last executing test programs: 13.756895672s ago: executing program 1 (id=35): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x2000, 0x0) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0xfc49}, 0x1, 0x0, 0x0, 0x400c080}, 0x24004151) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000140)={@hyper, 0x6}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbde0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x72c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], 0x1, 0x400}) openat$nullb(0xffffffffffffff9c, 0x0, 0x185202, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000a80)=""/188, 0xba) write$char_usb(r4, &(0x7f0000000080)='B', 0x1) syz_usb_disconnect(r3) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x4040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000900)={"68bbb6ea", 0xb, 0x0, 0x7, 0xfffffffa, 0x0, "919a0a4fdb511c71eefe0d0819dbaf", "99a7e21a", "fb5938eb", "b47dbaa2", ["883c358f07b0faebaf1d1eff", "d132326400d83758ba4ae902", "e7b14e762a6154e16f4864fc", "f9ad6889a5615c1ec88ee307"]}) r5 = epoll_create(0x3ff) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000280)={0x2000000}) 9.8757089s ago: executing program 3 (id=43): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/sync_on_suspend', 0x149a82, 0x4) recvmsg$can_j1939(r0, 0x0, 0x10100) r1 = syz_io_uring_setup(0x1f8c, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x131, 0x0, r0}, 0x0, 0x0, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x28, r5, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0x980915, 0x7}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) fdatasync(r1) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b000100000000090400000101", @ANYRES32], 0x0) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000240)=0x1, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r10, &(0x7f0000000100)=[{&(0x7f0000000080)="0180000000000000"}], 0x10000000000002db, 0x200, 0x1000, 0x13) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="5400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x804) 9.608331482s ago: executing program 1 (id=44): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) shutdown(r0, 0x0) 8.932946249s ago: executing program 1 (id=46): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x1b4, 0x111, 0x4b4, 0x1b4, 0xd4feffff, 0x2c0, 0x20a, 0x278, 0x2c0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @remote, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x190, 0x1b4, 0x0, {}, [@common=@inet=@tcp={{0x2c}, {[], [], 0x0, 0x20, 0x4, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa, 0x3}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff], 'bond0\x00', 'pim6reg1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x430) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 8.174443137s ago: executing program 1 (id=49): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/sync_on_suspend', 0x149a82, 0x4) recvmsg$can_j1939(r0, 0x0, 0x10100) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b000100000000090400000101", @ANYRES32], 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r2, 0x0, 0x0, 0x200, 0x1000, 0x13) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="5400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0], 0x54}}, 0x804) 7.995683026s ago: executing program 2 (id=50): unshare(0x2a020480) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0xa, &(0x7f0000000000)=0x3, 0x4) 7.358392893s ago: executing program 3 (id=53): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x5, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 7.055991828s ago: executing program 2 (id=54): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x2000, 0x0) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0xfc49}, 0x1, 0x0, 0x0, 0x400c080}, 0x24004151) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000140)={@hyper, 0x6}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbde0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x72c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], 0x1, 0x400}) openat$nullb(0xffffffffffffff9c, 0x0, 0x185202, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000a80)=""/188, 0xba) write$char_usb(r4, &(0x7f0000000080)='B', 0x1) syz_usb_disconnect(r3) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x4040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000900)={"68bbb6ea", 0xb, 0x0, 0x7, 0xfffffffa, 0x0, "919a0a4fdb511c71eefe0d0819dbaf", "99a7e21a", "fb5938eb", "b47dbaa2", ["883c358f07b0faebaf1d1eff", "d132326400d83758ba4ae902", "e7b14e762a6154e16f4864fc", "f9ad6889a5615c1ec88ee307"]}) r5 = epoll_create(0x3ff) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000280)={0x2000000}) 6.938179566s ago: executing program 4 (id=55): syz_emit_ethernet(0x46, &(0x7f0000001200)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0xff, @private2, @remote, {[@fragment={0x3a, 0x0, 0x3, 0x1, 0x0, 0x16, 0x67}], {0x0, 0x500, 0x8}}}}}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/crypto\x00', 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000001180), &(0x7f00000011c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f00000010c0)='.dead\x00', &(0x7f0000001100)={'syz', 0x3}, &(0x7f0000001140)='\x00', r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000001280)={0x5, 0x6, 0x7f, 0x7ff, 0x6}) fsmount(r2, 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) getdents64(r3, &(0x7f00000000c0)=""/55, 0x37) lseek(r3, 0x1, 0x0) 6.565536859s ago: executing program 3 (id=56): socket$inet(0x2, 0xa, 0x4000000) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_getoverrun(r0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) 6.431464376s ago: executing program 0 (id=57): r0 = syz_open_dev$sg(&(0x7f0000000480), 0xfffffffffffffffa, 0x1841) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000500)="9b7385220700000000000000e57c489b51b14b7aea6ef45d0c085cb7df42ccf49eabcf03d0e97bb857dbd8d553a187d0", 0x30}, {&(0x7f0000000540)='S\x00', 0x2}], 0x2) 6.113869135s ago: executing program 4 (id=58): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0x1}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.764213329s ago: executing program 1 (id=59): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) ioctl$HIDIOCGUSAGE(r2, 0x501c4814, &(0x7f0000000000)={0x3, 0xffffffff, 0x0, 0xfffff803}) ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000100)) 5.724079828s ago: executing program 0 (id=60): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) unshare(0x22000600) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(0x0) write(r2, &(0x7f0000000240)="94", 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666", 0xac}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb7", 0x88}], 0x2, 0x0) tee(r1, 0xffffffffffffffff, 0x8f5, 0x100000000000000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write(r3, 0x0, 