last executing test programs: 1m49.614020805s ago: executing program 3 (id=4): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x17, &(0x7f00000004c0)={@dev, @random="e5dbda09b0a5", @val, {@generic={0x0, "b2"}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000187b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e8500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000000), 0x400000) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m45.114584726s ago: executing program 3 (id=8): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x17, &(0x7f00000004c0)={@dev, @random="e5dbda09b0a5", @val, {@generic={0x0, "b2"}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000187b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e8500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000000), 0x400000) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m42.632683595s ago: executing program 0 (id=1): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x41}, @l2cap_cid_signaling={{0x3d}, [@l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x6, 0x1f}}, @l2cap_conn_req={{0x2, 0x9, 0x4}, {0x9, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x0, 0xc}}, @l2cap_disconn_req={{0x6, 0x2, 0x4}, {0x1, 0xff8e}}, @l2cap_disconn_rsp={{0x7, 0x11, 0x4}, {0x75, 0xb0ff}}, @l2cap_move_chan_req={{0xe, 0x3f, 0x3}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0x7, 0xa3}}, @l2cap_move_chan_rsp={{0xf, 0x8, 0x4}, {0x200, 0x1f}}]}}, 0x46) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xf26, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000081, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) 1m42.502425549s ago: executing program 3 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@var={0x2, 0x0, 0x0, 0xe, 0x4, 0x1}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x17, 0x7}]}, {0x0, [0x30]}}, &(0x7f0000000180)=""/248, 0x3b, 0xf8, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000090000000060a010400000000000000000100000008000b400000000068000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c0002800800018000000000340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000200900010073797a30"], 0x104}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = socket(0x2c, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp=r7}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x0, 0x8, 0x301, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m40.122299128s ago: executing program 0 (id=11): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) landlock_create_ruleset(&(0x7f00000000c0), 0x10, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x41}, @l2cap_cid_signaling={{0x3d}, [@l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x6, 0x1f}}, @l2cap_conn_req={{0x2, 0x9, 0x4}, {0x9, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x0, 0xc}}, @l2cap_disconn_req={{0x6, 0x2, 0x4}, {0x1, 0xff8e}}, @l2cap_disconn_rsp={{0x7, 0x11, 0x4}, {0x75, 0xb0ff}}, @l2cap_move_chan_req={{0xe, 0x3f, 0x3}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0x7, 0xa3}}, @l2cap_move_chan_rsp={{0xf, 0x8, 0x4}, {0x200, 0x1f}}]}}, 0x46) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) 1m37.682518442s ago: executing program 3 (id=13): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1m37.540752756s ago: executing program 5 (id=6): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x17, &(0x7f00000004c0)={@dev, @random="e5dbda09b0a5", @val, {@generic={0x0, "b2"}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000187b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e8500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000000), 0x400000) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m37.420752189s ago: executing program 0 (id=14): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) landlock_create_ruleset(&(0x7f00000000c0), 0x10, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x41}, @l2cap_cid_signaling={{0x3d}, [@l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x6, 0x1f}}, @l2cap_conn_req={{0x2, 0x9, 0x4}, {0x9, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x0, 0xc}}, @l2cap_disconn_req={{0x6, 0x2, 0x4}, {0x1, 0xff8e}}, @l2cap_disconn_rsp={{0x7, 0x11, 0x4}, {0x75, 0xb0ff}}, @l2cap_move_chan_req={{0xe, 0x3f, 0x3}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0x7, 0xa3}}, @l2cap_move_chan_rsp={{0xf, 0x8, 0x4}, {0x200, 0x1f}}]}}, 0x46) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xf26, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000081, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) 1m33.260613053s ago: executing program 0 (id=15): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) landlock_create_ruleset(&(0x7f00000000c0), 0x10, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x41}, @l2cap_cid_signaling={{0x3d}, [@l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x6, 0x1f}}, @l2cap_conn_req={{0x2, 0x9, 0x4}, {0x9, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x0, 0xc}}, @l2cap_disconn_req={{0x6, 0x2, 0x4}, {0x1, 0xff8e}}, @l2cap_disconn_rsp={{0x7, 0x11, 0x4}, {0x75, 0xb0ff}}, @l2cap_move_chan_req={{0xe, 0x3f, 0x3}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0x7, 0xa3}}, @l2cap_move_chan_rsp={{0xf, 0x8, 0x4}, {0x200, 0x1f}}]}}, 0x46) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xf26, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000081, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) 1m33.020639753s ago: executing program 5 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f0000000180)=""/248, 0x1b, 0xf8, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000090000000060a010400000000000000000100000008000b400000000068000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c0002800800018000000000340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000200900010073797a30"], 0x104}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = socket(0x2c, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp=r7}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x0, 0x8, 0x301, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m32.970136875s ago: executing program 3 (id=18): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x17, &(0x7f00000004c0)={@dev, @random="e5dbda09b0a5", @val, {@generic={0x0, "b2"}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000187b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e8500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000000), 0x400000) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m28.825823455s ago: executing program 0 (id=20): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0404"], 0x11) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdirat(r3, &(0x7f0000000240)='./file0\x00', 0x1a) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000022c0)=ANY=[]) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x8, 0x0, 0x2, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10000}) timerfd_settime(r5, 0x3, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000003e00)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000480)=""/116, 0x74}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000001780)=""/140, 0x8c}], 0x6}}, {{&(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000340)}, 0x901a}], 0x2, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000000180)=[{{0x0, 0x2e, 0x0}}], 0x1, 0x4000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) 1m28.631730485s ago: executing program 3 (id=21): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m26.150293575s ago: executing program 5 (id=22): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) landlock_create_ruleset(&(0x7f00000000c0), 0x10, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x41}, @l2cap_cid_signaling={{0x3d}, [@l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x6, 0x1f}}, @l2cap_conn_req={{0x2, 0x9, 0x4}, {0x9, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x0, 0xc}}, @l2cap_disconn_req={{0x6, 0x2, 0x4}, {0x1, 0xff8e}}, @l2cap_disconn_rsp={{0x7, 0x11, 0x4}, {0x75, 0xb0ff}}, @l2cap_move_chan_req={{0xe, 0x3f, 0x3}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0x7, 0xa3}}, @l2cap_move_chan_rsp={{0xf, 0x8, 0x4}, {0x200, 0x1f}}]}}, 0x46) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xf26, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000081, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) 1m24.75439027s ago: executing program 5 (id=24): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x17, &(0x7f00000004c0)={@dev, @random="e5dbda09b0a5", @val, {@generic={0x0, "b2"}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000187b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e8500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000000), 0x400000) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m22.339599378s ago: executing program 5 (id=25): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(0x0, 0x11) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdirat(r4, &(0x7f0000000240)='./file0\x00', 0x1a) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000022c0)=ANY=[]) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x8, 0x0, 0x2, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10000}) timerfd_settime(r6, 0x3, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) recvmmsg(r7, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000003e00)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000480)=""/116, 0x74}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000001780)=""/140, 0x8c}], 0x6}}, {{&(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000340)}, 0x901a}], 0x2, 0x0, 0x0) sendmmsg$sock(r7, &(0x7f0000000180)=[{{0x0, 0x2e, 0x0}}], 0x1, 0x4000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) 1m6.758757146s ago: executing program 2 (id=46): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) landlock_create_ruleset(&(0x7f00000000c0), 0x10, 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x41}, @l2cap_cid_signaling={{0x3d}, [@l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x6, 0x1f}}, @l2cap_conn_req={{0x2, 0x9, 0x4}, {0x9, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x0, 0xc}}, @l2cap_disconn_req={{0x6, 0x2, 0x4}, {0x1, 0xff8e}}, @l2cap_disconn_rsp={{0x7, 0x11, 0x4}, {0x75, 0xb0ff}}, @l2cap_move_chan_req={{0xe, 0x3f, 0x3}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0x7, 0xa3}}, @l2cap_move_chan_rsp={{0xf, 0x8, 0x4}, {0x200, 0x1f}}]}}, 0x46) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xf26, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000081, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) 1m1.112516955s ago: executing program 2 (id=52): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) landlock_create_ruleset(&(0x7f00000000c0), 0x10, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x41}, @l2cap_cid_signaling={{0x3d}, [@l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x6, 0x1f}}, @l2cap_conn_req={{0x2, 0x9, 0x4}, {0x9, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x0, 0xc}}, @l2cap_disconn_req={{0x6, 0x2, 0x4}, {0x1, 0xff8e}}, @l2cap_disconn_rsp={{0x7, 0x11, 0x4}, {0x75, 0xb0ff}}, @l2cap_move_chan_req={{0xe, 0x3f, 0x3}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0x7, 0xa3}}, @l2cap_move_chan_rsp={{0xf, 0x8, 0x4}, {0x200, 0x1f}}]}}, 0x46) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xf26, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000081, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) 59.380004696s ago: executing program 2 (id=54): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x488) r0 = syz_open_procfs(0x0, 0x0) socket$unix(0x1, 0x0, 0x0) connect$nfc_raw(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f0000000380), &(0x7f0000000180)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCFLSH(0xffffffffffffffff, 0x40204706, 0x20000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 56.802294684s ago: executing program 2 (id=59): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x179, &(0x7f0000000680)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x2, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0xd, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x10000, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = userfaultfd(0x80801) r4 = syz_clone(0x10000000, &(0x7f0000000140)="3464fea7", 