. [ 1750.988831][ T3680] binder: 3668:3680 ioctl c018620c 80000380 returned -22 [ 1751.072897][ T3681] binder: 3671:3681 ioctl c018620c 80000380 returned -22 [ 1751.620240][ T3687] netlink: 304 bytes leftover after parsing attributes in process `syz.1.8513'. [ 1751.630109][ T3687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8513'. [ 1753.627143][ T3711] binder: 3707:3711 ioctl c018620c 80000380 returned -22 [ 1755.085635][ T3723] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1755.169075][ T3726] binder: 3713:3726 ioctl c018620c 80000380 returned -22 [ 1755.362279][ T3730] netlink: 304 bytes leftover after parsing attributes in process `syz.4.8522'. [ 1755.373578][ T3730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8522'. [ 1756.722524][ T3748] netlink: 304 bytes leftover after parsing attributes in process `syz.3.8525'. [ 1756.732230][ T3748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8525'. [ 1757.186502][ T3763] netlink: 304 bytes leftover after parsing attributes in process `syz.4.8528'. [ 1757.201722][ T3763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8528'. [ 1757.253116][ T3758] binder: 3751:3758 ioctl c018620c 80000380 returned -22 [ 1758.857120][ T3775] binder: 3769:3775 ioctl c018620c 80000380 returned -22 [ 1758.997135][ T3779] netlink: 304 bytes leftover after parsing attributes in process `syz.0.8531'. [ 1759.008541][ T3779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8531'. [ 1760.351636][ T3791] binder: 3786:3791 ioctl c018620c 80000380 returned -22 [ 1760.760659][ T3806] netlink: 304 bytes leftover after parsing attributes in process `syz.3.8536'. [ 1760.791884][ T3806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8536'. [ 1763.164188][ T3841] binder: 3834:3841 ioctl c018620c 80000380 returned -22 [ 1764.254607][ T3850] netlink: 304 bytes leftover after parsing attributes in process `syz.4.8545'. [ 1764.267685][ T3850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8545'. [ 1765.506509][ T3873] binder: 3868:3873 ioctl c018620c 80000380 returned -22 [ 1765.779213][ T3877] netlink: 304 bytes leftover after parsing attributes in process `syz.3.8550'. [ 1765.822688][ T3877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8550'. [ 1766.551839][ T3893] binder: 3883:3893 ioctl c018620c 80000380 returned -22 [ 1766.604063][ T3895] netlink: 304 bytes leftover after parsing attributes in process `syz.5.8554'. [ 1766.655025][ T3895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8554'. [ 1768.503308][ T3912] netlink: 304 bytes leftover after parsing attributes in process `syz.0.8558'. [ 1768.534868][ T3912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8558'. [ 1768.920056][ T3922] input: syz1 as /devices/virtual/input/input155 [ 1769.209806][ T5909] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1769.492026][ T5909] usb 2-1: not running at top speed; connect to a high speed hub [ 1769.519338][ T5909] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1769.585203][ T5909] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1769.709471][ T5909] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1769.778245][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.817423][ T5909] usb 2-1: Product: ࠒ [ 1769.825579][ T5909] usb 2-1: Manufacturer: ᠌ [ 1769.830304][ T5909] usb 2-1: SerialNumber: ฯﷷ隲䦩醽皗馴쒑Χ㵽༶跠ɸ헓젂릋锌쭍ꐝ彷邘臲䆰푞룖緩拓滯䌣쁓隽熏뇚팓ʂ㽷裫璉㕂粕⹈뛘瞅몧痏䚯龜蒊㹡ꂆ≴뜎⇞꼆ꘁ따ꃕꘑ섍⠕踁雟ᩔ唜횐ᣳẐܺỮ墷괿ꀇ홑頝熛枊啃흕㺙Ᵹ᪟ꜳ휊፨⥎⡜愗༔䯓ᒍ涟䮢Ꮼ喴㌁曣돔Ẻ벥ꖢ꾣⪯扚 [ 1770.149610][ T3924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1770.161571][ T3924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1770.431801][ T5909] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 1770.457966][ T5909] usb 2-1: USB disconnect, device number 28 [ 1771.770510][ T3957] netlink: 304 bytes leftover after parsing attributes in process `syz.4.8567'. [ 1771.790415][ T3957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8567'. [ 1772.666698][ T3969] binder: 3962:3969 ioctl c018620c 80000380 returned -22 [ 1773.109474][ T3976] netlink: 304 bytes leftover after parsing attributes in process `syz.1.8571'. [ 1773.127667][ T3976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8571'. [ 1774.044519][ T3988] binder: 3980:3988 ioctl c018620c 80000380 returned -22 [ 1774.245497][ T3990] binder: 3984:3990 ioctl c018620c 80000380 returned -22 [ 1775.522501][ T4011] netlink: 304 bytes leftover after parsing attributes in process `syz.0.8577'. [ 1775.543573][ T4011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8577'. [ 1777.147442][T14248] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1777.437398][T14248] usb 2-1: Using ep0 maxpacket: 16 [ 1777.460996][T14248] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1777.509728][T14248] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1777.562956][ T4034] netlink: 304 bytes leftover after parsing attributes in process `syz.0.8582'. [ 1777.580533][ T4034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8582'. [ 1777.597478][T14248] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1777.621180][T14248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.683171][ T4036] netlink: 304 bytes leftover after parsing attributes in process `syz.3.8583'. [ 1777.697507][ T4036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8583'. [ 1777.713550][T14248] usb 2-1: Product: syz [ 1777.737030][T14248] usb 2-1: Manufacturer: syz [ 1777.747143][T14248] usb 2-1: SerialNumber: syz [ 1777.765908][T14248] usb 2-1: config 0 descriptor?? [ 1777.813669][T14248] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1777.859682][T14248] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1778.885579][ T4053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1778.902206][ T4053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.347573][T14248] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1779.354495][T14248] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1779.398415][T14248] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1779.421657][T14248] em28xx 2-1:0.0: No AC97 audio processor [ 1779.885396][ T4063] binder: 4055:4063 ioctl c018620c 80000380 returned -1 [ 1780.014251][ T4067] netlink: 304 bytes leftover after parsing attributes in process `syz.5.8588'. [ 1780.045590][ T4067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8588'. [ 1780.245438][ T4068] netlink: 304 bytes leftover after parsing attributes in process `syz.4.8587'. [ 1780.267580][ T4068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8587'. [ 1780.653698][ T5909] usb 2-1: USB disconnect, device number 29 [ 1780.675707][ T5909] em28xx 2-1:0.0: Disconnecting em28xx [ 1780.712565][ T5909] em28xx 2-1:0.0: Freeing device [ 1781.268025][ T4078] binder: 4072:4078 ioctl c018620c 80000380 returned -22 [ 1781.439957][ T4082] netlink: 304 bytes leftover after parsing attributes in process `syz.0.8590'. [ 1781.449458][ T4082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8590'. [ 1781.741921][ T4088] binder: 4083:4088 ioctl c018620c 80000380 returned -1 [ 1782.120483][ T4095] binder: 4091:4095 ioctl c018620c 80000380 returned -22 [ 1783.820218][ T2774] Bluetooth: hci3: command 0x0406 tx timeout [ 1784.746920][ T4127] netlink: 304 bytes leftover after parsing attributes in process `syz.4.8599'. [ 1784.762282][ T4127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8599'. [ 1784.847418][ T5922] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1785.007365][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 1785.015281][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1785.030253][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1785.053383][ T5922] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1785.063911][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.086219][ T5922] usb 2-1: Product: syz [ 1785.095737][ T5922] usb 2-1: Manufacturer: syz [ 1785.113219][ T5922] usb 2-1: SerialNumber: syz [ 1785.156970][ T5922] usb 2-1: config 0 descriptor?? [ 1785.182142][ T5922] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1785.207000][ T5922] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1786.141762][ T4140] netlink: 304 bytes leftover after parsing attributes in process `syz.0.8602'. [ 1786.188612][ T4140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8602'. [ 1786.296722][ T4138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1786.329397][ T4138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1786.704075][ T5922] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1786.712012][ T5922] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1786.742814][ T5922] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1786.819062][ T5922] em28xx 2-1:0.0: No AC97 audio processor [ 1787.116420][ T4154] netlink: 304 bytes leftover after parsing attributes in process `syz.4.8605'. [ 1787.153321][ T4154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8605'. [ 1788.118834][T27504] usb 2-1: USB disconnect, device number 30 [ 1788.159994][T27504] em28xx 2-1:0.0: Disconnecting em28xx [ 1788.217677][T27504] em28xx 2-1:0.0: Freeing device [ 1789.911345][ T4192] netlink: 304 bytes leftover after parsing attributes in process `syz.4.8612'. [ 1789.951347][ T4192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8612'. [ 1790.692340][ T4203] binder: 4199:4203 ioctl c018620c 80000380 returned -1 [ 1791.985328][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.991812][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.236943][ T4218] netlink: 304 bytes leftover after parsing attributes in process `syz.1.8617'. [ 1792.297211][ T4218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8617'. [ 1792.437493][ T5922] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1792.621224][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 1792.628153][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1792.641243][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1792.690648][ T5922] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1792.741472][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.769660][ T5922] usb 5-1: Product: syz [ 1792.817630][ T5922] usb 5-1: Manufacturer: syz [ 1792.847322][ T5922] usb 5-1: SerialNumber: syz [ 1793.047167][ T5922] usb 5-1: config 0 descriptor?? [ 1793.058902][ T5922] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1793.068335][ T5922] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1793.165826][ T4236] netlink: 304 bytes leftover after parsing attributes in process `syz.1.8622'. [ 1793.176761][ T4236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8622'. [ 1794.107027][ T4241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1794.159557][ T4241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1794.617545][ T5922] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1794.623978][ T5922] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1794.648096][ T5922] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1794.700282][ T5922] em28xx 5-1:0.0: No AC97 audio processor [ 1794.750293][ T4253] binder: 4248:4253 ioctl c018620c 80000380 returned -22 [ 1795.301386][ T5922] usb 5-1: USB disconnect, device number 11 [ 1795.308326][ T5922] em28xx 5-1:0.0: Disconnecting em28xx [ 1795.365124][ T5922] em28xx 5-1:0.0: Freeing device [ 1795.398090][ T4261] binder: 4255:4261 ioctl c018620c 80000380 returned -22 [ 1795.706479][ T4267] netlink: 304 bytes leftover after parsing attributes in process `syz.4.8626'. [ 1795.741921][ T4267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8626'. [ 1795.958801][ T4273] netlink: 304 bytes leftover after parsing attributes in process `syz.0.8628'. [ 1796.005876][ T4273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8628'. [ 1798.889985][ T4311] netlink: 304 bytes leftover after parsing attributes in process `syz.4.8635'. [ 1798.971870][ T4311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8635'. [ 1799.397394][T27504] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1799.518851][ T4318] input: syz1 as /devices/virtual/input/input156 [ 1799.549840][T27504] usb 4-1: Using ep0 maxpacket: 16 [ 1799.566709][T27504] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1799.612480][T27504] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1799.650751][T27504] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1799.660956][T27504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.670635][T27504] usb 4-1: Product: syz [ 1799.674837][T27504] usb 4-1: Manufacturer: syz [ 1799.706203][T27504] usb 4-1: SerialNumber: syz [ 1799.730648][T27504] usb 4-1: config 0 descriptor?? [ 1799.770497][T27504] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1799.817561][T27504] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1800.626421][ T4336] binder: 4325:4336 ioctl c018620c 80000380 returned -22 [ 1800.714491][ T4333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1800.736284][ T4333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1801.257687][T27504] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1801.264163][T27504] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1801.290497][T27504] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1801.322269][T27504] em28xx 4-1:0.0: No AC97 audio processor [ 1802.149790][ T4340] netlink: 304 bytes leftover after parsing attributes in process `syz.0.8641'. [ 1802.192495][ T4340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8641'. [ 1802.379219][ T4345] netlink: 304 bytes leftover after parsing attributes in process `syz.1.8642'. [ 1802.406123][ T4345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8642'. [ 1802.425339][ T1956] usb 4-1: USB disconnect, device number 5 [ 1802.478507][ T1956] em28xx 4-1:0.0: Disconnecting em28xx [ 1802.539073][ T1956] em28xx 4-1:0.0: Freeing device [ 1802.577102][ T4351] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8644'. [ 1802.704481][ T4353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8644'. [ 1804.718224][ T4384] binder: 4372:4384 ioctl c018620c 80000380 returned -1 [ 1804.952211][ T4389] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8651'. [ 1804.971694][ T4389] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8651'. [ 1805.688769][ T4395] netlink: 304 bytes leftover after parsing attributes in process `syz.5.8652'. [ 1805.718738][ T4395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8652'. [ 1807.587599][T14248] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1807.763509][ T4417] binder: 4409:4417 ioctl c018620c 80000380 returned -22 [ 1807.844422][T14248] usb 4-1: Using ep0 maxpacket: 16 [ 1807.878803][T14248] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1807.915304][T14248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1807.949431][T14248] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1807.958781][T14248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.969392][T14248] usb 4-1: Product: syz [ 1807.973630][T14248] usb 4-1: Manufacturer: syz [ 1807.987010][T14248] usb 4-1: SerialNumber: syz [ 1808.009770][T14248] usb 4-1: config 0 descriptor?? [ 1808.046041][T14248] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1808.081099][T14248] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1808.961131][ T4431] netlink: 304 bytes leftover after parsing attributes in process `syz.1.8660'. [ 1809.000826][ T4431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8660'. [ 1809.289597][ T4430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1809.300233][ T4430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1809.657620][T14248] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1809.667611][T14248] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1809.698664][T14248] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1809.727511][T14248] em28xx 4-1:0.0: No AC97 audio processor [ 1810.022714][ T4448] binder: 4440:4448 ioctl c018620c 80000380 returned -22 [ 1810.573948][T14248] usb 4-1: USB disconnect, device number 6 [ 1810.588174][T14248] em28xx 4-1:0.0: Disconnecting em28xx [ 1810.638783][T14248] em28xx 4-1:0.0: Freeing device [ 1811.246322][ T4460] binder: 4455:4460 ioctl c018620c 80000380 returned -22 [ 1813.491801][ T4486] netlink: 304 bytes leftover after parsing attributes in process `syz.5.8671'. [ 1813.506807][ T4486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8671'. [ 1813.871329][ T4494] binder: 4487:4494 ioctl c018620c 80000380 returned -22 [ 1814.537349][T14248] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1814.717475][T14248] usb 4-1: Using ep0 maxpacket: 16 [ 1814.731384][T14248] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1814.788150][T14248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1814.859785][T14248] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1814.869325][T14248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.887522][T14248] usb 4-1: Product: syz [ 1814.900316][T14248] usb 4-1: Manufacturer: syz [ 1814.928226][T14248] usb 4-1: SerialNumber: syz [ 1814.982766][T14248] usb 4-1: config 0 descriptor?? [ 1815.004439][T14248] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1815.067478][T14248] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1815.094913][ T4504] binder: 4500:4504 ioctl c018620c 80000380 returned -22 [ 1815.398954][ T4508] netlink: 304 bytes leftover after parsing attributes in process `syz.5.8676'. [ 1815.417641][ T4508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8676'. [ 1815.609724][ T4515] netlink: 304 bytes leftover after parsing attributes in process `syz.4.8677'. [ 1815.639030][ T4515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8677'. [ 1816.115106][ T4520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1816.148222][ T4520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1816.557740][T14248] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1816.627329][T14248] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1816.674812][T14248] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1816.685935][T14248] em28xx 4-1:0.0: No AC97 audio processor [ 1817.512732][ T4533] binder: 4525:4533 ioctl c018620c 80000380 returned -22 [ 1817.531308][ T5909] usb 4-1: USB disconnect, device number 7 [ 1817.557762][ T5909] em28xx 4-1:0.0: Disconnecting em28xx [ 1817.601302][ T5909] em28xx 4-1:0.0: Freeing device [ 1819.459854][ T4551] binder: 4545:4551 ioctl c018620c 80000380 returned -22 [ 1820.274047][ T4572] netlink: 304 bytes leftover after parsing attributes in process `syz.4.8685'. [ 1820.302017][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8685'. [ 1820.392928][ T4570] binder: 4562:4570 ioctl c018620c 80000380 returned -22 [ 1820.480114][ T4575] netlink: 304 bytes leftover after parsing attributes in process `syz.1.8688'. [ 1820.490304][ T4575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8688'. [ 1822.024052][ T4589] netlink: 304 bytes leftover after parsing attributes in process `syz.0.8690'. [ 1822.061032][ T4589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8690'. [ 1823.887000][ T4612] netlink: 304 bytes leftover after parsing attributes in process `syz.0.8695'. [ 1823.897030][ T4612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8695'. [ 1823.917090][ T4609] binder: 4600:4609 ioctl c018620c 80000380 returned -22 [ 1825.179314][ T4619] netlink: 304 bytes leftover after parsing attributes in process `syz.5.8697'. [ 1825.199491][ T4619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8697'. [ 1825.624175][ T4630] netlink: 304 bytes leftover after parsing attributes in process `syz.3.8699'. [ 1825.642146][ T4630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8699'. [ 1827.289768][ T4647] binder: 4640:4647 ioctl c018620c 80000380 returned -22 [ 1827.779546][ T4657] binder: 4646:4657 ioctl c018620c 80000380 returned -22 [ 1827.787273][ T4658] binder: 4651:4658 ioctl c018620c 80000380 returned -22 [ 1828.843879][ T4666] netlink: 304 bytes leftover after parsing attributes in process `syz.4.8706'. [ 1828.861768][ T4666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8706'. [ 1830.266232][ T4688] binder: 4670:4688 ioctl c018620c 80000380 returned -22 [ 1830.281462][ T4686] binder: 4674:4686 ioctl c018620c 80000380 returned -22 [ 1830.334823][ T4689] binder: 4671:4689 ioctl c018620c 80000380 returned -22 [ 1832.628436][ T4716] binder: 4705:4716 ioctl c018620c 80000380 returned -22 [ 1834.296165][ T4736] binder: 4724:4736 ioctl c018620c 80000380 returned -22 [ 1834.342934][ T4737] binder: 4731:4737 ioctl c018620c 80000380 returned -22 [ 1834.934415][ T4742] binder: 4738:4742 ioctl c018620c 80000380 returned -22 [ 1835.742619][ T4750] netlink: 304 bytes leftover after parsing attributes in process `syz.1.8721'. [ 1835.762242][ T4750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8721'. [ 1835.862663][ T4753] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8723'. [ 1835.877055][ T4753] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8723'. [ 1836.635606][ T4770] binder: 4755:4770 ioctl c018620c 80000380 returned -22 [ 1836.671596][ T4771] binder: 4765:4771 ioctl c018620c 80000380 returned -22 [ 1838.078737][ T4795] binder: 4781:4795 ioctl c018620c 80000380 returned -22 [ 1840.135373][ T4813] netlink: 304 bytes leftover after parsing attributes in process `syz.4.8736'. [ 1840.145280][ T4813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8736'. [ 1840.304049][ T4815] binder: 4803:4815 ioctl c018620c 80000380 returned -22 [ 1841.465521][ T4829] binder: 4822:4829 ioctl c018620c 80000380 returned -22 [ 1843.711638][ T4864] binder: 4860:4864 ioctl c018620c 80000380 returned -22 [ 1844.457710][ T4869] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8748'. [ 1844.507614][ T4869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8748'. [ 