0x0) setrlimit(0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101142, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000002c0)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="000d05"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000a00)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) mq_open(0x0, 0x8c2, 0xb3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x80000001, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x4, 0x6, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x5, 0x1ff, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x88, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x402, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x4251, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3fe, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0x6d5f, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0x7, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x2, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x0, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x9, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x8, 0x5597, 0x3, 0x804, 0x7fff, 0x62, 0xfffeffff, 0x5, 0x0, 0x7fffffff, 0x3, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0xcb4, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x10001, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x9, 0x28000, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe68, 0x10, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0xc010) munlock(&(0x7f0000009000/0x2000)=nil, 0x2000) 5.227759019s ago: executing program 4 (id=61): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x22020600) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) 4.573288715s ago: executing program 4 (id=62): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) 3.963603257s ago: executing program 4 (id=63): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/sync_on_suspend', 0x149a82, 0x4) recvmsg$can_j1939(r0, 0x0, 0x10100) r1 = syz_io_uring_setup(0x1f8c, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x131, 0x0, r0}, 0x0, 0x0, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x28, r5, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0x980915, 0x7}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) fdatasync(r1) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b000100000000090400000101", @ANYRES32], 0x0) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000240)=0x1, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r10, &(0x7f0000000100)=[{&(0x7f0000000080)="0180000000000000"}], 0x10000000000002db, 0x200, 0x1000, 0x13) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="5400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x804) 3.433666175s ago: executing program 2 (id=64): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) readv(r0, &(0x7f0000001a00)=[{&(0x7f0000000000)=""/207, 0xcf}, {0x0}], 0x2) 2.555184264s ago: executing program 0 (id=65): syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x2) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x0, 0x1, 0x7f}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 2.248847245s ago: executing program 2 (id=66): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x5, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 2.162909441s ago: executing program 3 (id=67): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x28000) 1.861487857s ago: executing program 0 (id=68): syz_emit_ethernet(0x46, &(0x7f0000001200)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0xff, @private2, @remote, {[@fragment={0x3a, 0x0, 0x3, 0x1, 0x0, 0x16, 0x67}], {0x0, 0x500, 0x8}}}}}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/crypto\x00', 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000001180), &(0x7f00000011c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f00000010c0)='.dead\x00', &(0x7f0000001100)={'syz', 0x3}, &(0x7f0000001140)='\x00', r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000001280)={0x5, 0x6, 0x7f, 0x7ff, 0x6}) fsmount(r2, 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) getdents64(r3, &(0x7f00000000c0)=""/55, 0x37) lseek(r3, 0x1, 0x0) 1.70984959s ago: executing program 1 (id=69): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/sync_on_suspend', 0x149a82, 0x4) recvmsg$can_j1939(r0, 0x0, 0x10100) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b000100000000090400000101", @ANYRES32], 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r2, 0x0, 0x0, 0x200, 0x1000, 0x13) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="5400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0], 0x54}}, 0x804) 1.506627965s ago: executing program 4 (id=70): write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x3e) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="071101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x0, 0x2, 0x4, &(0x7f0000000000)={0x11, "911abe91131444c214b5363f2fa313c4c0056737c50400070000005efb6d7d73ec"}}) 1.384672405s ago: executing program 2 (id=71): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x0, 0xffff3d7a, 0x101, 0x14000, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) timerfd_settime(r3, 0x1, &(0x7f0000000000)={{0x77359400}}, &(0x7f00000001c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f00000002c0), 0x0}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x60, 0x43, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x1, r5}, 0x38) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r5, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xce54, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x2, 0x10}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, 0x0, &(0x7f0000000500)}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0), 0x10, 0x5}, 0x94) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r7, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) 1.37002369s ago: executing program 3 (id=72): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x22020600) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) 872.897922ms ago: executing program 0 (id=73): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) 435.440562ms ago: executing program 3 (id=74): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x2000, 0x0) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0xfc49}, 0x1, 0x0, 0x0, 0x400c080}, 0x24004151) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000140)={@hyper, 0x6}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbde0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x72c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], 0x1, 0x400}) openat$nullb(0xffffffffffffff9c, 0x0, 0x185202, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000a80)=""/188, 0xba) write$char_usb(r4, &(0x7f0000000080)='B', 0x1) syz_usb_disconnect(r3) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x4040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000900)={"68bbb6ea", 0xb, 0x0, 0x7, 0xfffffffa, 0x0, "919a0a4fdb511c71eefe0d0819dbaf", "99a7e21a", "fb5938eb", "b47dbaa2", ["883c358f07b0faebaf1d1eff", "d132326400d83758ba4ae902", "e7b14e762a6154e16f4864fc", "f9ad6889a5615c1ec88ee307"]}) r5 = epoll_create(0x3ff) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000280)={0x2000000}) 219.610491ms ago: executing program 2 (id=75): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) write$char_usb(r1, &(0x7f0000000080)='B', 0x1) syz_usb_disconnect(r0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x4040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000000}) 0s ago: executing program 0 (id=76): syz_emit_ethernet(0x46, &(0x7f0000001200)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0xff, @private2, @remote, {[@fragment={0x3a, 0x0, 0x3, 0x1, 0x0, 0x16, 0x67}], {0x0, 0x500, 0x8}}}}}}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/crypto\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000001180), &(0x7f00000011c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f00000010c0)='.dead\x00', &(0x7f0000001100)={'syz', 0x3}, &(0x7f0000001140)='\x00', r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000001280)={0x5, 0x6, 0x7f, 0x7ff, 0x6}) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x4}) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000040)=@v3={0x3000000, [{}, {0xfff7ffff}]}, 0x18, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getdents64(r5, &(0x7f00000000c0)=""/55, 0x37) preadv(r0, &(0x7f0000002140)=[{0x0}], 0x1, 0x33, 0x0) write$tun(r0, &(0x7f0000000000)={@void, @val={0x0, 0x80, 0xa, 0x4, 0x2, 0xffff}, @x25={0x3, 0x42, 0xf7, "e530c4947229c6d501f4eee1b9fb22004967cec79ca8be54c0b4842b7678c472a1f1a7c35e285633e137b0518e21f74ba763c018cef8c9ac4e1aad54d683d3d94257b502120f0d98282ea8fbcb5195090f78024b0f6a7d"}}, 0x64) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. [ 155.718399][ T5565] cgroup: Unknown subsys name 'net' [ 155.842013][ T5565] cgroup: Unknown subsys name 'cpuset' [ 155.861439][ T5565] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 161.498003][ T5565] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 165.683385][ T5585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.692669][ T5585] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.701688][ T5585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.716868][ T5585] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.722029][ T5588] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.727743][ T5585] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.733333][ T5588] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.753342][ T5588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.770584][ T4879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.781860][ T5585] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.791625][ T5588] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.801319][ T5588] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.811363][ T5588] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.836514][ T5585] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.849107][ T5585] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.850247][ T5588] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.861542][ T5585] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.872992][ T5585] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.892471][ T5585] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.910041][ T5585] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.926405][ T5588] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.941565][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.950707][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.964537][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.979841][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.794134][ T5585] Bluetooth: hci0: command tx timeout [ 167.886557][ T5585] Bluetooth: hci1: command tx timeout [ 167.952721][ T5585] Bluetooth: hci3: command tx timeout [ 167.958394][ T48] Bluetooth: hci2: command tx timeout [ 168.032532][ T5585] Bluetooth: hci4: command tx timeout [ 169.876706][ T5585] Bluetooth: hci0: command tx timeout [ 169.954208][ T5585] Bluetooth: hci1: command tx timeout [ 170.033757][ T5585] Bluetooth: hci3: command tx timeout [ 170.038034][ T48] Bluetooth: hci2: command tx timeout [ 170.115900][ T48] Bluetooth: hci4: command tx timeout [ 170.294119][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.303298][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.311697][ T5591] bridge_slave_0: entered allmulticast mode [ 170.322185][ T5591] bridge_slave_0: entered promiscuous mode [ 170.337851][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.365847][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.376024][ T5596] bridge_slave_0: entered allmulticast mode [ 170.386302][ T5596] bridge_slave_0: entered promiscuous mode [ 170.432203][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.440170][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.448236][ T5591] bridge_slave_1: entered allmulticast mode [ 170.457136][ T5591] bridge_slave_1: entered promiscuous mode [ 170.496343][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.503929][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.511507][ T5596] bridge_slave_1: entered allmulticast mode [ 170.520202][ T5596] bridge_slave_1: entered promiscuous mode [ 170.530403][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.538050][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.546011][ T5592] bridge_slave_0: entered allmulticast mode [ 170.554661][ T5592] bridge_slave_0: entered promiscuous mode [ 170.657690][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.665517][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.673121][ T5592] bridge_slave_1: entered allmulticast mode [ 170.681193][ T5592] bridge_slave_1: entered promiscuous mode [ 170.743791][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.798745][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.806654][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.814202][ T5584] bridge_slave_0: entered allmulticast mode [ 170.822074][ T5584] bridge_slave_0: entered promiscuous mode [ 170.832739][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.840285][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.847877][ T5583] bridge_slave_0: entered allmulticast mode [ 170.855861][ T5583] bridge_slave_0: entered promiscuous mode [ 170.873346][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.889716][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.921985][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.929921][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.937755][ T5584] bridge_slave_1: entered allmulticast mode [ 170.945914][ T5584] bridge_slave_1: entered promiscuous mode [ 170.956144][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.963762][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.971099][ T5583] bridge_slave_1: entered allmulticast mode [ 170.979970][ T5583] bridge_slave_1: entered promiscuous mode [ 171.017694][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.034322][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.190867][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.294813][ T5591] team0: Port device team_slave_0 added [ 171.354607][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.371442][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.388358][ T5591] team0: Port device team_slave_1 added [ 171.400500][ T5596] team0: Port device team_slave_0 added [ 171.413977][ T5592] team0: Port device team_slave_0 added [ 171.427088][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.442976][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.508503][ T5596] team0: Port device team_slave_1 added [ 171.520338][ T5592] team0: Port device team_slave_1 added [ 171.602940][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.610343][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.636557][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.737187][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.744645][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.770924][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.806495][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.813880][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.840097][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.858606][ T5584] team0: Port device team_slave_0 added [ 171.871926][ T5583] team0: Port device team_slave_0 added [ 171.915085][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.922148][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.948773][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.959718][ T48] Bluetooth: hci0: command tx timeout [ 171.966102][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.973492][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.999856][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.014032][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.021402][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.047743][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.047875][ T48] Bluetooth: hci1: command tx timeout [ 172.069203][ T5584] team0: Port device team_slave_1 added [ 172.080620][ T5583] team0: Port device team_slave_1 added [ 172.112646][ T48] Bluetooth: hci2: command tx timeout [ 172.114882][ T5585] Bluetooth: hci3: command tx timeout [ 172.203975][ T5585] Bluetooth: hci4: command tx timeout [ 172.287407][ T5591] hsr_slave_0: entered promiscuous mode [ 172.295636][ T5591] hsr_slave_1: entered promiscuous mode [ 172.306430][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.313687][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.339829][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.353704][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.360815][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.387066][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.449242][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.456715][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.483022][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.496560][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.504070][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.530396][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.602928][ T5592] hsr_slave_0: entered promiscuous mode [ 172.611274][ T5592] hsr_slave_1: entered promiscuous mode [ 172.619376][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 172.625302][ T5592] Cannot create hsr debugfs directory [ 172.678482][ T5596] hsr_slave_0: entered promiscuous mode [ 172.686896][ T5596] hsr_slave_1: entered promiscuous mode [ 172.694828][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 172.700643][ T5596] Cannot create hsr debugfs directory [ 173.021289][ T5584] hsr_slave_0: entered promiscuous mode [ 173.029649][ T5584] hsr_slave_1: entered promiscuous mode [ 173.037523][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 173.043819][ T5584] Cannot create hsr debugfs directory [ 173.082086][ T5583] hsr_slave_0: entered promiscuous mode [ 173.090375][ T5583] hsr_slave_1: entered promiscuous mode [ 173.098313][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 173.104761][ T5583] Cannot create hsr debugfs directory [ 174.034122][ T5585] Bluetooth: hci0: command tx timeout [ 174.113196][ T5591] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.113470][ T5585] Bluetooth: hci1: command tx timeout [ 174.147629][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.157638][ T5591] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.176016][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.186073][ T5591] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.194628][ T5585] Bluetooth: hci3: command tx timeout [ 174.202827][ T5585] Bluetooth: hci2: command tx timeout [ 174.212077][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.222214][ T5591] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.240097][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.273432][ T5585] Bluetooth: hci4: command tx timeout [ 174.349454][ T5596] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 174.380537][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.390678][ T5596] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 174.409223][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.419739][ T5596] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 174.439270][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.451733][ T5596] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.471057][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.643473][ T5592] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.661503][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.672519][ T5592] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.690354][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.717777][ T5592] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.736912][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.766548][ T5592] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.786067][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.951316][ T5584] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.970888][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.990009][ T5584] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 175.010222][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.056512][ T5584] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 175.077355][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.126714][ T5584] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 175.147398][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.311698][ T5583] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.336979][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.349176][ T5583] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.366525][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.378291][ T5583] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.397936][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.407657][ T5583] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.431061][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.771087][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.788499][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.922225][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.999364][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.038438][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.045988][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.084899][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.092207][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.148838][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.156417][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.172755][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.180219][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.278453][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.589262][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.609077][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.641471][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.717845][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.725361][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.796435][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.803852][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.859048][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.940606][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.992438][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.000143][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.109525][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.117099][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.161265][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.168830][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.335290][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.342817][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.416730][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.919259][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.216503][ T5591] veth0_vlan: entered promiscuous mode [ 180.399842][ T5591] veth1_vlan: entered promiscuous mode [ 180.609518][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.758345][ T5596] veth0_vlan: entered promiscuous mode [ 181.002120][ T5591] veth0_macvtap: entered promiscuous mode [ 181.032456][ T5596] veth1_vlan: entered promiscuous mode [ 181.076889][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.119823][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.134738][ T5591] veth1_macvtap: entered promiscuous mode [ 181.396690][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.539000][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.569472][ T5596] veth0_macvtap: entered promiscuous mode [ 181.660181][ T5596] veth1_macvtap: entered promiscuous mode [ 181.690155][ T1114] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.699668][ T1114] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.745747][ T1114] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.754973][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.852968][ T5583] veth0_vlan: entered promiscuous mode [ 181.876564][ T5584] veth0_vlan: entered promiscuous mode [ 181.951819][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.002270][ T5583] veth1_vlan: entered promiscuous mode [ 182.043764][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.076781][ T5584] veth1_vlan: entered promiscuous mode [ 182.209957][ T440] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.223181][ T440] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.290136][ T440] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.307749][ T440] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.471346][ T5592] veth0_vlan: entered promiscuous mode [ 182.528272][ T5583] veth0_macvtap: entered promiscuous mode [ 182.635970][ T5583] veth1_macvtap: entered promiscuous mode [ 182.714588][ T5592] veth1_vlan: entered promiscuous mode [ 182.801288][ T5584] veth0_macvtap: entered promiscuous mode [ 182.913007][ T5584] veth1_macvtap: entered promiscuous mode [ 182.978440][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.151759][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.291455][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.314075][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.363161][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.371245][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.390056][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.488533][ T5592] veth0_macvtap: entered promiscuous mode [ 183.549195][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.610224][ T5592] veth1_macvtap: entered promiscuous mode [ 183.704871][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.746747][ T1089] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.799143][ T1089] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.840283][ T1089] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.972073][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.096845][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.235585][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.270341][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.315052][ T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.338551][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.720308][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.750117][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.069249][ T440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.110389][ T440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.452480][ T440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.486610][ T440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.637942][ T5591] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 187.691590][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.732517][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.159546][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.190230][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.346958][ T807] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 189.453960][ T440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.480034][ T440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.531368][ T807] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 189.592799][ T807] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 189.643384][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 189.688959][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 189.728887][ T807] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.790678][ T807] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 189.837954][ T807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.856394][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.883959][ T807] usb 3-1: Product: syz [ 189.897907][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.909912][ T807] usb 3-1: Manufacturer: syz [ 189.944387][ T807] usb 3-1: SerialNumber: syz [ 189.957924][ T807] usb 3-1: config 0 descriptor?? [ 190.007157][ T807] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 190.032145][ T5854] netlink: 'syz.3.8': attribute type 1 has an invalid length. [ 190.032888][ T807] imon 3-1:0.0: unable to initialize intf0, err -90 [ 190.071879][ T807] imon:imon_probe: failed to initialize context! [ 190.103679][ T807] imon 3-1:0.0: unable to register, err -19 [ 190.212240][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.240793][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.395598][ T440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.455181][ T440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.599768][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.632187][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.777119][ T5858] Zero length message leads to an empty skb [ 194.183248][ T5685] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 194.392255][ T5685] usb 4-1: Using ep0 maxpacket: 8 [ 194.497444][ T5685] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 194.578277][ T5685] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 194.821984][ T5685] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 194.904626][ T5685] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 194.954335][ T5685] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 195.044103][ T5685] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 195.175623][ T5685] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 195.226546][ T5685] usb 4-1: config 168 interface 0 has no altsetting 0 [ 195.248994][ T5685] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 195.256967][ T5685] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 195.311767][ T5685] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 195.341819][ T5685] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.369455][ T5685] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 195.414354][ T5685] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 195.457636][ T5685] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 195.521273][ T5685] usb 4-1: config 168 interface 0 has no altsetting 0 [ 195.560598][ T5685] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 195.590551][ T5685] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 195.639847][ T5685] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 195.681362][ T5685] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.722852][ T5685] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 195.764146][ T5685] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 195.827142][ T5685] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 195.891578][ T5685] usb 4-1: config 168 interface 0 has no altsetting 0 [ 195.972042][ T5685] usb 4-1: string descriptor 0 read error: -22 [ 195.984181][ T5685] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 196.029632][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.156420][ T5685] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 196.334633][ T807] usb 4-1: USB disconnect, device number 2 [ 196.611502][ T5685] usb 3-1: USB disconnect, device number 2 [ 198.568877][ T5685] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 198.866955][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.881134][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.893472][ T5685] usb 2-1: Using ep0 maxpacket: 16 [ 198.914931][ T5685] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.923863][ T5685] usb 2-1: config 0 has no interface number 0 [ 198.930200][ T5685] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.942255][ T5685] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.955341][ T5685] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 198.966463][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.000998][ T5685] usb 2-1: config 0 descriptor?? [ 199.273352][ T5920] syz.3.25 (5920): drop_caches: 2 [ 199.665406][ T5685] uclogic 0003:28BD:0071.0001: pen parameters not found [ 199.688978][ T5685] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring [ 199.745851][ T2090] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 199.985782][ T2090] usb 3-1: Using ep0 maxpacket: 8 [ 200.132409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 200.723984][ T5685] usb 2-1: USB disconnect, device number 2 [ 202.228176][ T2090] usb 3-1: unable to get BOS descriptor or descriptor too short [ 202.259028][ T2090] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 202.291740][ T2090] usb 3-1: can't read configurations, error -71 [ 202.644274][ T5685] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 202.836486][ T5685] usb 1-1: Using ep0 maxpacket: 16 [ 202.885825][ T5685] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 202.932200][ T5685] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.989516][ T5685] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.032762][ T5685] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 203.072827][ T5685] usb 1-1: config 7 interface 0 has no altsetting 0 [ 203.120214][ T5685] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 203.150871][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.030051][ T5685] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0002/input/input5 [ 204.113934][ T2090] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 204.180099][ T5685] kye 0003:0458:5010.0002: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 204.345202][ T2090] usb 2-1: Using ep0 maxpacket: 8 [ 204.355885][ T5685] usb 1-1: USB disconnect, device number 2 [ 204.401044][ T2090] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 204.454940][ T2090] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 204.530967][ T2090] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 204.640497][ T2090] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.707449][ T2090] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 204.757542][ T2090] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 204.816703][ T2090] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 204.904754][ T2090] usb 2-1: config 168 interface 0 has no altsetting 0 [ 204.960017][ T2090] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 205.004795][ T2090] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 205.097567][ T2090] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 205.154341][ T2090] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.211377][ T5952] fido_id[5952]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 205.226039][ T2090] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.268483][ T2090] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 