0x4, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)="337949a56a5561d7b64b198185ecc4b2cc6136438fd44aab901a6e735bbe36b1d4a7231db6a5b0c6ec5a6f8754f0711458243577ada0bb677dc126fe2026fced0df7ffb3035c43676eb9486f09c7da39030bf79c5a97aa08c5c31883228c78f557ace87d08501bbb75f316061c406fc81061d6601b280dcee9fcdc49a5b94111857f02e492eeebb22cdecffa1f37cab440fb3231058b9995c726bb79cd") ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x0, 0x5004) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x1000}) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x24008041) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 54.242027219s ago: executing program 2 (id=62): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x4}}, 0x24, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='ext4_mark_inode_dirty\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYRES64=r2, @ANYRES16, @ANYRES64=r3, @ANYBLOB="53b4d6beb32857292d785833e8566bf427128d4cc259bb7e46e2ff6e9e4b05adefcd6c8102c251f223c2fec3278e04498a0a1cd3af3ce4a57347727b9049cc2c416021f00da9bb223b8eeaa71d665ae0e055ae7cae5b789ed582347a71a901f04da2ed1de72b40126096f1aef69cbf1d2b3d183015839b954eeedef49a4196f2e8e259a63effd5058985de0bac13cace01372412c2db8e5779197766e46cfc5c9f949b517e723358bb4aa399ddd0288bfc1870aa3b1b59679ad221af", @ANYRES64=r2, @ANYBLOB="27dc545a7c90f6d58893f3e8e397e175919ca114b3d6746fcdc27bcc48456760e9e15a7931aa1d3457fe0685dede8a3fc567bf3d62a1de821fcff1d02c2fa2a820eb847c8f1276836802a12c4a2577fd6a0320e524e6731f6e8ff49378f8fcc07629e4eb1045700bfea1465006207e928a4f8ada5d46c51c6931b7bb8b6084a6af2df51c828f7f126e0b598bafeca45a184cccdeb3e626f7d5d77fe2e6b02d017719fb123351211e2397ff434c742af93abaa63ed61fd548654a4c1ec720a1336fb2c2609b0aeed6b3cd6222d25cc3fb315f1a8e9d32c8f14bd13a788ccd1e2e9a50ee9355be565627aa34f9dc15526a84919c49ed", @ANYRES16=r3, @ANYBLOB="721cf15c649f69418b7eeffdb521eb7f3989"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0xffffffffffffffbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, 0x0) symlink(0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @remote, @val={@void}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket(0x11, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r9, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="03011420ff05430000000800ad0001140000002f2600ac14141fe0000001808a8904bd0500000000000000061fe4fdfe4b449430ebb52997e36ec55d17c6c52353029b1e598825532ac5063ef399fd06000102c8a9202fbdcb19fe1b4d1083a3c06376"], 0xdd12}], 0x1}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000280)={'\x00', 0x41}) 53.14985356s ago: executing program 2 (id=63): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x17, &(0x7f00000004c0)={@dev, @random="e5dbda09b0a5", @val, {@generic={0x0, "b2"}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000187b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e8500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000000), 0x400000) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 8.282501087s ago: executing program 1 (id=114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40801, 0xc0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f0000000040)=""/72, 0x48, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) 7.549971919s ago: executing program 4 (id=115): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x11) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdirat(r4, &(0x7f0000000240)='./file0\x00', 0x1a) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000022c0)=ANY=[]) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x8, 0x0, 0x2, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10000}) timerfd_settime(r6, 0x3, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) recvmmsg(r7, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000003e00)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000480)=""/116, 0x74}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000001780)=""/140, 0x8c}], 0x6}}, {{&(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000340)}, 0x901a}], 0x2, 0x0, 0x0) sendmmsg$sock(r7, &(0x7f0000000180)=[{{0x0, 0x2e, 0x0}}], 0x1, 0x4000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) 6.276066779s ago: executing program 1 (id=116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@union={0x0, 0x0, 0x0, 0xd}, @var={0x2, 0x0, 0x0, 0xe, 0x4, 0x1}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x17, 0x7}]}, {0x0, [0x30]}}, &(0x7f0000000180)=""/248, 0x47, 0xf8, 0x1, 0x0, 0x0, @void, @value}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000090000000060a010400000000000000000100000008000b400000000068000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c0002800800018000000000340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000200900010073797a30"], 0x104}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket(0x2c, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp=r7}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x0, 0x8, 0x301, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.968424565s ago: executing program 4 (id=117): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x179, &(0x7f0000000680)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x2, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0xd, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x10000, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = userfaultfd(0x80801) r4 = syz_clone(0x10000000, &(0x7f0000000140)="3464fea7", 0x4, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)="337949a56a5561d7b64b198185ecc4b2cc6136438fd44aab901a6e735bbe36b1d4a7231db6a5b0c6ec5a6f8754f0711458243577ada0bb677dc126fe2026fced0df7ffb3035c43676eb9486f09c7da39030bf79c5a97aa08c5c31883228c78f557ace87d08501bbb75f316061c406fc81061d6601b280dcee9fcdc49a5b94111857f02e492eeebb22cdecffa1f37cab440fb3231058b9995c726bb79cdb5d73fe3e6bcbe6754ea") ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x0, 0x5004) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x24008041) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.753589469s ago: executing program 1 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={r2}) 4.502763743s ago: executing program 4 (id=119): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x11) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdirat(r4, &(0x7f0000000240)='./file0\x00', 0x1a) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000022c0)=ANY=[]) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x8, 0x0, 0x2, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10000}) timerfd_settime(r6, 0x3, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) recvmmsg(r7, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000003e00)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000480)=""/116, 0x74}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000001780)=""/140, 0x8c}], 0x6}}, {{&(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000340)}, 0x901a}], 0x2, 0x0, 0x0) sendmmsg$sock(r7, &(0x7f0000000180)=[{{0x0, 0x2e, 0x0}}], 0x1, 0x4000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) 4.158044854s ago: executing program 1 (id=120): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x4}}, 0x24, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='ext4_mark_inode_dirty\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYRES64=r2, @ANYRES16, @ANYRES64=r3, @ANYBLOB="53b4d6beb32857292d785833e8566bf427128d4cc259bb7e46e2ff6e9e4b05adefcd6c8102c251f223c2fec3278e04498a0a1cd3af3ce4a57347727b9049cc2c416021f00da9bb223b8eeaa71d665ae0e055ae7cae5b789ed582347a71a901f04da2ed1de72b40126096f1aef69cbf1d2b3d183015839b954eeedef49a4196f2e8e259a63effd5058985de0bac13cace01372412c2db8e5779197766e46cfc5c9f949b517e723358bb4aa399ddd0288bfc1870aa3b1b59679ad221af", @ANYRES64=r2, @ANYBLOB="27dc545a7c90f6d58893f3e8e397e175919ca114b3d6746fcdc27bcc48456760e9e15a7931aa1d3457fe0685dede8a3fc567bf3d62a1de821fcff1d02c2fa2a820eb847c8f1276836802a12c4a2577fd6a0320e524e6731f6e8ff49378f8fcc07629e4eb1045700bfea1465006207e928a4f8ada5d46c51c6931b7bb8b6084a6af2df51c828f7f126e0b598bafeca45a184cccdeb3e626f7d5d77fe2e6b02d017719fb123351211e2397ff434c742af93abaa63ed61fd548654a4c1ec720a1336fb2c2609b0aeed6b3cd6222d25cc3fb315f1a8e9d32c8f14bd13a788ccd1e2e9a50ee9355be565627aa34f9dc15526a84919c49ed", @ANYRES16=r3, @ANYBLOB="721cf15c649f69418b7eeffdb521eb7f3989"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0xffffffffffffffbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) symlink(0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @remote, @val={@void}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket(0x11, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r9, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="03011420ff05430000000800ad0001140000002f2600ac14141fe0000001808a8904bd0500000000000000061fe4fdfe4b449430ebb52997e36ec55d17c6c52353029b1e598825532ac5063ef399fd06000102c8a9202fbdcb19fe1b4d1083a3c06376"], 0xdd12}], 0x1}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000280)={'\x00', 0x41}) 3.080213679s ago: executing program 4 (id=121): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x17, &(0x7f00000004c0)={@dev, @random="e5dbda09b0a5", @val, {@generic={0x0, "b2"}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000187b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e8500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000000), 0x400000) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.71013076s ago: executing program 1 (id=122): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x179, &(0x7f0000000680)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x2, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0xd, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x10000, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = userfaultfd(0x80801) syz_clone(0x10000000, &(0x7f0000000140)="3464fea7", 0x4, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)="337949a56a5561d7b64b198185ecc4b2cc6136438fd44aab901a6e735bbe36b1d4a7231db6a5b0c6ec5a6f8754f0711458243577ada0bb677dc126fe2026fced0df7ffb3035c43676eb9486f09c7da39030bf79c5a97aa08c5c31883228c78f557ace87d08501bbb75f316061c406fc81061d6601b280dcee9fcdc49a5b94111857f02e492eeebb22cdecffa1f37cab440fb3231058b9995c726bb79cdb5d73fe3e6bcbe6754ea") ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x1000}) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x24008041) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.813962468s ago: executing program 4 (id=123): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) landlock_create_ruleset(&(0x7f00000000c0), 0x10, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x41}, @l2cap_cid_signaling={{0x3d}, [@l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x6, 0x1f}}, @l2cap_conn_req={{0x2, 0x9, 0x4}, {0x9, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x0, 0xc}}, @l2cap_disconn_req={{0x6, 0x2, 0x4}, {0x1, 0xff8e}}, @l2cap_disconn_rsp={{0x7, 0x11, 0x4}, {0x75, 0xb0ff}}, @l2cap_move_chan_req={{0xe, 0x3f, 0x3}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0x7, 0xa3}}, @l2cap_move_chan_rsp={{0xf, 0x8, 0x4}, {0x200, 0x1f}}]}}, 0x46) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xf26, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000081, @void, @value}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) 1.673355ms ago: executing program 4 (id=124): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) landlock_create_ruleset(&(0x7f00000000c0), 0x10, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x41}, @l2cap_cid_signaling={{0x3d}, [@l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x6, 0x1f}}, @l2cap_conn_req={{0x2, 0x9, 0x4}, {0x9, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x0, 0xc}}, @l2cap_disconn_req={{0x6, 0x2, 0x4}, {0x1, 0xff8e}}, @l2cap_disconn_rsp={{0x7, 0x11, 0x4}, {0x75, 0xb0ff}}, @l2cap_move_chan_req={{0xe, 0x3f, 0x3}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0x7, 0xa3}}, @l2cap_move_chan_rsp={{0xf, 0x8, 0x4}, {0x200, 0x1f}}]}}, 0x46) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xf26, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000081, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) 0s ago: executing program 1 (id=125): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0404"], 0x11) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdirat(r4, &(0x7f0000000240)='./file0\x00', 