last executing test programs: 11.329492262s ago: executing program 2 (id=166): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc52f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10.847548611s ago: executing program 1 (id=167): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) clock_getres(0x4, 0x0) 8.970923114s ago: executing program 2 (id=173): syz_usb_connect(0x2, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.617192434s ago: executing program 1 (id=182): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00'}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sock_rcvqueue_full\x00', r5}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r4, 0x0, r7}, 0x10) 6.13072651s ago: executing program 1 (id=183): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc52f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.921758825s ago: executing program 2 (id=184): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b03, 0x0) read$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 5.091600493s ago: executing program 3 (id=187): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000043c0)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x0, @private2}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000011c0)="99", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 4.729252591s ago: executing program 3 (id=188): r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000140)={0x2, 0x100, 0x6, 0xf, 0x3, 0x7f}) 4.287430144s ago: executing program 3 (id=191): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000003c0)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) 3.820106079s ago: executing program 3 (id=193): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sock_rcvqueue_full\x00', r5}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r4, 0x0, r7}, 0x10) 3.543496995s ago: executing program 4 (id=195): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, [0xffffffff, 0x808000ff, 0xff000000, 0xff], [0x0, 0xff, 0xffffffff], 'team_slave_0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x2c, 0x84, 0x0, 0x1c}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x68a1, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x9, 0x9}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff000000, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xff000000, 0xffffff00], 'team_slave_0\x00', 'wlan1\x00', {}, {}, 0x11, 0x8, 0x7}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x1786, {0x52e}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.442028174s ago: executing program 1 (id=196): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1d, 0x3, 0x1) syz_emit_ethernet(0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff81001900080045ff001a0000a981c27015dc00"/44], 0x0) getsockopt$nfc_llcp(r0, 0x65, 0x2, 0x0, 0x20000028) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x20000000000, 0x822b01) poll(&(0x7f0000000000)=[{r7, 0x92e0}, {r6, 0x5021}], 0x2, 0x40000) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000100)) write$char_usb(r7, &(0x7f0000000040)="e2", 0x1068) mmap(&(0x7f0000569000/0x1000)=nil, 0x1000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') gettid() 3.39502816s ago: executing program 2 (id=197): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000100)=0x1) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) 3.244686707s ago: executing program 0 (id=198): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000043c0)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x0, @private2}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000011c0)="99", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 3.173899426s ago: executing program 3 (id=199): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0x6}, {0x6, 0x81, 0x4d}]}) write$ppp(r0, &(0x7f0000000300)="5ad9", 0x2) 2.994151571s ago: executing program 4 (id=200): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 2.863682648s ago: executing program 2 (id=201): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.766427976s ago: executing program 0 (id=202): r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) shutdown(r0, 0x1) write$binfmt_elf32(r0, 0x0, 0x58) 2.537488791s ago: executing program 2 (id=203): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f00000001c0)={0x103, 0x2, 0x5, 0xd0, "74dbd4de1be3e6df0af01d9c871c19ffab7e038bf9d28618941f419206c7ca28c7ce6f49d4d871ac2782a8899dddf96d9fb18b32a5eb5e2e45114a3a9d09488463709451940db3a0828d8a41c729843dd1e7f8681602c779970b205a0e59da9c196c54f3a90b7b9b20324185105fedf64abd9798a40f871b0094a85dad668d3e10a83c06f632ff5d8d065b97011d86be30d8f3d8501c93a544d446764d03a76815d66c52697f5d81ed3e729bacc5042135d922ad7a0fa8b071819cab5c7d5d6f4ea976893c72af93fef11dc689c83d4edb8ddc8d829845886b3b2583bbb0b16573fa7399be2a0970192aa3"}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r1 = syz_io_uring_setup(0x416d, &(0x7f00000010c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x59) 2.035270248s ago: executing program 3 (id=204): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0xd, 0x10) close(r1) syz_usb_disconnect(r0) 2.00388183s ago: executing program 0 (id=205): set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2042, 0x0) 1.732703056s ago: executing program 4 (id=206): signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r0, 0x1, &(0x7f0000001d00)=[0x0]) syz_io_uring_setup(0x21c6, 0x0, 0x0, 0x0) 1.642222205s ago: executing program 1 (id=207): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)) 1.420650656s ago: executing program 0 (id=208): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, 0x0) 1.054174921s ago: executing program 4 (id=209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000e2bac15d3b6641a215f099e26603a050337b2ccc70a9f928ba3c529bb6e7365e7e246317380f5884d79663e7fcaa89795d7b10e88378c33265a7af06040e3d0bbc6a5864dfa023c6ac1da574242785bbb4ece12b11da52496875e1e384042aad63a3094bf3bc0e40a79960f9f1610940e67e30611d9873d1e6cb9c4cce44c999c49ff52a6400192fd021d7158438d7686a6f66778022c93c544189b684754e7e0f77a4f498609e53104c8aa70632fcc58c757bbc06f6472622dce2729d7296959ce003ec84acd015e352484c42fc29e5aea62fb7977813f7254fd6f62fec638abf292e6c33925b29"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sock_rcvqueue_full\x00', r5}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r4, 