205.354404][ T2090] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 205.408300][ T2090] usb 2-1: config 168 interface 0 has no altsetting 0 [ 205.489511][ T2090] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 205.525058][ T2090] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 205.572764][ T2090] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 205.622757][ T2090] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.701586][ T2090] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.778401][ T2090] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 205.853957][ T2090] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 205.928166][ T2090] usb 2-1: config 168 interface 0 has no altsetting 0 [ 205.991751][ T2090] usb 2-1: string descriptor 0 read error: -22 [ 206.007128][ T2090] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 206.031445][ T2090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.150133][ T2090] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 206.352604][ T2090] usb 2-1: USB disconnect, device number 3 [ 206.733933][ T5685] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 206.932610][ T5685] usb 3-1: Using ep0 maxpacket: 16 [ 206.962598][ T5685] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 207.020893][ T5685] usb 3-1: config 0 has no interface number 0 [ 207.057271][ T5685] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.108358][ T5685] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.149276][ T5685] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 207.212212][ T5685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.316433][ T5685] usb 3-1: config 0 descriptor?? [ 207.989845][ T5685] uclogic 0003:28BD:0071.0003: pen parameters not found [ 208.035679][ T5685] uclogic 0003:28BD:0071.0003: interface is invalid, ignoring [ 208.142935][ T807] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 208.372118][ T807] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 208.422623][ T807] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.489009][ T807] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 208.532774][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.559394][ T807] usb 4-1: config 0 descriptor?? [ 208.831328][ T5966] netlink: 28 bytes leftover after parsing attributes in process `syz.3.43'. [ 208.880396][ T807] usb 4-1: string descriptor 0 read error: -71 [ 209.038293][ T5685] usb 3-1: USB disconnect, device number 5 [ 209.511231][ T807] usb 4-1: USB disconnect, device number 3 [ 209.783073][ T5685] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 209.992255][ T5685] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 210.049947][ T5685] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 210.117109][ T5685] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 210.164033][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.213789][ T5685] usb 2-1: config 0 descriptor?? [ 210.502890][ T5685] usb 2-1: string descriptor 0 read error: -71 [ 210.848479][ T5994] syz.3.56 uses obsolete (PF_INET,SOCK_PACKET) [ 210.853891][ T2090] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 211.053138][ T2090] usb 3-1: Using ep0 maxpacket: 8 [ 211.076571][ T5685] usb 2-1: USB disconnect, device number 4 [ 211.108017][ T2090] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 211.143391][ T2090] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 211.210263][ T2090] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 211.261079][ T2090] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.335252][ T2090] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 211.365407][ T2090] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 211.437405][ T2090] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 211.499345][ T2090] usb 3-1: config 168 interface 0 has no altsetting 0 [ 211.534897][ T2090] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 211.555642][ T2090] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 211.611254][ T2090] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 211.669206][ T2090] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.733671][ T2090] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 211.796320][ T2090] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 211.841537][ T2090] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 211.878512][ T2090] usb 3-1: config 168 interface 0 has no altsetting 0 [ 211.910980][ T2090] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 211.919585][ T2090] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 211.948863][ T2090] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 212.004998][ T2090] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.063205][ T807] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 212.104178][ T2090] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 212.151236][ T2090] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 212.180113][ T2090] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 212.214951][ T2090] usb 3-1: config 168 interface 0 has no altsetting 0 [ 212.253045][ T2090] usb 3-1: string descriptor 0 read error: -22 [ 212.260441][ T2090] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 212.263458][ T807] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.281025][ T5685] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 212.285562][ T2090] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.357024][ T807] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 212.368255][ T2090] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 212.411482][ T807] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.437227][ T5685] usb 1-1: Using ep0 maxpacket: 16 [ 212.445893][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.454125][ T5685] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.454240][ T5685] usb 1-1: config 0 has no interface number 0 [ 212.454349][ T5685] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.518360][ T807] usb 2-1: config 0 descriptor?? [ 212.524173][ T5685] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.580660][ T5685] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 212.601522][ T807] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 212.639069][ T2090] usb 3-1: USB disconnect, device number 6 [ 212.646207][ T6006] usb 3-1: Couldn't submit interrupt_out_urb -19 [ 212.655465][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.704091][ T5685] usb 1-1: config 0 descriptor?? [ 213.356163][ T5685] uclogic 0003:28BD:0071.0004: pen parameters not found [ 213.381885][ T5685] uclogic 0003:28BD:0071.0004: interface is invalid, ignoring [ 213.825251][ T807] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 214.243590][ T807] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 214.410672][ T807] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.418392][ T5685] usb 1-1: USB disconnect, device number 3 [ 214.424832][ T807] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 214.441250][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.474193][ T807] usb 5-1: config 0 descriptor?? [ 214.717236][ T6014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.63'. [ 214.787010][ T807] usb 5-1: string descriptor 0 read error: -71 [ 215.309760][ T9] usb 2-1: USB disconnect, device number 5 [ 215.460963][ T807] usb 5-1: USB disconnect, device number 2 [ 216.082891][ T807] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 216.225359][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 216.308812][ T807] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 216.320826][ T6037] warning: `syz.2.