last executing test programs: 5.550378182s ago: executing program 1 (id=2): socket$inet6_udp(0xa, 0x2, 0x0) mknod$loop(0x0, 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0x201, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) getgroups(0x1, &(0x7f00000001c0)=[0xee00]) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x800, 0x200, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, r3, r4, r5, 0x40, 0x100}, 0x3ff, 0x2, 0x5, 0x2e7, r0, 0xffffffffffffffff, 0x6}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0xe}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x8d8, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x2}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x8ac, 0x2, [@TCA_U32_POLICE={0x8a8, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x6, 0xf, 0x6c, 0x2, {0xa6, 0x0, 0x9e71, 0x401, 0x9, 0xb}, {0xf7, 0x0, 0xa7b3, 0x3, 0x6, 0x2}, 0x81, 0x9, 0xffffff5c}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x1, 0x9, 0x3, 0x1, 0x2, 0x2b800000, 0x81, 0x3, 0x17, 0x7, 0xa6, 0x4, 0x9, 0xb, 0x10001, 0xd, 0x7, 0x2, 0x5, 0x2, 0xc, 0x1, 0x9, 0xa23f, 0x4, 0x7, 0x7, 0x7f, 0x10000, 0x3, 0x0, 0x40000000, 0x2, 0x5, 0x8001, 0xea, 0xa3, 0x8020000, 0xfffffffa, 0x1, 0x8, 0xab9, 0xb1, 0x7fffffff, 0x0, 0x2, 0x4, 0x64cf, 0x1000, 0x200, 0xfffffffd, 0x0, 0x8, 0xce8, 0x3, 0x7, 0x0, 0x3, 0x7, 0x2, 0x2, 0x2c2, 0x4, 0x2, 0x7fff, 0xffffff4f, 0x7, 0xfffffff9, 0x7, 0x6, 0x7, 0xfffffc00, 0x9, 0x2, 0x6, 0x9, 0x1, 0x3, 0xe, 0x1, 0x1, 0x5c0, 0xff, 0x14, 0x4, 0x4, 0x2, 0x4, 0x6, 0xfffffffd, 0x0, 0x29, 0x4, 0xd, 0x2, 0x916, 0x0, 0xfffffffc, 0x9, 0x0, 0x800, 0x80, 0x1, 0x8, 0x9, 0xa, 0x8, 0x1d26, 0xfffffffd, 0x3, 0x8, 0x7fff, 0x2, 0x2, 0x3, 0x4, 0x3, 0x8, 0x7ff, 0x0, 0x3, 0x9, 0x7ff, 0x8000, 0x4, 0x8, 0x3, 0x3, 0xb6, 0xc, 0x1ff, 0x0, 0x3, 0x7ff, 0x1, 0x7, 0xfffffff8, 0xf, 0x0, 0x1, 0xa, 0x6, 0x2, 0x10000, 0x7fff, 0x0, 0x401, 0x0, 0x8, 0x800, 0xe, 0x6, 0x8, 0x7, 0xe, 0x3, 0x4, 0xfd, 0x81, 0x8000, 0x4, 0x3, 0x1, 0x3dc, 0x6, 0x7, 0x0, 0x10000, 0x6, 0x40, 0xf12c, 0x3ff, 0x0, 0x2, 0x9, 0x89d0, 0x2, 0x6, 0xfffffffc, 0xf, 0xe, 0x5, 0x3, 0x5, 0x5, 0x1, 0x8, 0x9, 0x4, 0x1, 0x80, 0x8, 0xe57f, 0x8, 0x386d, 0x9, 0x95a3, 0x0, 0x400, 0x5, 0xd8, 0x0, 0xa0000000, 0x4, 0x6, 0x9, 0x1, 0x3, 0xf, 0x3, 0x6, 0x7465, 0x200, 0xef87, 0xffff5f77, 0x2e8, 0x8, 0xebf0, 0x0, 0x4, 0x101, 0xff, 0x6, 0x4, 0x1, 0x8000, 0x6e5, 0x4ee9, 0x3, 0x4, 0x0, 0x81, 0x5, 0x7, 0x7ff, 0x41, 0xc43, 0x8000, 0x7e656a6d, 0x2, 0x1, 0x8, 0x5, 0x1, 0x23800000, 0xff, 0x3, 0x2, 0x2, 0x100, 0xfff, 0x9, 0xfff, 0x9, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb1ad, 0x1, 0x200, 0x8, 0x8, {0x5, 0x0, 0x0, 0x4, 0x6, 0x3}, {0xf7, 0x0, 0x1, 0x5, 0x7, 0x5}, 0x100, 0x7a9, 0x40000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x100}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x9037, 0xfffffffa, 0x7, 0x3ff, 0x8, 0x7, 0x10001, 0x80, 0x5, 0x1, 0x3472, 0xdfc, 0x1, 0xc, 0x8, 0x8, 0x40, 0x6, 0xea2, 0x3, 0x8, 0x8, 0xeb, 0x3, 0x8a7, 0x7, 0xb, 0x10001, 0x7fff, 0x9, 0x1, 0x0, 0x7fffffff, 0xc58, 0x2, 0x9, 0x4, 0x1, 0x8001, 0x100000, 0xfffffc00, 0x6, 0xff, 0x8, 0x2, 0xe79, 0x3, 0x600000, 0x9, 0x6, 0x4, 0x5, 0x8, 0x9993, 0x1, 0x8, 0x2, 0x5, 0x4, 0x5f1, 0x80000001, 0x10, 0xb, 0x56e, 0x7fffffff, 0x7, 0xffffffff, 0xfffffff8, 0x2, 0x72, 0x5, 0x23, 0x3, 0xfffffe00, 0x4, 0x6, 0x2, 0x10001, 0x5a2, 0x0, 0x80000000, 0x9, 0x5b40, 0x6, 0x8001, 0xce, 0x1, 0x8, 0x2, 0x7, 0xc8, 0x88a, 0x7, 0x2, 0x6, 0x9, 0x8, 0xffffffff, 0x2, 0xa00, 0x9, 0x3, 0x3, 0xa3, 0x4, 0x7fffffff, 0x8, 0x9, 0x5, 0x1, 0x5, 0x0, 0x3, 0x7, 0x3, 0x5, 0x7, 0x81, 0x80000001, 0xe0000, 0x7, 0x3, 0x2, 0xf, 0x800, 0x1, 0x4e3, 0x49, 0x48, 0xffff, 0x4, 0x0, 0x3, 0x7f, 0x0, 0xfff, 0x1, 0x4, 0x9, 0x0, 0xfffff541, 0x3, 0x86, 0x92f, 0x7, 0x5, 0x7, 0x3963, 0x8, 0x800, 0x9, 0xd4c, 0x101, 0x5, 0x6, 0x7fffffff, 0x401, 0xffff, 0x4e9, 0xc0, 0x81, 0x3, 0x0, 0xe, 0x0, 0x3, 0x3, 0x9, 0x9, 0x9, 0x6, 0x1, 0xf28, 0x43, 0x1bbc, 0x97d00000, 0x4, 0x0, 0x0, 0x7, 0x3a, 0xebfa, 0x6, 0x9, 0xe, 0x0, 0x8, 0x1000, 0x600, 0x7, 0x7, 0x3, 0xa, 0x0, 0x8, 0x10000, 0x1, 0xb8000000, 0x6, 0x1, 0xb17e, 0x9, 0x7f, 0x5, 0xa715, 0x93, 0x10, 0x3, 0x9a, 0xffffffff, 0xf6a, 0x3, 0x1, 0x8, 0x43c6, 0x8, 0x5, 0x38, 0xfffffffe, 0x400, 0x5, 0x7, 0x39, 0xffffffff, 0xff, 0x1, 0x4, 0xc, 0x9, 0x9, 0x7, 0xb7, 0x7, 0x9, 0x7fffffff, 0x4, 0x0, 0xff, 0x7fffffff, 0xffff, 0x2, 0xde47, 0x5f3, 0x6, 0x0, 0xbd5b, 0x4, 0x9, 0x8, 0x8, 0x4, 0x2, 0x99ea, 0x0, 0x6]}]}]}}]}, 0x8d8}, 0x1, 0x0, 0x0, 0x4084}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES16], 0x0) 5.367961463s ago: executing program 3 (id=4): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r4, &(0x7f0000000100)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYBLOB, @ANYRES32], 0x38}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x400) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r5, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2000002}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.476634774s ago: executing