1844.906851][ T4879] binder: 4871:4879 ioctl c018620c 80000380 returned -22 [ 1845.715486][T24913] syz_tun (unregistering): left allmulticast mode [ 1845.807357][ T2774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1845.847046][ T2774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1845.858368][ T2774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1845.879768][ T2774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1845.889109][ T2774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1846.342470][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.414644][ T4898] binder: 4892:4898 ioctl c018620c 80000380 returned -22 [ 1846.810487][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.121335][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.293234][ T49] bond0: (slave netdevsim0): Releasing backup interface [ 1847.314779][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 1847.441867][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.510295][ T4893] chnl_net:caif_netlink_parms(): no params data found [ 1847.981087][T23618] Bluetooth: hci0: command tx timeout [ 1848.060312][ T4923] binder: 4920:4923 ioctl c018620c 80000380 returned -22 [ 1848.170251][ T4893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1848.198366][ T4893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.252291][ T4893] bridge_slave_0: entered allmulticast mode [ 1848.287058][ T4893] bridge_slave_0: entered promiscuous mode [ 1848.345989][ T4893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1848.412067][ T4893] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.456961][ T4893] bridge_slave_1: entered allmulticast mode [ 1848.526646][ T4893] bridge_slave_1: entered promiscuous mode [ 1848.935292][ T4893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1848.985423][ T4893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1849.164004][ T49] bridge_slave_1: left allmulticast mode [ 1849.174564][ T49] bridge_slave_1: left promiscuous mode [ 1849.200244][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1849.304955][ T49] bridge_slave_0: left allmulticast mode [ 1849.361745][ T49] bridge_slave_0: left promiscuous mode [ 1849.389732][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1849.631844][ T4954] binder: 4950:4954 ioctl c018620c 80000380 returned -22 [ 1850.077349][T23618] Bluetooth: hci0: command tx timeout [ 1851.077878][ T49] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1851.095441][ T49] bridge1 (unregistering): left promiscuous mode [ 1851.196691][ T49] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 1851.224416][ T49] bridge2 (unregistering): left promiscuous mode [ 1851.675929][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1851.693871][ T49] bond_slave_0: left allmulticast mode [ 1851.711957][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1851.733126][ T49] bond_slave_1: left allmulticast mode [ 1851.747693][ T49] bond0 (unregistering): Released all slaves [ 1852.137576][T23618] Bluetooth: hci0: command tx timeout [ 1852.147822][ T49] bond1 (unregistering): Released all slaves [ 1852.298310][ T49] bond2 (unregistering): (slave dummy0): Releasing active interface [ 1852.307971][ T49] bond2 (unregistering): Released all slaves [ 1852.461532][ T49] bond3 (unregistering): Released all slaves [ 1852.474023][ T49] bond4 (unregistering): Released all slaves [ 1852.614590][ T49] bond5 (unregistering): Released all slaves [ 1852.630613][ T49] bond6 (unregistering): Released all slaves [ 1852.643850][ T49] bond7 (unregistering): Released all slaves [ 1852.657861][ T49] bond8 (unregistering): Released all slaves [ 1852.673270][ T49] bond9 (unregistering): Released all slaves [ 1852.690206][ T49] bond10 (unregistering): Released all slaves [ 1852.834762][ T49] bond11 (unregistering): Released all slaves [ 1852.849499][ T49] bond12 (unregistering): Released all slaves [ 1852.863035][ T49] bond13 (unregistering): Released all slaves [ 1852.875544][ T49] bond14 (unregistering): Released all slaves [ 1853.119387][ T4893] team0: Port device team_slave_0 added [ 1853.138114][ T49] tipc: Left network mode [ 1853.140634][ T4893] team0: Port device team_slave_1 added [ 1853.379440][ T4893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1853.402902][ T4893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1853.433442][ T4983] binder: 4977:4983 ioctl c018620c 80000380 returned -22 [ 1853.486474][ T4893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1853.498222][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.504592][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.542168][ T4893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1853.557347][ T4893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1853.631837][ T4893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1853.804848][ T4893] hsr_slave_0: entered promiscuous mode [ 1853.823107][ T4893] hsr_slave_1: entered promiscuous mode [ 1853.839106][ T4893] debugfs: 'hsr0' already exists in 'hsr' [ 1853.854031][ T4893] Cannot create hsr debugfs directory [ 1853.938827][ T4998] input: syz1 as /devices/virtual/input/input157 [ 1854.220462][T23618] Bluetooth: hci0: command tx timeout [ 1854.457445][ T49] hsr_slave_0: left promiscuous mode [ 1854.487965][ T49] hsr_slave_1: left promiscuous mode [ 