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 216.358509][ T807] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.427600][ T807] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 216.459691][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.469973][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 216.510876][ T9] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 216.537255][ T807] usb 2-1: config 0 descriptor?? [ 216.560374][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.620021][ T9] usb 5-1: config 0 descriptor?? [ 216.809080][ T807] usb 2-1: string descriptor 0 read error: -71 [ 216.885452][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 216.962649][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 217.029778][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 217.060591][ T9] usb 5-1: media controller created [ 217.097389][ T6033] ===================================================== [ 217.105600][ T6033] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 217.119722][ T6033] _copy_to_user+0xcc/0x120 [ 217.131217][ T6033] i2cdev_ioctl_smbus+0x586/0x660 [ 217.136793][ T6033] compat_i2cdev_ioctl+0x48f/0xb40 [ 217.142242][ T6033] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 217.148126][ T6033] ia32_sys_call+0x2854/0x4360 [ 217.153356][ T6033] __do_fast_syscall_32+0x195/0x470 [ 217.159355][ T6033] do_fast_syscall_32+0x37/0x80 [ 217.164536][ T6033] do_SYSENTER_32+0x1f/0x30 [ 217.169196][ T6033] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.175951][ T6033] [ 217.178344][ T6033] Uninit was stored to memory at: [ 217.183744][ T6033] __i2c_smbus_xfer+0x2618/0x30a0 [ 217.188911][ T6033] i2c_smbus_xfer+0x2d8/0x480 [ 217.194343][ T6033] i2cdev_ioctl_smbus+0x4a1/0x660 [ 217.199601][ T6033] compat_i2cdev_ioctl+0x48f/0xb40 [ 217.206288][ T6033] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 217.214835][ T6033] ia32_sys_call+0x2854/0x4360 [ 217.219797][ T6033] __do_fast_syscall_32+0x195/0x470 [ 217.227305][ T6033] do_fast_syscall_32+0x37/0x80 [ 217.233961][ T6033] do_SYSENTER_32+0x1f/0x30 [ 217.238614][ T6033] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.245274][ T6033] [ 217.247675][ T6033] Local variable msgbuf1.i created at: [ 217.253478][ T6033] __i2c_smbus_xfer+0x97c/0x30a0 [ 217.258626][ T6033] i2c_smbus_xfer+0x2d8/0x480 [ 217.263597][ T6033] [ 217.265991][ T6033] Byte 1 of 2 is uninitialized [ 217.270835][ T6033] Memory access of size 2 starts at ffff888056c73c76 [ 217.277803][ T6033] Data copied to user address 0000000080000000 [ 217.284140][ T6033] [ 217.286673][ T6033] CPU: 0 UID: 0 PID: 6033 Comm: syz.4.70 Not tainted syzkaller #0 PREEMPT(lazy) [ 217.296080][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 217.306461][ T6033] ===================================================== [ 217.316462][ T6033] Disabling lock debugging due to kernel taint [ 217.469449][ T6033] Kernel panic - not syncing: kmsan.panic set ... [ 217.476563][ T6033] CPU: 0 UID: 0 PID: 6033 Comm: syz.4.70 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 217.487435][ T6033] Tainted: [B]=BAD_PAGE [ 217.491675][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 217.501859][ T6033] Call Trace: [ 217.505401][ T6033] [ 217.508415][ T6033] __dump_stack+0x26/0x30 [ 217.512912][ T6033] dump_stack_lvl+0x50/0x1c0 [ 217.517839][ T6033] ? dump_stack+0x12/0x25 [ 217.522331][ T6033] dump_stack+0x1e/0x25 [ 217.526637][ T6033] vpanic+0x7b4/0x1430 [ 217.530913][ T6033] panic+0x15d/0x160 [ 217.535037][ T6033] kmsan_report+0x31a/0x320 [ 217.539753][ T6033] ? kmsan_internal_check_memory+0x1e8/0x240 [ 217.545920][ T6033] ? kmsan_copy_to_user+0xef/0x190 [ 217.551243][ T6033] ? _copy_to_user+0xcc/0x120 [ 217.556077][ T6033] ? i2cdev_ioctl_smbus+0x586/0x660 [ 217.561464][ T6033] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 217.566927][ T6033] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 217.572859][ T6033] ? ia32_sys_call+0x2854/0x4360 [ 217.578000][ T6033] ? __do_fast_syscall_32+0x195/0x470 [ 217.583889][ T6033] ? do_fast_syscall_32+0x37/0x80 [ 217.589092][ T6033] ? do_SYSENTER_32+0x1f/0x30 [ 217.593975][ T6033] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.600783][ T6033] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 217.606267][ T6033] ? __i2c_transfer+0x1189/0x31c0 [ 217.611482][ T6033] ? kmsan_get_metadata+0xf1/0x160 [ 217.616797][ T6033] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 217.623333][ T6033] ? kmsan_get_metadata+0xf1/0x160 [ 217.628653][ T6033] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 217.634669][ T6033] ? __i2c_smbus_xfer+0x201d/0x30a0 [ 217.640021][ T6033] ? kmsan_get_metadata+0xf1/0x160 [ 217.645346][ T6033] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 217.651374][ T6033] kmsan_internal_check_memory+0x1e8/0x240 [ 217.657396][ T6033] kmsan_copy_to_user+0xef/0x190 [ 217.662536][ T6033] _copy_to_user+0xcc/0x120 [ 217.667202][ T6033] i2cdev_ioctl_smbus+0x586/0x660 [ 217.672442][ T6033] compat_i2cdev_ioctl+0x48f/0xb40 [ 217.677744][ T6033] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 217.683541][ T6033] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 217.689278][ T6033] ? fpregs_restore_userregs+0x211/0x3b0 [ 217.695284][ T6033] ? kmsan_get_metadata+0xf1/0x160 [ 217.700583][ T6033] ? kmsan_get_metadata+0xf1/0x160 [ 217.706867][ T6033] ia32_sys_call+0x2854/0x4360 [ 217.712026][ T6033] __do_fast_syscall_32+0x195/0x470 [ 217.717427][ T6033] do_fast_syscall_32+0x37/0x80 [ 217.722420][ T6033] do_SYSENTER_32+0x1f/0x30 [ 217.727060][ T6033] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.733589][ T6033] RIP: 0023:0xf703f01c [ 217.737784][ T6033] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 217.757611][ T6033] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 217.766170][ T6033] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 217.774238][ T6033] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.782306][ T6033] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.790373][ T6033] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 217.798435][ T6033] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.806532][ T6033] [ 217.809964][ T6033] Kernel Offset: disabled [ 217.815235][ T6033] Rebooting in 86400 seconds..