0x1a) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000022c0)=ANY=[]) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x8, 0x0, 0x2, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10000}) timerfd_settime(r6, 0x3, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) recvmmsg(r7, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000003e00)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000480)=""/116, 0x74}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000001780)=""/140, 0x8c}], 0x6}}, {{&(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000340)}, 0x901a}], 0x2, 0x0, 0x0) sendmmsg$sock(r7, &(0x7f0000000180)=[{{0x0, 0x2e, 0x0}}], 0x1, 0x4000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. [ 59.709511][ T5215] cgroup: Unknown subsys name 'net' [ 59.907479][ T5215] cgroup: Unknown subsys name 'cpuset' [ 59.917110][ T5215] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.330669][ T5215] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.841810][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.853310][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.862916][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.871672][ T5245] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.880535][ T5247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.890779][ T5247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.898457][ T5247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.911703][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.913309][ T5247] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.920582][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.933461][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.941410][ T5247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.941642][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.956244][ T5250] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.963801][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.968793][ T5249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.972760][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.979420][ T5249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.993604][ T5249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.001092][ T5250] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.001996][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.010521][ T5250] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.024821][ T5249] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.027145][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.032034][ T5250] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.038893][ T5251] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.046151][ T5249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.053292][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.061675][ T5249] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 66.069444][ T5251] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.085286][ T5251] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.093901][ T5249] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.113087][ T5249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.120863][ T5249] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 66.132241][ T5249] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 66.140258][ T5249] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.502209][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 66.739164][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 66.751322][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 66.811688][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 66.860926][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.872482][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.881125][ T5228] bridge_slave_0: entered allmulticast mode [ 66.889023][ T5228] bridge_slave_0: entered promiscuous mode [ 66.901915][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.910593][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.917792][ T5228] bridge_slave_1: entered allmulticast mode [ 66.924775][ T5228] bridge_slave_1: entered promiscuous mode [ 67.027518][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.045905][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 67.074658][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.097198][ T5246] chnl_net:caif_netlink_parms(): no params data found [ 67.107296][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.114613][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.121754][ T5227] bridge_slave_0: entered allmulticast mode [ 67.128845][ T5227] bridge_slave_0: entered promiscuous mode [ 67.167003][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.174336][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.181480][ T5226] bridge_slave_0: entered allmulticast mode [ 67.189389][ T5226] bridge_slave_0: entered promiscuous mode [ 67.202008][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.209645][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.217568][ T5226] bridge_slave_1: entered allmulticast mode [ 67.225039][ T5226] bridge_slave_1: entered promiscuous mode [ 67.241786][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.249126][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.256453][ T5227] bridge_slave_1: entered allmulticast mode [ 67.263810][ T5227] bridge_slave_1: entered promiscuous mode [ 67.270420][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.277741][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.285096][ T5229] bridge_slave_0: entered allmulticast mode [ 67.291876][ T5229] bridge_slave_0: entered promiscuous mode [ 67.359446][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.367012][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.374450][ T5229] bridge_slave_1: entered allmulticast mode [ 67.381294][ T5229] bridge_slave_1: entered promiscuous mode [ 67.390850][ T5228] team0: Port device team_slave_0 added [ 67.399986][ T5228] team0: Port device team_slave_1 added [ 67.412795][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.480087][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.517000][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.528806][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.545505][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.568823][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.576109][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.603363][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.643381][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.671624][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.679123][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.705452][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.724480][ T5226] team0: Port device team_slave_0 added [ 67.762492][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.769894][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.777589][ T5246] bridge_slave_0: entered allmulticast mode [ 67.785141][ T5246] bridge_slave_0: entered promiscuous mode [ 67.816563][ T5226] team0: Port device team_slave_1 added [ 67.822480][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.829808][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.837895][ T5236] bridge_slave_0: entered allmulticast mode [ 67.845210][ T5236] bridge_slave_0: entered promiscuous mode [ 67.853115][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.860295][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.867783][ T5236] bridge_slave_1: entered allmulticast mode [ 67.875158][ T5236] bridge_slave_1: entered promiscuous mode [ 67.885124][ T5227] team0: Port device team_slave_0 added [ 67.911576][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.919277][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.926811][ T5246] bridge_slave_1: entered allmulticast mode [ 67.933839][ T5246] bridge_slave_1: entered promiscuous mode [ 67.950179][ T5229] team0: Port device team_slave_0 added [ 67.978168][ T5227] team0: Port device team_slave_1 added [ 68.010093][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.039554][ T5229] team0: Port device team_slave_1 added [ 68.054783][ T5228] hsr_slave_0: entered promiscuous mode [ 68.061468][ T5228] hsr_slave_1: entered promiscuous mode [ 68.082876][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.089873][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.116145][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.129808][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.141621][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.151626][ T5249] Bluetooth: hci2: command tx timeout [ 68.152923][ T5245] Bluetooth: hci0: command tx timeout [ 68.157500][ T5243] Bluetooth: hci1: command tx timeout [ 68.163028][ T5245] Bluetooth: hci3: command tx timeout [ 68.173094][ T5249] Bluetooth: hci4: command tx timeout [ 68.174219][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.207538][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.214627][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.241199][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.243094][ T5249] Bluetooth: hci5: command tx timeout [ 68.259722][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.267079][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.293154][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.342224][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.349683][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.375704][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.388871][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.395934][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.422312][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.434609][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.441584][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.467637][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.498168][ T5236] team0: Port device team_slave_0 added [ 68.554412][ T5236] team0: Port device team_slave_1 added [ 68.567216][ T5227] hsr_slave_0: entered promiscuous mode [ 68.574264][ T5227] hsr_slave_1: entered promiscuous mode [ 68.580787][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.590238][ T5227] Cannot create hsr debugfs directory [ 68.601127][ T5246] team0: Port device team_slave_0 added [ 68.609644][ T5246] team0: Port device team_slave_1 added [ 68.685691][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.693064][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.719794][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.753140][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.760138][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.787011][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.800288][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.807786][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.834686][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.860973][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.868331][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.894586][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.922009][ T5226] hsr_slave_0: entered promiscuous mode [ 68.929068][ T5226] hsr_slave_1: entered promiscuous mode [ 68.935350][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.943869][ T5226] Cannot create hsr debugfs directory [ 68.971190][ T5229] hsr_slave_0: entered promiscuous mode [ 68.977658][ T5229] hsr_slave_1: entered promiscuous mode [ 68.984969][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.992570][ T5229] Cannot create hsr debugfs directory [ 69.106467][ T5246] hsr_slave_0: entered promiscuous mode [ 69.114863][ T5246] hsr_slave_1: entered promiscuous mode [ 69.121146][ T5246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.128794][ T5246] Cannot create hsr debugfs directory [ 69.230302][ T5236] hsr_slave_0: entered promiscuous mode [ 69.236858][ T5236] hsr_slave_1: entered promiscuous mode [ 69.244031][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.251644][ T5236] Cannot create hsr debugfs directory [ 69.480596][ T5228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.532957][ T5228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.543848][ T5228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.584272][ T5228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.642161][ T5226] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.672074][ T5226] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 69.682025][ T5226] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.705330][ T5226] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.748949][ T5229] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.775432][ T5229] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.789135][ T5229] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.807372][ T5229] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.887822][ T5227] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.898270][ T5227] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.934061][ T5227] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.945010][ T5227] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.991939][ T5236] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.001792][ T5236] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.029805][ T5236] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.041005][ T5236] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.120949][ T5246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.133645][ T5246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.157725][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.178247][ T5246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.222989][ T5249] Bluetooth: hci3: command tx timeout [ 70.224314][ T5245] Bluetooth: hci4: command tx timeout [ 70.228491][ T5243] Bluetooth: hci2: command tx timeout [ 70.234115][ T5245] Bluetooth: hci1: command tx timeout [ 70.234161][ T5245] Bluetooth: hci0: command tx timeout [ 70.240503][ T5246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.290329][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.303076][ T5249] Bluetooth: hci5: command tx timeout [ 70.321247][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.375554][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.382975][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.411769][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.430859][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.441125][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.448303][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.473755][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.486547][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.493699][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.559103][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.566266][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.581148][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.593756][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.601015][ T1047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.617703][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.659436][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.666643][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.678392][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.685534][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.721447][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.740485][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.748341][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.907216][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.946702][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.963852][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.980706][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.987950][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.045280][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.052464][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.121674][ T5227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.201683][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.335130][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.356269][ T5236] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.408289][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.463797][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.471076][ T1047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.540553][ T1047] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.547787][ T1047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.568069][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.614446][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.695824][ T5228] veth0_vlan: entered promiscuous mode [ 71.760293][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.828733][ T5228] veth1_vlan: entered promiscuous mode [ 71.845227][ T5229] veth0_vlan: entered promiscuous mode [ 71.922307][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.978018][ T5229] veth1_vlan: entered promiscuous mode [ 72.001853][ T5227] veth0_vlan: entered promiscuous mode [ 72.059742][ T5227] veth1_vlan: entered promiscuous mode [ 72.188465][ T5228] veth0_macvtap: entered promiscuous mode [ 72.220002][ T5226] veth0_vlan: entered promiscuous mode [ 72.240553][ T5228] veth1_macvtap: entered promiscuous mode [ 72.264712][ T5229] veth0_macvtap: entered promiscuous mode [ 72.284708][ T5227] veth0_macvtap: entered promiscuous mode [ 72.306707][ T5251] Bluetooth: hci0: command tx timeout [ 72.312204][ T5251] Bluetooth: hci1: command tx timeout [ 72.313687][ T5243] Bluetooth: hci4: command tx timeout [ 72.318288][ T5245] Bluetooth: hci2: command tx timeout [ 72.323411][ T5249] Bluetooth: hci3: command tx timeout [ 72.343052][ T5226] veth1_vlan: entered promiscuous mode [ 72.366267][ T5227] veth1_macvtap: entered promiscuous mode [ 72.377276][ T5229] veth1_macvtap: entered promiscuous mode [ 72.392799][ T5249] Bluetooth: hci5: command tx timeout [ 72.398599][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.433827][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.445731][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.457887][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.471737][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.489061][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.500006][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.510221][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.521641][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.533637][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.545355][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.556567][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.568888][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.594536][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.605098][ T5228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.614381][ T5228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.624297][ T5228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.633200][ T5228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.653426][ T5229] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.662199][ T5229] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.671504][ T5229] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.682017][ T5229] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.693024][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.704636][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.714998][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.725728][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.736906][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.748557][ T5227] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.759096][ T5227] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.769782][ T5227] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.778605][ T5227] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.857397][ T5236] veth0_vlan: entered promiscuous mode [ 72.869926][ T5226] veth0_macvtap: entered promiscuous mode [ 72.964157][ T5226] veth1_macvtap: entered promiscuous mode [ 72.980027][ T5236] veth1_vlan: entered promiscuous mode [ 73.008735][ T5246] veth0_vlan: entered promiscuous mode [ 73.085572][ T5246] veth1_vlan: entered promiscuous mode [ 73.095406][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.107226][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.117691][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.128279][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.138619][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.149654][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.161583][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.173479][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.184515][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.194832][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.208798][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.219564][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.230172][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.241533][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.251271][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.263092][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.278713][ T1045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.291248][ T1045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.317921][ T5226] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.327906][ T5226] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.337518][ T5226] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.346659][ T5226] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.360271][ T1062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.369567][ T1062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.437216][ T5236] veth0_macvtap: entered promiscuous mode [ 73.474732][ T1062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.477044][ T5236] veth1_macvtap: entered promiscuous mode [ 73.482600][ T1062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.534854][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.549742][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.582154][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.595653][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.601408][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.609677][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.627864][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.641835][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.653332][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.664788][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.686386][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.697733][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.709440][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.719831][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.730458][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.740660][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.751195][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.761082][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.773173][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.784017][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.794556][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.807541][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.848505][ T5246] veth0_macvtap: entered promiscuous mode [ 73.876240][ T5236] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.876256][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.910351][ T5236] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.920039][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.923452][ T5236] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.943256][ T5236] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.027379][ T5246] veth1_macvtap: entered promiscuous mode [ 74.053254][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.065961][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.075873][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.088681][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.109348][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.131303][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.142176][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.160953][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.171647][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.191418][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.203710][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.149104][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.163350][ T5249] Bluetooth: hci1: command tx timeout [ 78.168809][ T5249] Bluetooth: hci2: command tx timeout [ 78.175291][ T5249] Bluetooth: hci3: command tx timeout [ 78.180733][ T5249] Bluetooth: hci4: command tx timeout [ 78.186997][ T5251] Bluetooth: hci0: command tx timeout [ 78.192451][ T5251] Bluetooth: hci5: command tx timeout [ 78.223277][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.259872][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.301861][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.422705][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.468868][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.554552][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.595081][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.648662][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.741717][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.753412][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.773493][ T5246] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.782256][ T5246] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.968426][ T5246] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.388161][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 80.398585][ T5243] Bluetooth: Wrong link type (-22) [ 80.404427][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 80.411319][ T5243] Bluetooth: Wrong link type (-22) [ 80.417192][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 80.424206][ T5243] Bluetooth: Wrong link type (-22) [ 80.430192][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 80.437382][ T5243] Bluetooth: Wrong link type (-22) [ 80.606067][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 80.622972][ T5243] Bluetooth: Wrong link type (-22) [ 80.661750][ T5246] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.803966][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.843516][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.349713][ T1579] cfg80211: failed to load regulatory.db [ 81.576767][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 81.583518][ T5243] Bluetooth: Wrong link type (-22) [ 81.803739][ T5363] hub 9-0:1.0: USB hub found [ 81.809403][ T5363] hub 9-0:1.0: 8 ports detected [ 82.982015][ T5364] hub 9-0:1.0: USB hub found [ 82.988218][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 82.995543][ T5364] hub 9-0:1.0: 8 ports detected [ 83.171835][ T5251] Bluetooth: Wrong link type (-22) [ 83.180143][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 83.190147][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 83.197649][ T5251] Bluetooth: Wrong link type (-22) [ 83.350881][ T5243] Bluetooth: Wrong link type (-22) [ 83.356278][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 83.363067][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 83.369616][ T5243] Bluetooth: Wrong link type (-22) [ 83.374883][ T5251] Bluetooth: Wrong link type (-22) [ 83.380064][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 83.386836][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 83.393918][ T5251] Bluetooth: Wrong link type (-22) [ 83.400222][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 83.406920][ T5243] Bluetooth: Wrong link type (-22) [ 83.412130][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 83.419207][ T5251] Bluetooth: Wrong link type (-22) [ 83.424523][ T5243] Bluetooth: Wrong link type (-22) [ 83.722544][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.867284][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.377427][ T5374] hub 9-0:1.0: USB hub found [ 85.383878][ T5374] hub 9-0:1.0: 8 ports detected [ 85.509093][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 85.516119][ T5251] Bluetooth: Wrong link type (-22) [ 85.523655][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 85.530558][ T5251] Bluetooth: Wrong link type (-22) [ 85.536466][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 85.547152][ T5251] Bluetooth: Wrong link type (-22) [ 85.553102][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 85.559954][ T5251] Bluetooth: Wrong link type (-22) [ 85.680252][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 85.686926][ T5251] Bluetooth: Wrong link type (-22) [ 86.210864][ T5351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.289647][ T5351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.622958][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 86.657844][ T5251] Bluetooth: Wrong link type (-22) [ 88.463245][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 90.015741][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 90.024552][ T5243] Bluetooth: Wrong link type (-22) [ 90.029869][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 90.036517][ T5243] Bluetooth: Wrong link type (-22) [ 90.041763][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 90.048381][ T5243] Bluetooth: Wrong link type (-22) [ 90.054048][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 90.060923][ T5243] Bluetooth: Wrong link type (-22) [ 90.066184][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 90.073047][ T5243] Bluetooth: Wrong link type (-22) [ 90.102810][ T5251] Bluetooth: Wrong link type (-22) [ 90.108295][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 90.131721][ T5251] Bluetooth: Wrong link type (-22) [ 90.137023][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 90.143927][ T5251] Bluetooth: Wrong link type (-22) [ 90.149136][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 90.156582][ T5251] Bluetooth: Wrong link type (-22) [ 90.439800][ T1062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.486120][ T1062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.845612][ T5401] hub 9-0:1.0: USB hub found [ 93.853516][ T5401] hub 9-0:1.0: 8 ports detected [ 94.146040][ T5402] hub 9-0:1.0: USB hub found [ 94.153331][ T5402] hub 9-0:1.0: 8 ports detected [ 94.483886][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 94.501540][ T5251] Bluetooth: Wrong link type (-22) [ 94.507163][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 94.513856][ T5243] Bluetooth: Wrong link type (-22) [ 94.519131][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 94.526084][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 94.532801][ T5243] Bluetooth: Wrong link type (-22) [ 94.538062][ T5251] Bluetooth: Wrong link type (-22) [ 94.543345][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 94.550060][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 94.556906][ T5243] Bluetooth: Wrong link type (-22) [ 94.563061][ T5251] Bluetooth: Wrong link type (-22) [ 94.573851][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 94.581084][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 94.597818][ T5251] Bluetooth: Wrong link type (-22) [ 94.603117][ T5243] Bluetooth: Wrong link type (-22) [ 94.608614][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 94.615507][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 94.622027][ T5251] Bluetooth: Wrong link type (-22) [ 94.627548][ T5243] Bluetooth: Wrong link type (-22) [ 94.959224][ T5251] Bluetooth: hci2: unexpected event 0x04 length: 14 > 10 [ 94.989819][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.874483][ T5419] hub 9-0:1.0: USB hub found [ 96.882190][ T5419] hub 9-0:1.0: 8 ports detected [ 97.013761][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 97.021334][ T5251] Bluetooth: Wrong link type (-22) [ 97.028148][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 97.036979][ T5251] Bluetooth: Wrong link type (-22) [ 97.042511][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 97.053337][ T5251] Bluetooth: Wrong link type (-22) [ 97.058766][ T5243] Bluetooth: hci2: command tx timeout [ 97.168686][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 97.175406][ T5251] Bluetooth: Wrong link type (-22) [ 97.180651][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 97.188046][ T5251] Bluetooth: Wrong link type (-22) [ 97.276097][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.673122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.732987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.824144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 99.763984][ T5447] hub 9-0:1.0: USB hub found [ 99.774250][ T5447] hub 9-0:1.0: 8 ports detected [ 100.994576][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 101.001157][ T5251] Bluetooth: Wrong link type (-22) [ 101.007069][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 101.016916][ T5251] Bluetooth: Wrong link type (-22) [ 101.022098][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 101.032679][ T5251] Bluetooth: Wrong link type (-22) [ 101.037838][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 101.052672][ T5251] Bluetooth: Wrong link type (-22) [ 101.059813][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 101.066895][ T5251] Bluetooth: Wrong link type (-22) [ 101.316885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 101.325458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.512925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.982649][ C1] sched: RT throttling activated [ 103.106111][ T5457] loop4: detected capacity change from 0 to 8 [ 103.335486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.363415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 103.774568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.031878][ T5466] hub 9-0:1.0: USB hub found [ 104.037069][ T5466] hub 9-0:1.0: 8 ports detected [ 104.565538][ T5472] loop1: detected capacity change from 0 to 8 [ 104.698789][ T5473] hub 9-0:1.0: USB hub found [ 104.710933][ T5473] hub 9-0:1.0: 8 ports detected [ 105.005057][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 105.012016][ T5251] Bluetooth: Wrong link type (-22) [ 105.054559][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 105.061350][ T5251] Bluetooth: Wrong link type (-22) [ 105.081242][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 105.090423][ T5251] Bluetooth: Wrong link type (-22) [ 105.372738][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 105.379326][ T5251] Bluetooth: Wrong link type (-22) [ 105.392718][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 105.403816][ T5251] Bluetooth: Wrong link type (-22) [ 105.485891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.667954][ T5485] loop1: detected capacity change from 0 to 8 [ 107.563224][ T5251] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 108.908083][ T5243] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 108.923298][ T5243] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 108.931118][ T5243] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 108.945067][ T5243] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 108.952981][ T5243] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 108.960951][ T5243] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 109.426681][ T5498] hub 9-0:1.0: USB hub found [ 109.432946][ T5498] hub 9-0:1.0: 8 ports detected [ 109.772936][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 109.779968][ T5243] Bluetooth: Wrong link type (-22) [ 109.785893][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 110.102773][ T5243] Bluetooth: Wrong link type (-22) [ 110.108013][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 110.116509][ T5243] Bluetooth: Wrong link type (-22) [ 110.123381][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 110.131517][ T5243] Bluetooth: Wrong link type (-22) [ 110.137223][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 110.144611][ T5243] Bluetooth: Wrong link type (-22) [ 110.326664][ T5251] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 110.350350][ T5251] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 110.362754][ T5251] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 110.374174][ T5251] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 