1854.496296][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1854.528509][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1854.701244][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1854.728358][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1854.802407][ T49] veth1_macvtap: left promiscuous mode [ 1854.828125][ T49] veth0_macvtap: left promiscuous mode [ 1854.836146][ T49] veth1_vlan: left promiscuous mode [ 1854.858939][ T49] veth0_vlan: left promiscuous mode [ 1855.761358][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1855.804823][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1856.570860][ T5030] binder: 5026:5030 ioctl c018620c 80000380 returned -22 [ 1857.050637][ T49] IPVS: stop unused estimator thread 0... [ 1857.220307][ T5041] binder: 5036:5041 ioctl c018620c 80000380 returned -1 [ 1857.321474][ T4893] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1857.332852][ T4893] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1857.376001][ T4893] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1857.432415][ T4893] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1857.454157][ T5035] binder: 5032:5035 ioctl c018620c 80000380 returned -22 [ 1857.567348][ T5057] binder: 5047:5057 ioctl c018620c 80000380 returned -22 [ 1857.743247][ T4893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1857.791928][ T4893] 8021q: adding VLAN 0 to HW filter on device team0 [ 1857.826950][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.834197][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1857.856256][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.863540][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1857.945564][ T4893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1858.000181][ T4893] veth0_vlan: entered promiscuous mode [ 1858.012416][ T4893] veth1_vlan: entered promiscuous mode [ 1858.041351][ T4893] veth0_macvtap: entered promiscuous mode [ 1858.053299][ T4893] veth1_macvtap: entered promiscuous mode [ 1858.084458][ T4893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1858.133002][ T4893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1858.169192][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.237433][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.478207][T24550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1858.490716][T24550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1858.546967][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1858.569562][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1859.340593][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1859.367525][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1859.533075][ T5090] netlink: 304 bytes leftover after parsing attributes in process `syz.3.8750'. [ 1859.544003][ T5090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8750'. [ 1860.046764][ T5103] binder: 5093:5103 ioctl c018620c 80000380 returned -22 [ 1860.902550][ T2774] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1860.913642][ T2774] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1860.922747][ T2774] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1860.931103][ T2774] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1860.943034][ T2774] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1861.724503][ T5135] input: syz1 as /devices/virtual/input/input158 [ 1861.790967][T24441] syz_tun (unregistering): left allmulticast mode [ 1862.086004][ T1634] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.391183][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 1862.664588][ T1634] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.898580][ T1634] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.017505][ T2774] Bluetooth: hci5: command tx timeout [ 1863.397902][ T1634] bond0: (slave netdevsim0): Releasing backup interface [ 1863.577628][ T1634] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.033464][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1864.150111][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.159789][ T5118] bridge_slave_0: entered allmulticast mode [ 1864.176575][ T5118] bridge_slave_0: entered promiscuous mode [ 1864.201500][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1864.220445][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.237148][ T5118] bridge_slave_1: entered allmulticast mode [ 1864.253679][ T5118] bridge_slave_1: entered promiscuous mode [ 1864.536952][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1864.607119][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1864.624656][ T5200] binder: 5193:5200 ioctl c018620c 80000380 returned -22 [ 1864.763488][ T1634] bridge_slave_1: left allmulticast mode [ 1864.790187][ T1634] bridge_slave_1: left promiscuous mode [ 1864.800542][ T1634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.851884][ T1634] bridge_slave_0: left allmulticast mode [ 1864.862615][ T1634] bridge_slave_0: left promiscuous mode [ 1864.868907][ T1634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.097472][ T2774] Bluetooth: hci5: command tx timeout [ 1865.410411][ T5213] binder: 5207:5213 ioctl c018620c 80000380 returned -22 [ 1865.920583][ T5221] binder: 5217:5221 ioctl c018620c 80000380 returned -22 [ 1866.576020][ T1634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1866.679148][ T1634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1866.757654][ T1634] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1866.780714][ T5235] binder: 