0x0, r7}, 0x10) 908.510911ms ago: executing program 0 (id=210): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, [0xffffffff, 0x808000ff, 0xff000000, 0xff], [0x0, 0xff, 0xffffffff], 'team_slave_0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x2c, 0x84, 0x0, 0x1c}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x68a1, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x9, 0x9}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff000000, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xff000000, 0xffffff00], 'team_slave_0\x00', 'wlan1\x00', {}, {}, 0x11, 0x8, 0x7}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x1786, {0x52e}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 379.283624ms ago: executing program 4 (id=211): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000100)=0x1) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) 263.383187ms ago: executing program 0 (id=212): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="5c00000013006bcc9e3be3066e17aa31086b876c1d0000007ea60864160af36510002b0008000200300017d34460bc24eab556a705251e6182fffffffff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f698530000", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 74.38178ms ago: executing program 1 (id=213): r0 = socket$igmp(0x2, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x2) socket$inet6(0xa, 0x2, 0x0) 0s ago: executing program 4 (id=214): io_setup(0x8, 0x0) socket$l2tp6(0xa, 0x2, 0x73) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts. [ 174.869173][ T5772] cgroup: Unknown subsys name 'net' [ 174.997685][ T5772] cgroup: Unknown subsys name 'cpuset' [ 175.013295][ T5772] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 219.112181][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.119038][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 220.023984][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 225.299230][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.309191][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.318863][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.326981][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.337734][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.349131][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.358410][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.370820][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 225.380584][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 225.390923][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 225.406268][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.424843][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 225.454553][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.463077][ T5085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.472230][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.482805][ T5799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 225.492285][ T5085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.512873][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.522688][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.540076][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.554316][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 225.564229][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.572967][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.585610][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.596641][ T5085] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 225.605930][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.617128][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 225.626420][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 225.691910][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 225.705247][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 226.312762][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 226.738251][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 227.483835][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.491761][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.499712][ T5789] bridge_slave_0: entered allmulticast mode [ 227.509029][ T5789] bridge_slave_0: entered promiscuous mode [ 227.575605][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 227.595753][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.606693][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.614644][ T5789] bridge_slave_1: entered allmulticast mode [ 227.623527][ T5789] bridge_slave_1: entered promiscuous mode [ 227.639120][ T5791] Bluetooth: hci0: command tx timeout [ 227.657440][ T5791] Bluetooth: hci2: command tx timeout [ 227.697686][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.705381][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.713247][ T5794] bridge_slave_0: entered allmulticast mode [ 227.722146][ T5794] bridge_slave_0: entered promiscuous mode [ 227.737773][ T5791] Bluetooth: hci1: command tx timeout [ 227.800760][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 227.829883][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.839166][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.846826][ T5794] bridge_slave_1: entered allmulticast mode [ 227.855662][ T5794] bridge_slave_1: entered promiscuous mode [ 227.905813][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 227.917515][ T5791] Bluetooth: hci4: command tx timeout [ 227.923161][ T5791] Bluetooth: hci3: command tx timeout [ 227.940020][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.959627][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.269056][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.286439][ T5789] team0: Port device team_slave_0 added [ 228.322248][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.345604][ T5789] team0: Port device team_slave_1 added [ 228.548317][ T5794] team0: Port device team_slave_0 added [ 228.595953][ T5794] team0: Port device team_slave_1 added [ 228.718035][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.725212][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.751998][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.795167][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.806500][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.815077][ T5801] bridge_slave_0: entered allmulticast mode [ 228.824035][ T5801] bridge_slave_0: entered promiscuous mode [ 228.839493][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.846650][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.873146][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.972387][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.984134][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.992458][ T5801] bridge_slave_1: entered allmulticast mode [ 229.004193][ T5801] bridge_slave_1: entered promiscuous mode [ 229.023794][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.032235][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.058910][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.198230][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.205518][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.232308][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.410362][ T5789] hsr_slave_0: entered promiscuous mode [ 229.430262][ T5789] hsr_slave_1: entered promiscuous mode [ 229.564057][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.572083][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.579944][ T5800] bridge_slave_0: entered allmulticast mode [ 229.588718][ T5800] bridge_slave_0: entered promiscuous mode [ 229.642497][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.656748][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.664178][ T5791] Bluetooth: hci0: command tx timeout [ 229.670589][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.678423][ T5800] bridge_slave_1: entered allmulticast mode [ 229.686423][ T5800] bridge_slave_1: entered promiscuous mode [ 229.696185][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.703964][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.713451][ T5788] bridge_slave_0: entered allmulticast mode [ 229.721861][ T5788] bridge_slave_0: entered promiscuous mode [ 229.762208][ T5791] Bluetooth: hci2: command tx timeout [ 229.779874][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.819766][ T5791] Bluetooth: hci1: command tx timeout [ 229.854123][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.863308][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.871147][ T5788] bridge_slave_1: entered allmulticast mode [ 229.880021][ T5788] bridge_slave_1: entered promiscuous mode [ 229.983024][ T5791] Bluetooth: hci3: command tx timeout [ 229.983862][ T5793] Bluetooth: hci4: command tx timeout [ 230.040884][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.060635][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.129388][ T5801] team0: Port device team_slave_0 added [ 230.217039][ T5794] hsr_slave_0: entered promiscuous mode [ 230.226261][ T5794] hsr_slave_1: entered promiscuous mode [ 230.234952][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.242804][ T5794] Cannot create hsr debugfs directory [ 230.256097][ T5801] team0: Port device team_slave_1 added [ 230.271258][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.290903][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.444743][ T5800] team0: Port device team_slave_0 added [ 230.458909][ T5788] team0: Port device team_slave_0 added [ 230.474054][ T5800] team0: Port device team_slave_1 added [ 230.562021][ T5788] team0: Port device team_slave_1 added [ 230.571342][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.578580][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.604839][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.767123][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.774577][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.801203][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.844247][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.851539][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.877992][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.906414][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.914227][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.940731][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.987806][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.994999][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.021439][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.066876][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.074186][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.100794][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.274732][ T5801] hsr_slave_0: entered promiscuous mode [ 231.283758][ T5801] hsr_slave_1: entered promiscuous mode [ 231.292819][ T5801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.300785][ T5801] Cannot create hsr debugfs directory [ 231.649641][ T5800] hsr_slave_0: entered promiscuous mode [ 231.659983][ T5800] hsr_slave_1: entered promiscuous mode [ 231.669388][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.677140][ T5800] Cannot create hsr debugfs directory [ 231.708527][ T5788] hsr_slave_0: entered promiscuous mode [ 231.717569][ T5788] hsr_slave_1: entered promiscuous mode [ 231.725630][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.733560][ T5788] Cannot create hsr debugfs directory [ 231.737527][ T5793] Bluetooth: hci0: command tx timeout [ 231.826999][ T5793] Bluetooth: hci2: command tx timeout [ 231.905173][ T5793] Bluetooth: hci1: command tx timeout [ 232.058145][ T5793] Bluetooth: hci4: command