program 3 (id=6): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mount(0x0, 0x0, &(0x7f0000000140)='ufs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) geteuid() syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) pselect6(0x40, &(0x7f0000000000)={0x100000001, 0x6, 0x70, 0x10000000000006, 0x6, 0xd, 0x6, 0x5}, &(0x7f0000000040)={0x4, 0x5, 0x3, 0x9, 0x8000000000000000, 0x5, 0xd, 0x5}, &(0x7f00000000c0)={0x5, 0x9, 0xfff, 0x6, 0x7, 0x829d, 0x3, 0x8000000000000000}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x8000000000000001]}, 0x8}) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) userfaultfd(0x801) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) pread64(r1, 0x0, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(0xffffffffffffffff, 0x1) flock(r2, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) membarrier(0x10, 0x0) 2.472199807s ago: executing program 2 (id=3): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x200000}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 819.020674ms ago: executing program 1 (id=7): socket(0x1, 0x2, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r6, 0x3) accept4$bt_l2cap(r6, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 0s ago: executing program 2 (id=8): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000840)='/dev/comedi4\x00', 0x8142, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000301, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000200)={0x9, 0x0, 0xfffffff9, 0x5}) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x32, 0x800000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.0' (ED25519) to the list of known hosts. [ 82.297687][ T5586] cgroup: Unknown subsys name 'net' [ 82.561615][ T5586] cgroup: Unknown subsys name 'cpuset' [ 82.634183][ T5586] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.533249][ T5586] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.984837][ T9] cfg80211: failed to load regulatory.db [ 87.148670][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.187393][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.209995][ T5607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.225840][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.229070][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.229707][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.230759][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.236728][ T5607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.237251][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.242533][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.242968][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.243181][ T5607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.247404][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.249847][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.250488][ T5606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.362311][ T5606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.378504][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.407771][ T5606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.409888][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.429077][ T5606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.445003][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.445015][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.445921][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.447626][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.448642][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.304908][ T5603] Bluetooth: hci1: command tx timeout [ 89.383562][ T4914] Bluetooth: hci2: command tx timeout [ 89.383772][ T5603] Bluetooth: hci0: command tx timeout [ 89.543544][ T4914] Bluetooth: hci3: command tx timeout [ 89.544216][ T5603] Bluetooth: hci4: command tx timeout [ 89.986517][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.987355][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.987818][ T5601] bridge_slave_0: entered allmulticast mode [ 89.990084][ T5601] bridge_slave_0: entered promiscuous mode [ 90.039961][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.040062][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.040169][ T5599] bridge_slave_0: entered allmulticast mode [ 90.041726][ T5599] bridge_slave_0: entered promiscuous mode [ 90.073028][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.073158][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.073339][ T5601] bridge_slave_1: entered allmulticast mode [ 90.076736][ T5601] bridge_slave_1: entered promiscuous mode [ 90.153257][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.154350][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.154557][ T5599] bridge_slave_1: entered allmulticast mode [ 90.157954][ T5599] bridge_slave_1: entered promiscuous mode [ 90.172215][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.172363][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.172861][ T5600] bridge_slave_0: entered allmulticast mode [ 90.179222][ T5600] bridge_slave_0: entered promiscuous mode [ 90.246060][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.246137][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.246258][ T5600] bridge_slave_1: entered allmulticast mode [ 90.250140][ T5600] bridge_slave_1: entered promiscuous mode [ 90.258467][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.258703][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.258820][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.259001][ T5610] bridge_slave_0: entered allmulticast mode [ 90.263090][ T5610] bridge_slave_0: entered promiscuous mode [ 90.340695][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.342572][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.342656][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.342770][ T5610] bridge_slave_1: entered allmulticast mode [ 90.346079][ T5610] bridge_slave_1: entered promiscuous mode [ 90.358550][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.514730][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.514983][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.515063][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.516466][ T5611] bridge_slave_0: entered allmulticast mode [ 90.517996][ T5611] bridge_slave_0: entered promiscuous mode [ 90.528520][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.588085][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.588218][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.588338][ T5611] bridge_slave_1: entered allmulticast mode [ 90.590007][ T5611] bridge_slave_1: entered promiscuous mode [ 90.593333][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.598560][ T5601] team0: Port device team_slave_0 added [ 90.608406][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.652849][ T5601] team0: Port device team_slave_1 added [ 90.656620][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.659419][ T5599] team0: Port device team_slave_0 added [ 90.715037][ T5599] team0: Port device team_slave_1 added [ 90.738526][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.796808][ T5600] team0: Port device team_slave_0 added [ 90.799405][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.800334][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.800344][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.800359][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.805446][ T5610] team0: Port device team_slave_0 added [ 90.840107][ T5600] team0: Port device team_slave_1 added [ 90.865352][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.865370][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.865395][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.869662][ T5610] team0: Port device team_slave_1 added [ 90.870794][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.870806][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.870829][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.978975][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.978994][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.979022][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.008536][ T5611] team0: Port device team_slave_0 added [ 91.051497][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.051513][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.051528][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.056510][ T5611] team0: Port device team_slave_1 added [ 91.057566][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.057579][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.057601][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.072026][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.072042][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.072066][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.117385][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.117402][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.117425][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.237954][ T5601] hsr_slave_0: entered promiscuous mode [ 91.239006][ T5601] hsr_slave_1: entered promiscuous mode [ 91.240811][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.240823][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.240838][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.271767][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.271783][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.271806][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.286404][ T5599] hsr_slave_0: entered promiscuous mode [ 91.287688][ T5599] hsr_slave_1: entered promiscuous mode [ 91.288925][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 91.289027][ T5599] Cannot create hsr debugfs directory [ 91.393578][ T5603] Bluetooth: hci1: command tx timeout [ 91.401399][ T5600] hsr_slave_0: entered promiscuous mode [ 91.402291][ T5600] hsr_slave_1: entered promiscuous mode [ 91.402833][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 91.402850][ T5600] Cannot create hsr debugfs directory [ 91.463699][ T4914] Bluetooth: hci2: command tx timeout [ 91.463732][ T5603] Bluetooth: hci0: command tx timeout [ 91.623880][ T5603] Bluetooth: hci4: command tx timeout [ 91.623905][ T4914] Bluetooth: hci3: command tx timeout [ 91.922637][ T5610] hsr_slave_0: entered promiscuous mode [ 91.924444][ T5610] hsr_slave_1: entered promiscuous mode [ 91.926021][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 91.926047][ T5610] Cannot create hsr debugfs directory [ 92.029213][ T5611] hsr_slave_0: entered promiscuous mode [ 92.030033][ T5611] hsr_slave_1: entered promiscuous mode [ 92.030582][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 92.030599][ T5611] Cannot create hsr debugfs directory [ 92.767864][ T5601] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.818632][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.826048][ T5601] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.850719][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.856496][ T5601] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.878233][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.902602][ T5601] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.939293][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.059610][ T5599] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.090058][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.103323][ T5599] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.126510][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.129504][ T5599] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.170676][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.210170][ T5599] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.250522][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.414568][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.461555][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.471208][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.475393][ T4914] Bluetooth: hci1: command tx timeout [ 93.508087][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.512900][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.543819][ T4914] Bluetooth: hci2: command tx timeout [ 93.543864][ T4914] Bluetooth: hci0: command tx timeout [ 93.567912][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.603153][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.637668][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.703988][ T5603] Bluetooth: hci4: command tx timeout [ 93.703998][ T4914] Bluetooth: hci3: command tx timeout [ 93.802520][ T5600] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.831990][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.851302][ T5600] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.888495][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.893111][ T5600] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.937332][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.967114][ T5600] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.001005][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.062507][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.187236][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.220135][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.233109][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.256994][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.262729][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.281702][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.307408][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.320779][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.358579][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.385264][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.386845][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.410580][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.457617][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.457717][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.552170][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.620610][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.620751][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.637945][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.679567][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.680007][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.804749][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.881038][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.881285][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.908921][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.961605][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.962482][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.109508][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.180981][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.181210][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.242587][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.263153][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.265374][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.430565][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.498422][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.498710][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.543858][ T4914] Bluetooth: hci1: command tx timeout [ 95.561003][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.561182][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.623652][ T4914] Bluetooth: hci0: command tx timeout [ 95.623688][ T4914] Bluetooth: hci2: command tx timeout [ 95.784540][ T5603] Bluetooth: hci4: command tx timeout [ 95.793567][ T5603] Bluetooth: hci3: command tx timeout [ 96.470090][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.638214][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.977209][ T5601] veth0_vlan: entered promiscuous mode [ 97.038305][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.111538][ T5601] veth1_vlan: entered promiscuous mode [ 97.122955][ T5599] veth0_vlan: entered promiscuous mode [ 97.209103][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.213096][ T5599] veth1_vlan: entered promiscuous mode [ 97.378431][ T5601] veth0_macvtap: entered promiscuous mode [ 97.415196][ T5610] veth0_vlan: entered promiscuous mode [ 97.433138][ T5601] veth1_macvtap: entered promiscuous mode [ 97.497043][ T5599] veth0_macvtap: entered promiscuous mode [ 97.522993][ T5610] veth1_vlan: entered promiscuous mode [ 97.562020][ T5599] veth1_macvtap: entered promiscuous mode [ 97.577257][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.615713][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.662125][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.721436][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.722844][ T2855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.747517][ T2855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.769413][ T2855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.776324][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.789507][ T2855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.885826][ T1571] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.890675][ T1571] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.947985][ T1571] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.949590][ T5610] veth0_macvtap: entered promiscuous mode [ 97.981353][ T1571] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.132497][ T5610] veth1_macvtap: entered promiscuous mode [ 98.333771][ T5611] veth0_vlan: entered promiscuous mode [ 98.503224][ T5600] veth0_vlan: entered promiscuous mode [ 98.520688][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.540890][ T5611] veth1_vlan: entered promiscuous mode [ 98.555641][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.555665][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.594761][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.631687][ T5600] veth1_vlan: entered promiscuous mode [ 98.641858][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.641889][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.676081][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.707612][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.728793][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.736447][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.826746][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.826768][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.992977][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.993000][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.014962][ T5611] veth0_macvtap: entered promiscuous mode [ 99.156920][ T5611] veth1_macvtap: entered promiscuous mode [ 99.220511][ T5600] veth0_macvtap: entered promiscuous mode [ 99.337534][ T5600] veth1_macvtap: entered promiscuous mode [ 99.387410][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.387432][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.439955][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.477474][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.516197][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.618292][ T1571] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.636366][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.636387][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.639924][ T1571] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.671536][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.673276][ T1571] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.711955][ T1571] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.881544][ T154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.885960][ T154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.890300][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.900784][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.637253][ T36] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 102.917764][ T36] usb 2-1: device descriptor read/64, error -71 [ 102.972484][ T5804] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5599] was attempted by ""[5804] [ 105.665959][ T5603] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 105.666020][ T5603] CPU: 1 UID: 0 PID: 5603 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 105.666048][ T5603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.666062][ T5603] Workqueue: hci2 hci_rx_work [ 105.666102][ T5603] Call Trace: [ 105.666113][ T5603] [ 105.666123][ T5603] dump_stack_lvl+0xe8/0x150 [ 105.666152][ T5603] sysfs_create_dir_ns+0x271/0x2a0 [ 105.666188][ T5603] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 105.666219][ T5603] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 105.666258][ T5603] ? rt_spin_unlock+0x160/0x200 [ 105.666290][ T5603] kobject_add_internal+0x631/0xd10 [ 105.666326][ T5603] kobject_add+0x163/0x240 [ 105.666358][ T5603] ? __pfx_kobject_add+0x10/0x10 [ 105.666391][ T5603] ? get_device_parent+0x370/0x3a0 [ 105.666430][ T5603] device_add+0x408/0xbb0 [ 105.666475][ T5603] hci_conn_add_sysfs+0xd5/0x210 [ 105.666511][ T5603] le_conn_complete_evt+0x10e6/0x16b0 [ 105.666549][ T5603] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 105.666575][ T5603] ? irqentry_exit+0x218/0x8b0 [ 105.666603][ T5603] ? skb_pull_data+0xfb/0x200 [ 105.666634][ T5603] hci_le_conn_complete_evt+0x187/0x470 [ 105.666668][ T5603] hci_event_packet+0x659/0xef0 [ 105.666708][ T5603] ? __pfx____migrate_enable+0x10/0x10 [ 105.666734][ T5603] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 105.666757][ T5603] ? __pfx_hci_event_packet+0x10/0x10 [ 105.666789][ T5603] ? preempt_schedule_common+0x82/0xd0 [ 105.666823][ T5603] ? preempt_schedule_thunk+0x16/0x30 [ 105.666860][ T5603] ? hci_send_to_monitor+0xe2/0x590 [ 105.666899][ T5603] hci_rx_work+0x3ee/0x1040 [ 105.666934][ T5603] ? preempt_schedule_thunk+0x16/0x30 [ 105.666968][ T5603] ? process_scheduled_works+0xa70/0x1860 [ 105.666994][ T5603] process_scheduled_works+0xb5d/0x1[ 105.666994][ T5603] process_scheduled_works+0xb5d/0x1860 [ 105.667053][ T5603] ? __pfx_process_scheduled_works+0x10/0x10 [ 105.667085][ T5603] ? assign_work+0x3d5/0x5e0 [ 105.667114][ T5603] worker_thread+0xa53/0xfc0 [ 105.667168][ T5603] kthread+0x388/0x470 [ 105.667198][ T5603] ? __pfx_worker_thread+0x10/0x10 [ 105.667220][ T5603] ? __pfx_kthread+0x10/0x10 [ 105.667251][ T5603] ret_from_fork+0x514/0xb70 [ 105.667279][ T5603] ? __pfx_ret_from_fork+0x10/0x10 [ 105.667304][ T5603] ? __switch_to+0xc79/0x1410 [ 105.667340][ T5603] ? __pfx_kthread+0x10/0x10 [ 105.667370][ T5603] ret_from_fork_asm+0x1a/0x30 [ 105.667416][ T5603] [ 105.669922][ T5603] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 105.670310][ T5603] Bluetooth: hci2: failed to register connection device [ 106.076220][ T5603] ================================================================== [ 106.076240][ T5603] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x208/0x2f0 [ 106.076293][ T5603] Read of size 8 at addr ffff88803d03c830 by task kworker/u9:2/5603 [ 106.076313][ T5603] [ 106.076342][ T5603] CPU: 1 UID: 0 PID: 5603 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 106.076376][ T5603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.076391][ T5603] Workqueue: hci2 hci_rx_work [ 106.076425][ T5603] Call Trace: [ 106.076435][ T5603] [ 106.076445][ T5603] dump_stack_lvl+0xe8/0x150 [ 106.076478][ T5603] print_address_description+0x55/0x1e0 [ 106.076503][ T5603] ? l2cap_sock_new_connection_cb+0x208/0x2f0 [ 106.076546][ T5603] print_report+0x58/0x70 [ 106.076568][ T5603] kasan_report+0x117/0x150 [ 106.076596][ T5603] ? l2cap_sock_new_connection_cb+0x208/0x2f0 [ 106.076633][ T5603] l2cap_sock_new_connection_cb+0x208/0x2f0 [ 106.076666][ T5603] l2cap_connect_cfm+0x368/0x1560 [ 106.076700][ T5603] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 106.076727][ T5603] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 106.076762][ T5603] ? lockdep_hardirqs_on+0x7a/0x110 [ 106.076782][ T5603] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 106.076814][ T5603] ? mutex_lock_nested+0x152/0x1d0 [ 106.076838][ T5603] ? hci_connect_cfm+0x2c/0x140 [ 106.076860][ T5603] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 106.076888][ T5603] hci_connect_cfm+0x95/0x140 [ 106.076913][ T5603] le_conn_complete_evt+0x1134/0x16b0 [ 106.076945][ T5603] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 106.076972][ T5603] ? irqentry_exit+0x218/0x8b0 [ 106.076995][ T5603] ? skb_pull_data+0xfb/0x200 [ 106.077022][ T5603] hci_le_conn_complete_evt+0x187/0x470 [ 106.077051][ T5603] hci_event_packet+0x659/0xef0 [ 106.077095][ T5603] ? __pfx____migrate_enable+0x10/0x10 [ 106.077138][ T5603] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 106.077160][ T5603] ? __pfx_hci_event_packet+0x10/0x10 [ 106.077191][ T5603] ? preempt_schedule_common+0x82/0xd0 [ 106.077224][ T5603] ? preempt_schedule_thunk+0x16/0x30 [ 106.077259][ T5603] ? hci_send_to_monitor+0xe2/0x590 [ 106.077288][ T5603] hci_rx_work+0x3ee/0x1040 [ 106.077322][ T5603] ? preempt_schedule_thunk+0x16/0x30 [ 106.077354][ T5603] ? process_scheduled_works+0xa70/0x1860 [ 106.077379][ T5603] process_scheduled_works+0xb5d/0x1860 [ 106.077423][ T5603] ? __pfx_process_scheduled_works+0x10/0x10 [ 106.077450][ T5603] ? assign_work+0x3d5/0x5e0 [ 106.077475][ T5603] worker_thread+0xa53/0xfc0 [ 106.077517][ T5603] kthread+0x388/0x470 [ 106.077545][ T5603] ? __pfx_worker_thread+0x10/0x10 [ 106.077567][ T5603] ? __pfx_kthread+0x10/0x10 [ 106.077595][ T5603] ret_from_fork+0x514/0xb70 [ 106.077621][ T5603] ? __pfx_ret_from_fork+0x10/0x10 [ 106.077644][ T5603] ? __switch_to+0xc79/0x1410 [ 106.077677][ T5603] ? __pfx_kthread+0x10/0x10 [ 106.077706][ T5603] ret_from_fork_asm+0x1a/0x30 [ 106.077743][ T5603] [ 106.077751][ T5603] [ 106.077756][ T5603] Allocated by task 5603: [ 106.077766][ T5603] kasan_save_track+0x3e/0x80 [ 106.077786][ T5603] __kasan_kmalloc+0x93/0xb0 [ 106.077806][ T5603] __kmalloc_noprof+0x3e7/0x7b0 [ 106.077828][ T5603] sk_prot_alloc+0xe7/0x210 [ 106.077855][ T5603] sk_alloc+0x3a/0x390 [ 106.077883][ T5603] bt_sock_alloc+0x3b/0x340 [ 106.077901][ T5603] l2cap_sock_new_connection_cb+0xf1/0x2f0 [ 106.077928][ T5603] l2cap_connect_cfm+0x368/0x1560 [ 106.077951][ T5603] hci_connect_cfm+0x95/0x140 [ 106.077970][ T5603] le_conn_complete_evt+0x1134/0x16b0 [ 106.077993][ T5603] hci_le_conn_complete_evt+0x187/0x470 [ 106.078013][ T5603] hci_event_packet+0x659/0xef0 [ 106.078040][ T5603] hci_rx_work+0x3ee/0x1040 [ 106.078068][ T5603] process_scheduled_works+0xb5d/0x1860 [ 106.078095][ T5603] worker_thread+0xa53/0xfc0 [ 106.078115][ T5603] kthread+0x388/0x470 [ 106.078138][ T5603] ret_from_fork+0x514/0xb70 [ 106.078158][ T5603] ret_from_fork_asm+0x1a/0x30 [ 106.078181][ T5603] [ 106.078186][ T5603] Freed by task 5814: [ 106.078195][ T5603] kasan_save_track+0x3e/0x80 [ 106.078213][ T5603] kasan_save_free_info+0x46/0x50 [ 106.078240][ T5603] __kasan_slab_free+0x5c/0x80 [ 106.078260][ T5603] kfree+0x1c5/0x6c0 [ 106.078278][ T5603] __sk_destruct+0x74b/0x9d0 [ 106.078295][ T5603] l2cap_sock_cleanup_listen+0x1d9/0x580 [ 106.078321][ T5603] l2cap_sock_release+0x6e/0x270 [ 106.078345][ T5603] sock_close+0xc3/0x240 [ 106.078366][ T5603] __fput+0x461/0xa70 [ 106.078382][ T5603] task_work_run+0x1d9/0x270 [ 106.078409][ T5603] get_signal+0x11eb/0x1330 [ 106.078427][ T5603] arch_do_signal_or_restart+0xbc/0x840 [ 106.078457][ T5603] exit_to_user_mode_loop+0xa9/0x680 [ 106.078480][ T5603] do_syscall_64+0x353/0x580 [ 106.078497][ T5603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.078517][ T5603] [ 106.078522][ T5603] The buggy address belongs to the object at ffff88803d03c000 [ 106.078522][ T5603] which belongs to the cache kmalloc-4k of size 4096 [ 106.078539][ T5603] The buggy address is located 2096 bytes inside of [ 106.078539][ T5603] freed 4096-byte region [ffff88803d03c000, ffff88803d03d000) [ 106.078560][ T5603] [ 106.078566][ T5603] The buggy address belongs to the physical page: [ 106.078577][ T5603] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3d038 [ 106.078598][ T5603] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 106.078616][ T5603] flags: 0x80000000000040(head|node=0|zone=1) [ 106.078634][ T5603] page_type: f5(slab) [ 106.078654][ T5603] raw: 0080000000000040 ffff88813fe0d140 dead000000000100 dead000000000122 [ 106.078672][ T5603] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 106.078691][ T5603] head: 0080000000000040 ffff88813fe0d140 dead000000000100 dead000000000122 [ 106.078708][ T5603] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 106.078726][ T5603] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 106.078743][ T5603] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 106.078753][ T5603] page dumped because: kasan: bad access detected [ 106.078763][ T5603] page_owner tracks the page as allocated [ 106.078788][ T5603] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5191, tgid 5191 (v4l_id), ts 48746213566, free_ts 48708803523 [ 106.078824][ T5603] post_alloc_hook+0x22d/0x280 [ 106.078844][ T5603] get_page_from_freelist+0x28b2/0x2930 [ 106.078870][ T5603] __alloc_frozen_pages_noprof+0x18d/0x380 [ 106.078895][ T5603] allocate_slab+0x77/0x660 [ 106.078923][ T5603] refill_objects+0x33c/0x3d0 [ 106.078949][ T5603] __pcs_replace_empty_main+0x373/0x720 [ 106.078978][ T5603] __kmalloc_noprof+0x530/0x7b0 [ 106.078999][ T5603] tomoyo_realpath_from_path+0xe3/0x5d0 [ 106.079022][ T5603] tomoyo_path_perm+0x283/0x560 [ 106.079050][ T5603] security_inode_getattr+0x12b/0x310 [ 106.079084][ T5603] __x64_sys_newfstat+0x13b/0x270 [ 106.079113][ T5603] do_syscall_64+0x174/0x580 [ 106.079131][ T5603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.079150][ T5603] page last free pid 4978 tgid 4978 stack trace: [ 106.079162][ T5603] __free_frozen_pages+0xfe5/0x10d0 [ 106.079184][ T5603] __slab_free+0x252/0x2a0 [ 106.079206][ T5603] qlist_free_all+0x99/0x100 [ 106.079224][ T5603] kasan_quarantine_reduce+0x148/0x160 [ 106.079243][ T5603] __kasan_slab_alloc+0x22/0x80 [ 106.079263][ T5603] __kmalloc_noprof+0x399/0x7b0 [ 106.079285][ T5603] tomoyo_encode+0x28b/0x550 [ 106.079305][ T5603] tomoyo_realpath_from_path+0x58d/0x5d0 [ 106.079326][ T5603] tomoyo_path_perm+0x283/0x560 [ 106.079354][ T5603] security_inode_getattr+0x12b/0x310 [ 106.079380][ T5603] vfs_getattr+0x23/0x70 [ 106.079405][ T5603] vfs_statx_path+0x2b/0x230 [ 106.079422][ T5603] vfs_statx+0x12e/0x200 [ 106.079448][ T5603] vfs_fstatat+0x11b/0x170 [ 106.079474][ T5603] __x64_sys_newfstatat+0x151/0x200 [ 106.079503][ T5603] do_syscall_64+0x174/0x580 [ 106.079520][ T5603] [ 106.079525][ T5603] Memory state around the buggy address: [ 106.079536][ T5603] ffff88803d03c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.079550][ T5603] ffff88803d03c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.079563][ T5603] >ffff88803d03c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.079574][ T5603] ^ [ 106.079585][ T5603] ffff88803d03c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.079599][ T5603] ffff88803d03c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.079609][ T5603] ================================================================== [ 106.079630][ T5603] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 106.079647][ T5603] CPU: 1 UID: 0 PID: 5603 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 106.079670][ T5603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.079684][ T5603] Workqueue: hci2 hci_rx_work [ 106.079716][ T5603] Call Trace: [ 106.079724][ T5603] [ 106.079732][ T5603] vpanic+0x56c/0xa60 [ 106.079761][ T5603] ? __pfx_vpanic+0x10/0x10 [ 106.079787][ T5603] ? __pfx___schedule+0x10/0x10 [ 106.079821][ T5603] panic+0xc5/0xd0 [ 106.079842][ T5603] ? __pfx_panic+0x10/0x10 [ 106.079869][ T5603] ? preempt_schedule_common+0x82/0xd0 [ 106.079903][ T5603] ? l2cap_sock_new_connection_cb+0x208/0x2f0 [ 106.079933][ T5603] check_panic_on_warn+0x89/0xb0 [ 106.079963][ T5603] ? l2cap_sock_new_connection_cb+0x208/0x2f0 [ 106.079992][ T5603] end_report+0x73/0x170 [ 106.080017][ T5603] ? l2cap_sock_new_connection_cb+0x208/0x2f0 [ 106.080046][ T5603] kasan_report+0x128/0x150 [ 106.080071][ T5603] ? l2cap_sock_new_connection_cb+0x208/0x2f0 [ 106.080114][ T5603] l2cap_sock_new_connection_cb+0x208/0x2f0 [ 106.080145][ T5603] l2cap_connect_cfm+0x368/0x1560 [ 106.080176][ T5603] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 106.080203][ T5603] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 106.080244][ T5603] ? lockdep_hardirqs_on+0x7a/0x110 [ 106.080270][ T5603] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 106.080302][ T5603] ? mutex_lock_nested+0x152/0x1d0 [ 106.080327][ T5603] ? hci_connect_cfm+0x2c/0x140 [ 106.080348][ T5603] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 106.080381][ T5603] hci_connect_cfm+0x95/0x140 [ 106.080405][ T5603] le_conn_complete_evt+0x1134/0x16b0 [ 106.080434][ T5603] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 106.080460][ T5603] ? irqentry_exit+0x218/0x8b0 [ 106.080482][ T5603] ? skb_pull_data+0xfb/0x200 [ 106.080506][ T5603] hci_le_conn_complete_evt+0x187/0x470 [ 106.080541][ T5603] hci_event_packet+0x659/0xef0 [ 106.080574][ T5603] ? __pfx____migrate_enable+0x10/0x10 [ 106.080599][ T5603] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 106.080620][ T5603] ? __pfx_hci_event_packet+0x10/0x10 [ 106.080658][ T5603] ? preempt_schedule_common+0x82/0xd0 [ 106.080690][ T5603] ? preempt_schedule_thunk+0x16/0x30 [ 106.080722][ T5603] ? hci_send_to_monitor+0xe2/0x590 [ 106.080751][ T5603] hci_rx_work+0x3ee/0x1040 [ 106.080783][ T5603] ? preempt_schedule_thunk+0x16/0x30 [ 106.080814][ T5603] ? process_scheduled_works+0xa70/0x1860 [ 106.080835][ T5603] process_scheduled_works+0xb5d/0x1860 [ 106.080871][ T5603] ? __pfx_process_scheduled_works+0x10/0x10 [ 106.080896][ T5603] ? assign_work+0x3d5/0x5e0 [ 106.080919][ T5603] worker_thread+0xa53/0xfc0 [ 106.080954][ T5603] kthread+0x388/0x470 [ 106.080980][ T5603] ? __pfx_worker_thread+0x10/0x10 [ 106.081001][ T5603] ? __pfx_kthread+0x10/0x10 [ 106.081029][ T5603] ret_from_fork+0x514/0xb70 [ 106.081052][ T5603] ? __pfx_ret_from_fork+0x10/0x10 [ 106.081075][ T5603] ? __switch_to+0xc79/0x1410 [ 106.081113][ T5603] ? __pfx_kthread+0x10/0x10 [ 106.081140][ T5603] ret_from_fork_asm+0x1a/0x30 [ 106.081173][ T5603] [ 106.081331][ T5603] Kernel Offset: disabled