110.382108][ T5251] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 110.392860][ T5251] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 110.774524][ T5508] hub 9-0:1.0: USB hub found [ 110.782991][ T5508] hub 9-0:1.0: 8 ports detected [ 110.915433][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 110.922200][ T5251] Bluetooth: Wrong link type (-22) [ 110.928485][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 110.966478][ T5251] Bluetooth: Wrong link type (-22) [ 110.990220][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 111.001489][ T5251] Bluetooth: Wrong link type (-22) [ 111.010979][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 111.022338][ T5251] Bluetooth: Wrong link type (-22) [ 111.031927][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 111.043375][ T5251] Bluetooth: Wrong link type (-22) [ 111.054444][ T5243] Bluetooth: hci6: command tx timeout [ 111.408860][ T5423] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.583077][ T5511] loop4: detected capacity change from 0 to 1024 [ 111.593009][ T5423] usb 2-1: Using ep0 maxpacket: 16 [ 111.655673][ T5511] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.672878][ T5423] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.722747][ T5423] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 111.732560][ T5423] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 111.925242][ T5511] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.702837][ T5251] Bluetooth: hci7: command tx timeout [ 112.812296][ T5423] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.896662][ T5511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.912783][ T5423] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.918504][ T5492] chnl_net:caif_netlink_parms(): no params data found [ 113.102854][ T5251] Bluetooth: hci6: command tx timeout [ 114.863032][ T5251] Bluetooth: hci7: command tx timeout [ 115.064582][ T5423] usb 2-1: can't set config #1, error -71 [ 115.273199][ T5251] Bluetooth: hci6: command tx timeout [ 115.305830][ T5423] usb 2-1: USB disconnect, device number 2 [ 115.545165][ T5528] loop1: detected capacity change from 0 to 8 [ 115.598769][ T5236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.092595][ T5535] hub 9-0:1.0: USB hub found [ 116.099198][ T5535] hub 9-0:1.0: 8 ports detected [ 116.343113][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 116.349927][ T5243] Bluetooth: Wrong link type (-22) [ 116.355903][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 116.376855][ T5243] Bluetooth: Wrong link type (-22) [ 116.387772][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 116.394999][ T5243] Bluetooth: Wrong link type (-22) [ 116.400723][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 116.407712][ T5243] Bluetooth: Wrong link type (-22) [ 116.413502][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 116.420519][ T5243] Bluetooth: Wrong link type (-22) [ 116.427564][ T5243] Bluetooth: hci5: link tx timeout [ 116.433374][ T5243] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.813982][ T5249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.010088][ T5245] Bluetooth: hci7: command tx timeout [ 117.410312][ T5249] Bluetooth: hci6: command tx timeout [ 117.464716][ T5249] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.512776][ T5249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.529567][ T5249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.602489][ T5249] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 117.644042][ T5249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.548287][ T5553] hub 9-0:1.0: USB hub found [ 118.553329][ T5553] hub 9-0:1.0: 8 ports detected [ 119.661185][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 119.668032][ T5249] Bluetooth: Wrong link type (-22) [ 119.673442][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 119.679979][ T5249] Bluetooth: Wrong link type (-22) [ 119.695666][ T5251] Bluetooth: hci5: command 0x0406 tx timeout [ 119.701752][ T5251] Bluetooth: hci7: command tx timeout [ 119.709066][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 119.715840][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 119.722478][ T5243] Bluetooth: Wrong link type (-22) [ 119.727748][ T5249] Bluetooth: Wrong link type (-22) [ 119.733162][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 119.739693][ T5243] Bluetooth: Wrong link type (-22) [ 119.745082][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 119.753043][ T5251] Bluetooth: hci1: command tx timeout [ 119.759462][ T5249] Bluetooth: Wrong link type (-22) [ 119.765434][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 119.772049][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 119.778679][ T5243] Bluetooth: Wrong link type (-22) [ 119.783921][ T5249] Bluetooth: Wrong link type (-22) [ 119.789203][ T5249] Bluetooth: hci4: link tx timeout [ 119.794780][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 119.801308][ T5243] Bluetooth: Wrong link type (-22) [ 119.806592][ T5249] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 119.814783][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 119.821320][ T5243] Bluetooth: Wrong link type (-22) [ 119.832835][ T5243] Bluetooth: hci3: link tx timeout [ 119.838196][ T5243] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 119.944046][ T5555] hub 9-0:1.0: USB hub found [ 119.953888][ T5555] hub 9-0:1.0: 8 ports detected [ 120.669193][ T5355] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.822848][ T5251] Bluetooth: hci1: command tx timeout [ 121.902942][ T5251] Bluetooth: hci3: command 0x0406 tx timeout [ 121.909201][ T5251] Bluetooth: hci4: command 0x0406 tx timeout [ 122.485111][ T5355] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.869034][ T5574] hub 9-0:1.0: USB hub found [ 122.874245][ T5574] hub 9-0:1.0: 8 ports detected [ 123.180664][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 123.188018][ T5243] Bluetooth: Wrong link type (-22) [ 123.193450][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 123.200072][ T5243] Bluetooth: Wrong link type (-22) [ 123.205879][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 123.212501][ T5243] Bluetooth: Wrong link type (-22) [ 123.218403][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 123.225192][ T5243] Bluetooth: Wrong link type (-22) [ 123.699431][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 123.706100][ T5243] Bluetooth: Wrong link type (-22) [ 123.812968][ T5501] chnl_net:caif_netlink_parms(): no params data found [ 123.903127][ T5243] Bluetooth: hci1: command tx timeout [ 123.910826][ T5355] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.968847][ T5492] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.978879][ T5492] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.001413][ T5492] bridge_slave_0: entered allmulticast mode [ 124.029106][ T5492] bridge_slave_0: entered promiscuous mode [ 124.270802][ T5492] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.307930][ T5492] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.666096][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 124.713907][ T5581] hub 9-0:1.0: USB hub found [ 124.720207][ T5243] Bluetooth: Wrong link type (-22) [ 124.725795][ T5581] hub 9-0:1.0: 8 ports detected [ 124.731754][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 124.865926][ T5243] Bluetooth: Wrong link type (-22) [ 124.872160][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 124.879456][ T5243] Bluetooth: Wrong link type (-22) [ 124.885086][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 124.891807][ T5243] Bluetooth: Wrong link type (-22) [ 124.897301][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 124.904263][ T5243] Bluetooth: Wrong link type (-22) [ 124.982000][ T5492] bridge_slave_1: entered allmulticast mode [ 125.077554][ T5492] bridge_slave_1: entered promiscuous mode [ 125.429927][ T5355] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.721112][ T5587] hub 9-0:1.0: USB hub found [ 125.726225][ T5587] hub 9-0:1.0: 8 ports detected [ 125.769002][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 125.778628][ T5243] Bluetooth: Wrong link type (-22) [ 125.783993][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 125.793370][ T5243] Bluetooth: Wrong link type (-22) [ 125.799797][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 125.807138][ T5243] Bluetooth: Wrong link type (-22) [ 125.812309][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 126.002872][ T5249] Bluetooth: hci1: command tx timeout [ 126.143912][ T5243] Bluetooth: Wrong link type (-22) [ 126.149464][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 126.293135][ T5243] Bluetooth: Wrong link type (-22) [ 126.695021][ T5492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.765486][ T5594] loop2: detected capacity change from 0 to 8 [ 127.159655][ T5501] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.360179][ T5501] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.415295][ T5501] bridge_slave_0: entered allmulticast mode [ 127.493829][ T5501] bridge_slave_0: entered promiscuous mode [ 127.607447][ T5492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.649528][ T5293] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.972885][ T5293] usb 5-1: Using ep0 maxpacket: 16 [ 128.025759][ T5293] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.142939][ T5293] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 128.155530][ T5293] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 128.169499][ T5293] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.178956][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.191984][ T5599] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 128.234618][ T5293] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 128.370682][ T5501] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.395089][ T5501] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.414281][ T5501] bridge_slave_1: entered allmulticast mode [ 128.421843][ T5501] bridge_slave_1: entered promiscuous mode [ 128.453924][ T5293] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 128.548817][ T5607] hub 9-0:1.0: USB hub found [ 128.555681][ T5607] hub 9-0:1.0: 8 ports detected [ 128.683158][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 128.689949][ T5243] Bluetooth: Wrong link type (-22) [ 128.697139][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 128.705398][ T5243] Bluetooth: Wrong link type (-22) [ 128.711890][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 128.720028][ T5243] Bluetooth: Wrong link type (-22) [ 128.726240][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 128.733649][ T5243] Bluetooth: Wrong link type (-22) [ 128.739122][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 128.760070][ T5243] Bluetooth: Wrong link type (-22) [ 129.277414][ T5293] usb 5-1: USB disconnect, device number 2 [ 129.347800][ T5492] team0: Port device team_slave_0 added [ 129.544225][ T5492] team0: Port device team_slave_1 added [ 129.810496][ T5501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.385018][ T5492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.407550][ T5492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.543714][ T5492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.560479][ T5492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.572241][ T5492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.611490][ T5492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.624217][ T5355] bridge_slave_1: left allmulticast mode [ 130.630106][ T5355] bridge_slave_1: left promiscuous mode [ 130.637591][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.811578][ T5355] bridge_slave_0: left allmulticast mode [ 130.817880][ T5355] bridge_slave_0: left promiscuous mode [ 130.823687][ T5243] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 130.824076][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.405901][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.412291][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.518195][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 132.525141][ T5243] Bluetooth: Wrong link type (-22) [ 132.531035][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 