tx timeout [ 232.063868][ T5793] Bluetooth: hci3: command tx timeout [ 232.187480][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 232.281443][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 232.315135][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 232.411253][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 232.573799][ T5794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 232.653797][ T5794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 232.743857][ T5794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 232.762583][ T5794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 232.926824][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 232.960955][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 232.982832][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 233.004514][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 233.176796][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 233.204297][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 233.300372][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 233.325513][ T5800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 233.353339][ T5800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 233.398202][ T5800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 233.424373][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 233.479013][ T5800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 233.817770][ T5791] Bluetooth: hci0: command tx timeout [ 233.909018][ T5791] Bluetooth: hci2: command tx timeout [ 233.982384][ T5791] Bluetooth: hci1: command tx timeout [ 234.003549][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.141929][ T5791] Bluetooth: hci3: command tx timeout [ 234.142453][ T5793] Bluetooth: hci4: command tx timeout [ 234.195065][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.332486][ T3898] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.340240][ T3898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.394753][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.466236][ T3898] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.474022][ T3898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.524054][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.585123][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.711996][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.811416][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.912111][ T3898] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.919925][ T3898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.949262][ T3898] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.957084][ T3898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.982287][ T3898] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.989861][ T3898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.116055][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.187507][ T3898] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.195177][ T3898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.324937][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.381202][ T5794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 235.393412][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.470766][ T3898] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.478539][ T3898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.507087][ T3898] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.514885][ T3898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.706142][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.974926][ T3898] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.982679][ T3898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.123396][ T5801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.242308][ T3898] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.250054][ T3898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.529681][ T5800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.880748][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.457068][ T5789] veth0_vlan: entered promiscuous mode [ 237.561646][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.595143][ T5789] veth1_vlan: entered promiscuous mode [ 237.893705][ T5789] veth0_macvtap: entered promiscuous mode [ 237.964258][ T5789] veth1_macvtap: entered promiscuous mode [ 238.049745][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.121683][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.225206][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.322395][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.404646][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.451391][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.460639][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.469963][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.479140][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.593431][ T5788] veth0_vlan: entered promiscuous mode [ 238.704501][ T5788] veth1_vlan: entered promiscuous mode [ 238.786829][ T5801] veth0_vlan: entered promiscuous mode [ 238.900117][ T5801] veth1_vlan: entered promiscuous mode [ 239.144652][ T5788] veth0_macvtap: entered promiscuous mode [ 239.160281][ T5800] veth0_vlan: entered promiscuous mode [ 239.219503][ T5788] veth1_macvtap: entered promiscuous mode [ 239.276452][ T5801] veth0_macvtap: entered promiscuous mode [ 239.295338][ T5800] veth1_vlan: entered promiscuous mode [ 239.366129][ T5801] veth1_macvtap: entered promiscuous mode [ 239.469201][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.480097][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.494845][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.699459][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.710285][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.725009][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.757983][ T5800] veth0_macvtap: entered promiscuous mode [ 