5230:5235 ioctl c018620c 80000380 returned -1 [ 1866.799377][ T1634] bond0 (unregistering): Released all slaves [ 1866.914205][ T1634] bond1 (unregistering): Released all slaves [ 1867.178033][ T2774] Bluetooth: hci5: command tx timeout [ 1867.239908][ T1634] bond2 (unregistering): Released all slaves [ 1867.565463][ T5239] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8793'. [ 1867.633736][ T5244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8793'. [ 1867.652586][ T5242] binder: 5236:5242 ioctl c018620c 80000380 returned -22 [ 1867.814332][ T1634] bond3 (unregistering): (slave dummy0): Releasing active interface [ 1867.844625][ T5249] binder: 5240:5249 ioctl c018620c 80000380 returned -22 [ 1867.858112][ T1634] bond3 (unregistering): Released all slaves [ 1868.304053][ T1634] bond4 (unregistering): Released all slaves [ 1868.743445][ T1634] bond5 (unregistering): Released all slaves [ 1868.786422][ T1634] bond6 (unregistering): Released all slaves [ 1868.826418][ T1634] bond7 (unregistering): Released all slaves [ 1868.875492][ T1634] bond8 (unregistering): Released all slaves [ 1868.889878][ T5118] team0: Port device team_slave_0 added [ 1868.931923][ T5118] team0: Port device team_slave_1 added [ 1869.257377][ T2774] Bluetooth: hci5: command tx timeout [ 1870.173991][ T1634] tipc: Disabling bearer [ 1870.200616][ T1634] tipc: Left network mode [ 1870.208046][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1870.214995][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1870.305373][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1870.354062][ T1634] ------------[ cut here ]------------ [ 1870.360306][ T1634] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 1870.388176][ T1634] WARNING: CPU: 1 PID: 1634 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0 [ 1870.399427][ T1634] Modules linked in: [ 1870.404121][ T1634] CPU: 1 UID: 0 PID: 1634 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 1870.413990][ T1634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1870.423531][ T5284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8799'. [ 1870.424891][ T1634] Workqueue: netns cleanup_net [ 1870.438592][ T1634] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 [ 1870.446236][ T1634] Code: 8d 8d 48 0a 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 00 40 89 8c e8 b6 e0 cd f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 a7 c4 0a f7 90 0f 0b 90 42 80 7c 3d [ 1870.466823][ T1634] RSP: 0000:ffffc90010b0f220 EFLAGS: 00010246 [ 1870.473249][ T1634] RAX: 90a28dcbe0585100 RBX: 0000000000000000 RCX: ffff88802dc99e40 [ 1870.481706][ T1634] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1870.489913][ T1634] RBP: ffff888060cf97b8 R08: 0000000000000003 R09: 0000000000000004 [ 1870.498088][ T1634] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffff888060cfaa80 [ 1870.506062][ T1634] R13: ffff888060cf8d80 R14: 1ffff1100c19f2f7 R15: dffffc0000000000 [ 1870.514312][ T1634] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 1870.523787][ T1634] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1870.530715][ T1634] CR2: 000000002dc14ffc CR3: 0000000079efc000 CR4: 00000000003526f0 [ 1870.539202][ T1634] Call Trace: [ 1870.542500][ T1634] [ 1870.545741][ T1634] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 1870.553022][ T1634] __ieee80211_link_release_channel+0x33b/0x4a0 [ 1870.560294][ T1634] ? __pfx_ieee80211_uninit+0x10/0x10 [ 1870.565757][ T1634] unregister_netdevice_many_notify+0x1cde/0x2390 [ 1870.572278][ T1634] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1870.579086][ T1634] ? __pfx_call_rcu+0x10/0x10 [ 1870.583764][ T1634] unregister_netdevice_queue+0x33c/0x380 [ 1870.589531][ T1634] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1870.595783][ T1634] _cfg80211_unregister_wdev+0x165/0x590 [ 1870.601573][ T1634] ieee80211_remove_interfaces+0x49a/0x6e0 [ 1870.607514][ T1634] ? __pfx_synchronize_rcu+0x10/0x10 [ 1870.612817][ T1634] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 1870.619385][ T1634] ? rcu_is_watching+0x15/0xb0 [ 1870.624173][ T1634] ieee80211_unregister_hw+0x5d/0x2c0 [ 1870.629656][ T1634] mac80211_hwsim_del_radio+0x275/0x460 [ 1870.635216][ T1634] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1870.641371][ T1634] hwsim_exit_net+0xef4/0xfb0 [ 1870.646049][ T1634] ? hwsim_exit_net+0x333/0xfb0 [ 1870.651979][ T1634] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1870.657234][ T1634] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 1870.663111][ T1634] ops_undo_list+0x49a/0x990 [ 1870.667722][ T1634] ? __pfx_ops_undo_list+0x10/0x10 [ 1870.672898][ T1634] ? do_raw_spin_unlock+0x122/0x240 [ 1870.678191][ T1634] cleanup_net+0x4d8/0x820 [ 1870.682614][ T1634] ? __pfx_cleanup_net+0x10/0x10 [ 1870.687581][ T1634] ? _raw_spin_unlock_irq+0x23/0x50 [ 1870.692846][ T1634] ? process_scheduled_works+0x9ef/0x17b0 [ 1870.699401][ T1634] ? process_scheduled_works+0x9ef/0x17b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1870.705137][ T1634] process_scheduled_works+0xae1/0x17b0 [ 1870.710930][ T1634] ? __pfx_process_scheduled_works+0x10/0x10 [ 1870.716926][ T1634] worker_thread+0x8a0/0xda0 [ 1870.721551][ T1634] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1870.727922][ T1634] ? __kthread_parkme+0x7b/0x200 [ 1870.732856][ T1634] kthread+0x711/0x8a0 [ 1870.736915][ T1634] ? __pfx_worker_thread+0x10/0x10 [ 