132.588678][ T5243] Bluetooth: Wrong link type (-22) [ 132.594555][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 132.601345][ T5243] Bluetooth: Wrong link type (-22) [ 132.607538][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 132.614324][ T5243] Bluetooth: Wrong link type (-22) [ 132.620156][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 132.626908][ T5243] Bluetooth: Wrong link type (-22) [ 132.791023][ T5637] hub 9-0:1.0: USB hub found [ 132.797879][ T5637] hub 9-0:1.0: 8 ports detected [ 133.084799][ T5243] Bluetooth: hci3: command 0x0406 tx timeout [ 134.325654][ T5355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.376919][ T5355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.677732][ T5355] bond0 (unregistering): Released all slaves [ 137.626117][ T5501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.652544][ T5663] hub 9-0:1.0: USB hub found [ 139.662752][ T5663] hub 9-0:1.0: 8 ports detected [ 139.740939][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 140.012767][ T5243] Bluetooth: Wrong link type (-22) [ 140.018034][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 140.025598][ T5243] Bluetooth: Wrong link type (-22) [ 140.030776][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 140.038487][ T5243] Bluetooth: Wrong link type (-22) [ 140.043979][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 140.050593][ T5243] Bluetooth: Wrong link type (-22) [ 140.055851][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 140.063268][ T5243] Bluetooth: Wrong link type (-22) [ 140.185306][ T5501] team0: Port device team_slave_0 added [ 140.241085][ T5501] team0: Port device team_slave_1 added [ 140.379183][ T5533] chnl_net:caif_netlink_parms(): no params data found [ 141.873040][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 142.585742][ T5243] Bluetooth: Wrong link type (-22) [ 142.596092][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 142.610611][ T5243] Bluetooth: Wrong link type (-22) [ 142.759257][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 142.766116][ T5243] Bluetooth: Wrong link type (-22) [ 142.771322][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 142.778032][ T5243] Bluetooth: Wrong link type (-22) [ 143.688723][ T5693] hub 9-0:1.0: USB hub found [ 143.696775][ T5693] hub 9-0:1.0: 8 ports detected [ 143.823809][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 143.830610][ T5243] Bluetooth: Wrong link type (-22) [ 143.839428][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 143.846863][ T5243] Bluetooth: Wrong link type (-22) [ 143.875302][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 143.882078][ T5243] Bluetooth: Wrong link type (-22) [ 143.889279][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 143.896184][ T5243] Bluetooth: Wrong link type (-22) [ 143.901659][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 143.914786][ T5243] Bluetooth: Wrong link type (-22) [ 144.386383][ T5249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.395056][ T5249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.402561][ T5249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.410938][ T5249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.467844][ T5249] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.482713][ T5249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.716378][ T5492] hsr_slave_0: entered promiscuous mode [ 144.747026][ T5492] hsr_slave_1: entered promiscuous mode [ 144.760920][ T5492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.783306][ T5492] Cannot create hsr debugfs directory [ 144.931781][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 144.939559][ T5249] Bluetooth: Wrong link type (-22) [ 144.948649][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 144.955552][ T5249] Bluetooth: Wrong link type (-22) [ 144.960828][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 144.963345][ T5501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.974690][ T5249] Bluetooth: Wrong link type (-22) [ 144.979956][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 144.986857][ T5249] Bluetooth: Wrong link type (-22) [ 144.992087][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 144.998944][ T5249] Bluetooth: Wrong link type (-22) [ 145.017069][ T5501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.045913][ T5501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.084003][ T5708] hub 9-0:1.0: USB hub found [ 145.119810][ T5708] hub 9-0:1.0: 8 ports detected [ 145.237353][ T5501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.291034][ T5501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.366829][ T5501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.683764][ T5712] hub 9-0:1.0: USB hub found [ 145.689596][ T5712] hub 9-0:1.0: 8 ports detected [ 145.788094][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 145.795095][ T5249] Bluetooth: Wrong link type (-22) [ 145.800745][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 145.809238][ T5249] Bluetooth: Wrong link type (-22) [ 145.815941][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 145.823475][ T5249] Bluetooth: Wrong link type (-22) [ 145.828960][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 145.837098][ T5249] Bluetooth: Wrong link type (-22) [ 145.850103][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 145.865656][ T5249] Bluetooth: Wrong link type (-22) [ 145.953783][ T5355] hsr_slave_0: left promiscuous mode [ 146.013543][ T5355] hsr_slave_1: left promiscuous mode [ 146.225126][ T5355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.242843][ T5355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.264132][ T5355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.292822][ T5355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.361291][ T5355] veth1_macvtap: left promiscuous mode [ 146.388741][ T5355] veth0_macvtap: left promiscuous mode [ 146.403127][ T5355] veth1_vlan: left promiscuous mode [ 146.410383][ T5355] veth0_vlan: left promiscuous mode [ 146.553199][ T5249] Bluetooth: hci0: command tx timeout [ 146.939413][ T5716] loop4: detected capacity change from 0 to 8 [ 147.616397][ T5355] team0 (unregistering): Port device team_slave_1 removed [ 147.745146][ T5355] team0 (unregistering): Port device team_slave_0 removed [ 148.211778][ T5533] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.221116][ T5533] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.244249][ T5533] bridge_slave_0: entered allmulticast mode [ 148.251429][ T5533] bridge_slave_0: entered promiscuous mode [ 148.265243][ T5533] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.272372][ T5533] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.289209][ T5533] bridge_slave_1: entered allmulticast mode [ 148.298864][ T5533] bridge_slave_1: entered promiscuous mode [ 148.354854][ T5501] hsr_slave_0: entered promiscuous mode [ 148.368085][ T5501] hsr_slave_1: entered promiscuous mode [ 148.384078][ T5501] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.402212][ T5501] Cannot create hsr debugfs directory [ 148.576069][ T5533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.623527][ T5249] Bluetooth: hci0: command tx timeout [ 148.661318][ T5533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.852870][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 148.859177][ T5533] team0: Port device team_slave_0 added [ 148.869132][ T5533] team0: Port device team_slave_1 added [ 149.002815][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 149.677371][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.706423][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 149.732323][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 149.764827][ T5533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.782552][ T5533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.811297][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.831833][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.855773][ T5734] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 149.873775][ T9] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 149.883478][ T5533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.932059][ T5533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.942271][ T5533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.984662][ T5533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.082297][ T9] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 150.172798][ T9] usb 2-1: USB disconnect, device number 3 [ 150.202534][ T5492] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.374269][ T5492] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.410615][ T5533] hsr_slave_0: entered promiscuous mode [ 150.423413][ T5533] hsr_slave_1: entered promiscuous mode [ 150.432508][ T5533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.449986][ T5533] Cannot create hsr debugfs directory [ 150.457219][ T5695] chnl_net:caif_netlink_parms(): no params data found [ 150.505528][ T5492] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.648340][ T5492] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.821425][ T5249] Bluetooth: hci4: unexpected event 0x04 length: 14 > 10 [ 151.026367][ T5355] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.064652][ T5355] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.089948][ T5249] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 152.091224][ T5249] Bluetooth: hci4: unexpected event 0x04 length: 14 > 10 [ 152.129451][ T5695] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.436054][ T5695] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.473052][ T5695] bridge_slave_0: entered allmulticast mode [ 152.500480][ T5695] bridge_slave_0: entered promiscuous mode [ 152.864050][ T5249] Bluetooth: hci4: command 0x0406 tx timeout [ 153.013617][ T5355] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.105269][ T5695] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.139592][ T5695] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.162949][ T5695] bridge_slave_1: entered allmulticast mode [ 153.184261][ T5695] bridge_slave_1: entered promiscuous mode [ 153.467856][ T5249] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 154.097298][ T5355] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.143280][ T5249] Bluetooth: hci3: command 0x0406 tx timeout [ 154.415477][ T5695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.445896][ T5492] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 154.485922][ T5492] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 154.536724][ T5492] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 154.603112][ T5695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.694214][ T5492] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 154.982824][ T5249] Bluetooth: hci4: command 0x0406 tx timeout [ 155.079554][ T5695] team0: Port device team_slave_0 added [ 155.253517][ T5795] hub 9-0:1.0: USB hub found [ 155.259834][ T5795] hub 9-0:1.0: 8 ports detected [ 155.347541][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 155.354564][ T5249] Bluetooth: Wrong link type (-22) [ 155.360433][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 155.367240][ T5249] Bluetooth: Wrong link type (-22) [ 155.373041][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 155.379742][ T5249] Bluetooth: Wrong link type (-22) [ 155.391521][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 155.398739][ T5249] Bluetooth: Wrong link type (-22) [ 155.422545][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 155.429841][ T5249] Bluetooth: Wrong link type (-22) [ 155.945919][ T5695] team0: Port device team_slave_1 added [ 156.129861][ T5695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.154482][ T5695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.222762][ T5249] Bluetooth: hci3: command 0x0406 tx timeout [ 156.263011][ T5695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.323489][ T5695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.491293][ T5805] hub 9-0:1.0: USB hub found [ 156.497642][ T5805] hub 9-0:1.0: 8 ports detected [ 156.571480][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 156.578327][ T5249] Bluetooth: Wrong link type (-22) [ 