239.774904][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.785867][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.799716][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.810964][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.827807][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.896638][ T5800] veth1_macvtap: entered promiscuous mode [ 239.930099][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.939582][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.951046][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.960309][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.004769][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.015906][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.026247][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.037119][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.052039][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.144489][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.157603][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.168156][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.179036][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.189124][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.199970][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.214912][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.249348][ T5801] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.262418][ T5801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.273482][ T5801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.283026][ T5801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.421570][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.432538][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.442970][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.453931][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.464284][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.475150][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.490273][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.612544][ T5800] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.624103][ T5800] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.633728][ T5800] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.643059][ T5800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.683194][ T5794] veth0_vlan: entered promiscuous mode [ 240.853974][ T5794] veth1_vlan: entered promiscuous mode [ 241.215805][ T5794] veth0_macvtap: entered promiscuous mode [ 241.288275][ T5794] veth1_macvtap: entered promiscuous mode [ 241.525983][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.536930][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.548705][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.560915][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.572537][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.584186][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.594480][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.605373][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.620903][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.855030][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.866248][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.876603][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.887598][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.897718][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.910428][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.920611][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.931434][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.946480][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.159728][ T5794] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.169576][ T5794] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.178792][ T5794] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.188022][ T5794] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.312589][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.320860][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.562950][ T4107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.571326][ T4107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.812088][ T5789] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 246.811253][ T3842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.820586][ T3842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.960103][ T4107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.968538][ T4107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.143968][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.153104][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.171659][ T5851] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 247.236145][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.244314][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.314819][ T1823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.323104][ T1823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.391041][ T5851] usb 3-1: Using ep0 maxpacket: 32 [ 247.432844][ T5851] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 247.441504][ T5851] usb 3-1: config 0 has no interface number 0 [ 247.448030][ T5851] usb 3-1: config 0 interface 12 has no altsetting 0 [ 247.514214][ T5851] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 247.524595][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.533093][ T5851] usb 3-1: Product: syz [ 247.537670][ T5851] usb 3-1: Manufacturer: syz [ 247.542539][ T5851] usb 3-1: SerialNumber: syz [ 247.566272][ T3842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.578701][ T3842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.582894][ T5851] usb 3-1: config 0 descriptor?? [ 248.249876][ T5851] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 248.258005][ T5851] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 248.265553][ T5851] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 