1870.742068][ T1634] ? __pfx_kthread+0x10/0x10 [ 1870.746655][ T1634] ? _raw_spin_unlock_irq+0x23/0x50 [ 1870.752869][ T1634] ? lockdep_hardirqs_on+0x9c/0x150 [ 1870.759044][ T1634] ? __pfx_kthread+0x10/0x10 [ 1870.763679][ T1634] ret_from_fork+0x4bc/0x870 [ 1870.768747][ T1634] ? __pfx_ret_from_fork+0x10/0x10 [ 1870.773898][ T1634] ? __switch_to_asm+0x39/0x70 [ 1870.778969][ T1634] ? __switch_to_asm+0x33/0x70 [ 1870.783739][ T1634] ? __pfx_kthread+0x10/0x10 [ 1870.788484][ T1634] ret_from_fork_asm+0x1a/0x30 [ 1870.793263][ T1634] [ 1870.796297][ T1634] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1870.803591][ T1634] CPU: 1 UID: 0 PID: 1634 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 1870.813035][ T1634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1870.823193][ T1634] Workqueue: netns cleanup_net [ 1870.827956][ T1634] Call Trace: [ 1870.831228][ T1634] [ 1870.834147][ T1634] dump_stack_lvl+0x99/0x250 [ 1870.838738][ T1634] ? __asan_memcpy+0x40/0x70 [ 1870.843318][ T1634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1870.848511][ T1634] ? __pfx__printk+0x10/0x10 [ 1870.853111][ T1634] vpanic+0x237/0x6d0 [ 1870.857092][ T1634] ? __pfx_vpanic+0x10/0x10 [ 1870.861603][ T1634] panic+0xb9/0xc0 [ 1870.865328][ T1634] ? __pfx_panic+0x10/0x10 [ 1870.869744][ T1634] __warn+0x31b/0x4b0 [ 1870.873724][ T1634] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 1870.879436][ T1634] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 1870.885163][ T1634] report_bug+0x2be/0x4f0 [ 1870.889553][ T1634] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 1870.895263][ T1634] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 1870.900984][ T1634] ? drv_unassign_vif_chanctx+0x50d/0x7e0 [ 1870.906730][ T1634] handle_bug+0x84/0x160 [ 1870.910977][ T1634] exc_invalid_op+0x1a/0x50 [ 1870.915477][ T1634] asm_exc_invalid_op+0x1a/0x20 [ 1870.920324][ T1634] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 [ 1870.926746][ T1634] Code: 8d 8d 48 0a 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 00 40 89 8c e8 b6 e0 cd f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 a7 c4 0a f7 90 0f 0b 90 42 80 7c 3d [ 1870.946786][ T1634] RSP: 0000:ffffc90010b0f220 EFLAGS: 00010246 [ 1870.952857][ T1634] RAX: 90a28dcbe0585100 RBX: 0000000000000000 RCX: ffff88802dc99e40 [ 1870.960912][ T1634] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1870.968881][ T1634] RBP: ffff888060cf97b8 R08: 0000000000000003 R09: 0000000000000004 [ 1870.976850][ T1634] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffff888060cfaa80 [ 1870.984815][ T1634] R13: ffff888060cf8d80 R14: 1ffff1100c19f2f7 R15: dffffc0000000000 [ 1870.992835][ T1634] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 1870.998835][ T1634] __ieee80211_link_release_channel+0x33b/0x4a0 [ 1871.005070][ T1634] ? __pfx_ieee80211_uninit+0x10/0x10 [ 1871.010528][ T1634] unregister_netdevice_many_notify+0x1cde/0x2390 [ 1871.016947][ T1634] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1871.023798][ T1634] ? __pfx_call_rcu+0x10/0x10 [ 1871.028480][ T1634] unregister_netdevice_queue+0x33c/0x380 [ 1871.034202][ T1634] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1871.040455][ T1634] _cfg80211_unregister_wdev+0x165/0x590 [ 1871.046094][ T1634] ieee80211_remove_interfaces+0x49a/0x6e0 [ 1871.051901][ T1634] ? __pfx_synchronize_rcu+0x10/0x10 [ 1871.057187][ T1634] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 1871.063525][ T1634] ? rcu_is_watching+0x15/0xb0 [ 1871.068290][ T1634] ieee80211_unregister_hw+0x5d/0x2c0 [ 1871.073694][ T1634] mac80211_hwsim_del_radio+0x275/0x460 [ 1871.079231][ T1634] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1871.085299][ T1634] hwsim_exit_net+0xef4/0xfb0 [ 1871.089978][ T1634] ? hwsim_exit_net+0x333/0xfb0 [ 1871.094826][ T1634] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1871.100027][ T1634] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 1871.105828][ T1634] ops_undo_list+0x49a/0x990 [ 1871.110499][ T1634] ? __pfx_ops_undo_list+0x10/0x10 [ 1871.115605][ T1634] ? do_raw_spin_unlock+0x122/0x240 [ 1871.120802][ T1634] cleanup_net+0x4d8/0x820 [ 1871.125218][ T1634] ? __pfx_cleanup_net+0x10/0x10 [ 1871.130153][ T1634] ? _raw_spin_unlock_irq+0x23/0x50 [ 1871.135528][ T1634] ? process_scheduled_works+0x9ef/0x17b0 [ 1871.141240][ T1634] ? process_scheduled_works+0x9ef/0x17b0 [ 1871.147042][ T1634] process_scheduled_works+0xae1/0x17b0 [ 1871.152610][ T1634] ? __pfx_process_scheduled_works+0x10/0x10 [ 1871.158618][ T1634] worker_thread+0x8a0/0xda0 [ 1871.163558][ T1634] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1871.169920][ T1634] ? __kthread_parkme+0x7b/0x200 [ 1871.174868][ T1634] kthread+0x711/0x8a0 [ 1871.178949][ T1634] ? __pfx_worker_thread+0x10/0x10 [ 1871.184051][ T1634] ? __pfx_kthread+0x10/0x10 [ 1871.188641][ T1634] ? _raw_spin_unlock_irq+0x23/0x50 [ 1871.193834][ T1634] ? lockdep_hardirqs_on+0x9c/0x150 [ 1871.199054][ T1634] ? __pfx_kthread+0x10/0x10 [ 1871.203729][ T1634] ret_from_fork+0x4bc/0x870 [ 1871.208400][ T1634] ? __pfx_ret_from_fork+0x10/0x10 [ 1871.213605][ T1634] ? __switch_to_asm+0x39/0x70 [ 1871.218358][ T1634] ? __switch_to_asm+0x33/0x70 [ 1871.223110][ T1634] ? __pfx_kthread+0x10/0x10 [ 1871.227706][ T1634] ret_from_fork_asm+0x1a/0x30 [ 1871.232488][ T1634] [ 1871.235895][ T1634] Kernel Offset: disabled [ 1871.240210][ T1634] Rebooting in 86400 seconds..