248.274297][ T5851] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 248.510037][ T5851] usb 3-1: USB disconnect, device number 2 [ 248.740235][ T5985] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 249.009487][ T1823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.018008][ T1823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.282282][ T4107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.291003][ T4107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.017517][ T44] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 251.217735][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 251.282357][ T44] usb 1-1: config 0 has no interfaces? [ 251.315884][ T5851] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 251.322280][ T44] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 251.333416][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.343117][ T44] usb 1-1: Product: syz [ 251.348358][ T44] usb 1-1: Manufacturer: syz [ 251.353198][ T44] usb 1-1: SerialNumber: syz [ 251.490730][ T44] usb 1-1: config 0 descriptor?? [ 251.957602][ T3350] usb 1-1: USB disconnect, device number 2 [ 251.990411][ T5851] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.003550][ T5851] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 252.015023][ T5851] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 252.026966][ T5851] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 252.036657][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.169018][ T6020] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.359667][ T6058] syzkaller0: entered promiscuous mode [ 253.365415][ T6058] syzkaller0: entered allmulticast mode [ 255.854111][ T5851] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 255.872562][ T5851] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input5 [ 256.155708][ T5851] usb 2-1: USB disconnect, device number 2 [ 256.155942][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 256.767588][ T6103] syzkaller0: entered promiscuous mode [ 256.773322][ T6103] syzkaller0: entered allmulticast mode [ 257.569123][ T6115] Zero length message leads to an empty skb [ 258.342379][ T6136] fuse: Bad value for 'fd' [ 259.210783][ T6147] syzkaller0: entered promiscuous mode [ 259.216533][ T6147] syzkaller0: entered allmulticast mode [ 263.180827][ T5791] Bluetooth: min 0 < 6 [ 263.956291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 264.058757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 264.160932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 264.551859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 264.570214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 265.025553][ T5791] Bluetooth: min 0 < 6 [ 265.209745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 265.257568][ T5791] Bluetooth: hci1: command tx timeout [ 266.211600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 266.722322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 267.047473][ T44] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 267.107025][ T5791] Bluetooth: hci2: command tx timeout [ 267.132253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 267.570848][ T44] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 267.580336][ T44] usb 1-1: config 0 has no interface number 0 [ 267.586633][ T44] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 267.597736][ T44] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 267.609716][ T44] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 267.621276][ T44] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 267.632650][ T44] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 267.650090][ T44] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 267.660771][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.750612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 267.823152][ T5791] Bluetooth: min 0 < 6 [ 267.831243][ T44] usb 1-1: config 0 descriptor?? [ 267.841070][ T6264] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 267.870658][ T44] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 268.106416][ T44] usb 1-1: USB disconnect, device number 3 [ 268.144912][ T44] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 268.282183][ T6279] process 'syz.4.120' launched '/dev/fd/3' with NULL argv: empty string added [ 269.907626][ T5791] Bluetooth: hci2: command tx timeout [ 271.198476][ T44] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 271.384807][ T44] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 271.393352][ T44] usb 5-1: config 0 has no interface number 0 [ 271.399986][ T44] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 271.411164][ T44] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 271.423215][ T44] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 271.438619][ T44] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 271.451203][ T44] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 271.464878][ T44] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 271.474324][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.587514][ T44] usb 5-1: config 0 descriptor?? [ 271.596843][ T6326] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 271.663648][ T44] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 271.954321][ T44] usb 5-1: USB disconnect, device number 2 [ 272.014305][ T44] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 272.600535][ T44] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 272.774754][ T44] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 272.783839][ T44] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 272.794443][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 272.803781][ T44] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 272.815197][ T44] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 273.179581][ T44] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 273.189696][ T44] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 273.199613][ T44] usb 3-1: Product: syz [ 273.204028][ T44] usb 3-1: Manufacturer: syz [ 273.319447][ T44] cdc_wdm 3-1:1.0: skipping garbage [ 273.324931][ T44] cdc_wdm 3-1:1.0: skipping garbage [ 273.419962][ T44] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 273.426329][ T44] cdc_wdm 3-1:1.0: Unknown control protocol [ 273.837936][ T44] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 273.975963][ T5870] usb 3-1: USB disconnect, device number 3 [ 274.026719][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.038424][ T44] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 274.047923][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.113430][ T44] usb 4-1: config 0 descriptor?? [ 274.553825][ T44] usbhid 4-1:0.0: can't add hid device: -71 [ 274.561606][ T44] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 274.610782][ T44] usb 4-1: USB disconnect, device number 2 [ 275.308474][ T5870] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 275.496866][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 275.509308][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 275.521235][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 275.536646][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 275.551202][ T5870] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 275.560648][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.570960][ T44] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 275.668202][ T5870] usb 3-1: config 0 descriptor?? [ 275.676269][ T6371] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 275.815769][ T44] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 275.825364][ T44] usb 5-1: config 0 has no interface number 0 [ 275.836599][ T44] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 275.849502][ T44] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 275.861606][ T44] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 275.873381][ T44] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 275.884614][ T44] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 275.898027][ T44] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 275.907386][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.921049][ T44] usb 5-1: config 0 descriptor?? [ 275.939970][ T6375] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 276.074957][ T44] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 276.190065][ T44] usb 5-1: USB disconnect, device number 3 [ 276.306349][ T44] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 276.319644][ T5870] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 276.376095][ T5870] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 276.402460][ T5870] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 276.715842][ T44] usb 3-1: USB disconnect, device number 4 [ 277.605411][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 277.861054][ T29] audit: type=1326 audit(1731996499.831:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.1.164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f395297e759 code=0x0 [ 278.377659][ T3350] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 278.562802][ T3350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.574151][ T3350] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 278.583646][ T3350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.683468][ T3350] usb 3-1: config 0 descriptor?? [ 279.228506][ T3350] usbhid 3-1:0.0: can't add hid device: -71 [ 279.235136][ T3350] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 279.307616][ T3350] usb 3-1: USB disconnect, device number 5 [ 280.948606][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.958381][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.277822][ T3350] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 281.479349][ T3350] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 281.496626][ T3350] usb 3-1: config 0 has no interface number 0 [ 281.503193][ T3350] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 281.514393][ T3350] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 281.526541][ T3350] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 281.538092][ T3350] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 281.549573][ T3350] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 281.563034][ T3350] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 281.576215][ T3350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.642899][ T3350] usb 3-1: config 0 descriptor?? [ 281.659392][ T6424] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 281.739593][ T3350] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 281.988072][ T3350] usb 3-1: USB disconnect, device number 6 [ 282.002709][ T3350] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 282.057948][ T29] audit: type=1326 audit(1731996504.021:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6434 comm="syz.4.177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a7a57e759 code=0x0 [ 283.428690][ T3350] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 283.429299][ T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 283.581813][ T6452] futex_wake_op: syz.0.181 tries to shift op by 32; fix this program [ 283.618562][ T3350] usb 3-1: Using ep0 maxpacket: 8 [ 283.640472][ T3350] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 283.649191][ T3350] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 283.659495][ T3350] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 283.669649][ T3350] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 283.679951][ T3350] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.693441][ T3350] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 283.702852][ T3350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.134678][ T3350] usb 3-1: GET_CAPABILITIES returned 0 [ 284.140806][ T3350] usbtmc 3-1:16.0: can't read capabilities [ 284.196730][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.208897][ T44] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 284.218573][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.345827][ T44] usb 2-1: config 0 descriptor?? [ 284.586594][ T5845] usb 3-1: USB disconnect, device number 7 [ 284.587905][ T6451] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 284.870054][ T44] usbhid 2-1:0.0: can't add hid device: -71 [ 284.876773][ T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 284.983527][ T44] usb 2-1: USB disconnect, device number 3 [ 286.837798][ T3350] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 287.030047][ T3350] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.041774][ T3350] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 287.052883][ T3350] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 287.063364][ T3350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.387652][ T5851] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 287.649872][ T6495] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 287.751460][ T3350] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 287.952971][ T5851] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 287.962088][ T5851] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 287.972756][ T5851] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 287.982202][ T5851] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 287.993597][ T5851] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 288.173146][ T5851] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 288.182749][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 288.191515][ T5851] usb 4-1: Product: syz [ 288.195918][ T5851] usb 4-1: Manufacturer: syz [ 288.280522][ T3350] usb 3-1: USB disconnect, device number 8 [ 288.342943][ T5851] cdc_wdm 4-1:1.0: skipping garbage [ 288.349101][ T5851] cdc_wdm 4-1:1.0: skipping garbage [ 288.389150][ T5851] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 288.395431][ T5851] cdc_wdm 4-1:1.0: Unknown control protocol [ 288.676928][ T5851] usb 4-1: USB disconnect, device number 3 [ 288.961621][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.223550][ T5791] ===================================================== [ 289.231156][ T5791] BUG: KMSAN: uninit-value in hci_rx_work+0x10a8/0x1130 [ 289.238444][ T5791] hci_rx_work+0x10a8/0x1130 [ 289.243213][ T5791] process_scheduled_works+0xae0/0x1c40 [ 289.252844][ T5791] worker_thread+0xea7/0x14f0 [ 289.259273][ T5791] kthread+0x3e2/0x540 [ 289.263559][ T5791] ret_from_fork+0x6d/0x90 [ 289.268273][ T5791] ret_from_fork_asm+0x1a/0x30 [ 289.273251][ T5791] [ 289.276011][ T5791] Uninit was created at: [ 289.280788][ T5791] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 289.287001][ T5791] kmalloc_reserve+0x13d/0x4a0 [ 289.292109][ T5791] __alloc_skb+0x363/0x7b0 [ 289.296715][ T5791] vhci_write+0x127/0x900 [ 289.301405][ T5791] vfs_write+0xb2b/0x1540 [ 289.305934][ T5791] ksys_write+0x240/0x4b0 [ 289.310704][ T5791] __x64_sys_write+0x93/0xe0 [ 289.315507][ T5791] x64_sys_call+0x3161/0x3c30 [ 289.321833][ T5791] do_syscall_64+0xcd/0x1e0 [ 289.326566][ T5791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.332789][ T5791] [ 289.335245][ T5791] CPU: 0 UID: 0 PID: 5791 Comm: kworker/u9:2 Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 289.346241][ T5791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 289.360382][ T5791] Workqueue: hci3 hci_rx_work [ 289.365279][ T5791] ===================================================== [ 289.373708][ T5791] Disabling lock debugging due to kernel taint [ 289.380124][ T5791] Kernel panic - not syncing: kmsan.panic set ... [ 289.386707][ T5791] CPU: 0 UID: 0 PID: 5791 Comm: kworker/u9:2 Tainted: G B 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 289.398920][ T5791] Tainted: [B]=BAD_PAGE [ 289.403206][ T5791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 289.413432][ T5791] Workqueue: hci3 hci_rx_work [ 289.418303][ T5791] Call Trace: [ 289.421708][ T5791] [ 289.424811][ T5791] dump_stack_lvl+0x216/0x2d0 [ 289.429748][ T5791] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 289.435762][ T5791] dump_stack+0x1e/0x30 [ 289.440128][ T5791] panic+0x4e2/0xcf0 [ 289.444246][ T5791] ? kmsan_get_metadata+0x111/0x1c0 [ 289.449659][ T5791] kmsan_report+0x2c7/0x2d0 [ 289.454354][ T5791] ? kmsan_get_metadata+0x13e/0x1c0 [ 289.459762][ T5791] ? __msan_warning+0x95/0x120 [ 289.464770][ T5791] ? hci_rx_work+0x10a8/0x1130 [ 289.469695][ T5791] ? process_scheduled_works+0xae0/0x1c40 [ 289.475638][ T5791] ? worker_thread+0xea7/0x14f0 [ 289.480677][ T5791] ? kthread+0x3e2/0x540 [ 289.485130][ T5791] ? ret_from_fork+0x6d/0x90 [ 289.489894][ T5791] ? ret_from_fork_asm+0x1a/0x30 [ 289.495031][ T5791] ? filter_irq_stacks+0x60/0x1a0 [ 289.500299][ T5791] ? kmsan_get_metadata+0x13e/0x1c0 [ 289.505666][ T5791] ? kmsan_get_metadata+0x13e/0x1c0 [ 289.511047][ T5791] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 289.517600][ T5791] ? kmsan_get_metadata+0x13e/0x1c0 [ 289.522967][ T5791] ? kmsan_get_metadata+0x13e/0x1c0 [ 289.528386][ T5791] ? kmsan_get_metadata+0x13e/0x1c0 [ 289.533750][ T5791] ? kmsan_get_metadata+0x13e/0x1c0 [ 289.539114][ T5791] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 289.545672][ T5791] ? kmsan_get_metadata+0x13e/0x1c0 [ 289.551056][ T5791] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 289.557047][ T5791] __msan_warning+0x95/0x120 [ 289.561854][ T5791] hci_rx_work+0x10a8/0x1130 [ 289.566633][ T5791] ? __pfx_hci_rx_work+0x10/0x10 [ 289.571818][ T5791] process_scheduled_works+0xae0/0x1c40 [ 289.577603][ T5791] worker_thread+0xea7/0x14f0 [ 289.582497][ T5791] kthread+0x3e2/0x540 [ 289.586766][ T5791] ? __pfx_worker_thread+0x10/0x10 [ 289.592082][ T5791] ? __pfx_kthread+0x10/0x10 [ 289.596882][ T5791] ret_from_fork+0x6d/0x90 [ 289.601467][ T5791] ? __pfx_kthread+0x10/0x10 [ 289.606262][ T5791] ret_from_fork_asm+0x1a/0x30 [ 289.611239][ T5791] [ 289.614681][ T5791] Kernel Offset: disabled [ 289.619073][ T5791] Rebooting in 86400 seconds..