156.595570][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 156.602279][ T5249] Bluetooth: Wrong link type (-22) [ 156.612516][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 156.621094][ T5249] Bluetooth: Wrong link type (-22) [ 156.627990][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 156.636305][ T5249] Bluetooth: Wrong link type (-22) [ 156.649429][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 156.657969][ T5249] Bluetooth: Wrong link type (-22) [ 156.736640][ T5695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.072732][ T5695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.116493][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 157.133755][ T5249] Bluetooth: Wrong link type (-22) [ 157.139019][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 157.146100][ T5249] Bluetooth: Wrong link type (-22) [ 157.151640][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 157.158690][ T5249] Bluetooth: Wrong link type (-22) [ 157.164149][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 157.170715][ T5249] Bluetooth: Wrong link type (-22) [ 157.176342][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 157.183245][ T5249] Bluetooth: Wrong link type (-22) [ 157.269980][ T5355] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.309120][ T5807] hub 9-0:1.0: USB hub found [ 157.337010][ T5807] hub 9-0:1.0: 8 ports detected [ 157.491663][ T5695] hsr_slave_0: entered promiscuous mode [ 157.515903][ T5695] hsr_slave_1: entered promiscuous mode [ 157.555282][ T5695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.582947][ T5695] Cannot create hsr debugfs directory [ 158.505456][ T5355] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.684301][ T5355] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.342222][ T5355] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.784895][ T5492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.041923][ T5831] loop1: detected capacity change from 0 to 8 [ 160.061064][ T5249] Bluetooth: hci4: unexpected event 0x04 length: 14 > 10 [ 160.099835][ T5492] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.641232][ T5492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.949065][ T5492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.601574][ T5355] bridge_slave_1: left allmulticast mode [ 161.612744][ T5355] bridge_slave_1: left promiscuous mode [ 161.618691][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.798415][ T5355] bridge_slave_0: left allmulticast mode [ 161.804578][ T5355] bridge_slave_0: left promiscuous mode [ 161.817145][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.918990][ T5355] bridge_slave_1: left allmulticast mode [ 161.960722][ T5355] bridge_slave_1: left promiscuous mode [ 161.973629][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.242652][ T5249] Bluetooth: hci4: command 0x0406 tx timeout [ 162.291673][ T5355] bridge_slave_0: left allmulticast mode [ 162.299779][ T5355] bridge_slave_0: left promiscuous mode [ 162.305897][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.345729][ T5355] bridge_slave_1: left allmulticast mode [ 162.358251][ T5355] bridge_slave_1: left promiscuous mode [ 162.365172][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.623722][ T5355] bridge_slave_0: left allmulticast mode [ 162.650147][ T5355] bridge_slave_0: left promiscuous mode [ 162.658990][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.720624][ T5851] hub 9-0:1.0: USB hub found [ 164.736411][ T5851] hub 9-0:1.0: 8 ports detected [ 165.596984][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 165.748014][ T5249] Bluetooth: Wrong link type (-22) [ 165.754105][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 165.760868][ T5249] Bluetooth: Wrong link type (-22) [ 165.766738][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 165.773705][ T5249] Bluetooth: Wrong link type (-22) [ 165.778876][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 165.786050][ T5249] Bluetooth: Wrong link type (-22) [ 165.791267][ T5249] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 165.798419][ T5249] Bluetooth: Wrong link type (-22) [ 167.484835][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.494574][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.502324][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.514016][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.522081][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.530540][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.567514][ T5243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 167.588229][ T5243] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 167.723406][ T5243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 167.732281][ T5243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 167.752034][ T5243] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 167.762382][ T5243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 168.978304][ T5874] loop1: detected capacity change from 0 to 8 [ 169.632866][ T5243] Bluetooth: hci2: command tx timeout [ 169.902799][ T5243] Bluetooth: hci5: command tx timeout [ 171.300041][ T5243] Bluetooth: hci4: unexpected event 0x04 length: 14 > 10 [ 171.730704][ T5243] Bluetooth: hci2: command tx timeout [ 172.137284][ T5243] Bluetooth: hci5: command tx timeout [ 173.180144][ T5896] loop1: detected capacity change from 0 to 8 [ 173.191867][ T5251] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 173.209636][ T5251] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 173.218924][ T5251] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 173.233648][ T5251] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 173.245104][ T5251] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 173.257042][ T5251] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 173.344253][ T5243] Bluetooth: hci4: command 0x0406 tx timeout [ 173.891518][ T5243] Bluetooth: hci2: command tx timeout [ 174.117347][ T5355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.162468][ T5243] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 174.182971][ T5355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.201779][ T5355] bond0 (unregistering): Released all slaves [ 174.222916][ T5243] Bluetooth: hci5: command tx timeout [ 174.389223][ T5355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.401413][ T5355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.413951][ T5355] bond0 (unregistering): Released all slaves [ 174.559993][ T5355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.590119][ T5355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.611974][ T5355] bond0 (unregistering): Released all slaves [ 174.642483][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.649711][ T1047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.678804][ T1047] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.686046][ T1047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.366849][ T5243] Bluetooth: hci8: command tx timeout [ 175.982827][ T5243] Bluetooth: hci2: command tx timeout [ 176.222960][ T5243] Bluetooth: hci3: command 0x0406 tx timeout [ 176.308544][ T5243] Bluetooth: hci5: command tx timeout [ 177.573906][ T5243] Bluetooth: hci8: command tx timeout [ 177.646140][ T5926] loop4: detected capacity change from 0 to 8 [ 179.652723][ T5243] Bluetooth: hci8: command tx timeout [ 181.669144][ T5243] Bluetooth: hci8: command tx timeout [ 181.753818][ T5961] loop1: detected capacity change from 0 to 8 [ 182.807757][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 182.883507][ T5974] hub 9-0:1.0: USB hub found [ 182.889319][ T5974] hub 9-0:1.0: 8 ports detected [ 183.084739][ T5243] Bluetooth: Wrong link type (-22) [ 183.094602][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 183.101526][ T5243] Bluetooth: Wrong link type (-22) [ 183.109977][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 183.118636][ T5243] Bluetooth: Wrong link type (-22) [ 183.125664][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 183.132518][ T5243] Bluetooth: Wrong link type (-22) [ 183.144380][ T5243] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 183.151648][ T5243] Bluetooth: Wrong link type (-22) [ 183.158501][ T5243] Bluetooth: hci4: link tx timeout [ 183.165014][ T5243] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 183.711288][ T5251] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 184.252742][ T5989] hub 9-0:1.0: USB hub found [ 184.267583][ T5989] hub 9-0:1.0: 8 ports detected [ 184.683506][ T5251] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 184.690432][ T5251] Bluetooth: Wrong link type (-22) [ 185.376921][ T5251] ================================================================== [ 185.384991][ T5251] BUG: KASAN: slab-use-after-free in l2cap_send_cmd+0x67b/0x8d0 [ 185.392638][ T5251] Read of size 4 at addr ffff88802df0e010 by task kworker/u9:10/5251 [ 185.400715][ T5251] [ 185.403031][ T5251] CPU: 1 UID: 0 PID: 5251 Comm: kworker/u9:10 Not tainted 6.11.0-syzkaller-05591-g2a17bb8c204f #0 [ 185.413609][ T5251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 185.423658][ T5251] Workqueue: hci4 hci_rx_work [ 185.428338][ T5251] Call Trace: [ 185.431605][ T5251] [ 185.434527][ T5251] dump_stack_lvl+0x241/0x360 [ 185.439210][ T5251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.444414][ T5251] ? __pfx__printk+0x10/0x10 [ 185.449002][ T5251] ? _printk+0xd5/0x120 [ 185.453164][ T5251] ? __virt_addr_valid+0x183/0x530 [ 185.458269][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.463909][ T5251] print_report+0x169/0x550 [ 185.468410][ T5251] ? __virt_addr_valid+0x183/0x530 [ 185.473513][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.479147][ T5251] ? __virt_addr_valid+0x45f/0x530 [ 185.484248][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.489883][ T5251] ? __phys_addr+0xba/0x170 [ 185.494381][ T5251] ? l2cap_send_cmd+0x67b/0x8d0 [ 185.499231][ T5251] kasan_report+0x143/0x180 [ 185.503736][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.509377][ T5251] ? l2cap_send_cmd+0x67b/0x8d0 [ 185.514230][ T5251] l2cap_send_cmd+0x67b/0x8d0 [ 185.518900][ T5251] ? __lock_acquire+0x1384/0x2050 [ 185.523927][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.529564][ T5251] ? skb_pull+0xc1/0x1e0 [ 185.533811][ T5251] l2cap_recv_frame+0x22f1/0x10850 [ 185.538920][ T5251] ? validate_chain+0x11e/0x5920 [ 185.543850][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.549504][ T5251] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 185.554874][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.560507][ T5251] ? do_raw_spin_unlock+0x13c/0x8b0 [ 185.565702][ T5251] ? __pfx_validate_chain+0x10/0x10 [ 185.570889][ T5251] ? __pfx_validate_chain+0x10/0x10 [ 185.576079][ T5251] ? lockdep_hardirqs_on+0x99/0x150 [ 185.581280][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.586918][ T5251] ? sched_fork+0xc0/0x570 [ 185.591341][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.597094][ T5251] ? mark_lock+0x9a/0x360 [ 185.601417][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.607051][ T5251] ? __lock_acquire+0x1384/0x2050 [ 185.612088][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.617724][ T5251] ? mark_lock+0x9a/0x360 [ 185.622044][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.627769][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.633495][ T5251] ? hci_rx_work+0x4e7/0xca0 [ 185.638082][ T5251] ? __pfx_lock_release+0x10/0x10 [ 185.643116][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.648759][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.654393][ T5251] ? __mutex_unlock_slowpath+0x21d/0x750 [ 185.660027][ T5251] ? __pfx_lock_release+0x10/0x10 [ 185.665054][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.670690][ T5251] ? hci_conn_enter_active_mode+0x260/0x370 [ 185.676588][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.682227][ T5251] ? l2cap_recv_acldata+0x490/0x1560 [ 185.687512][ T5251] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 185.693423][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.699104][ T5251] ? hci_conn_hash_lookup_handle+0x226/0x240 [ 185.705092][ T5251] hci_rx_work+0x50f/0xca0 [ 185.709508][ T5251] ? process_scheduled_works+0x976/0x1850 [ 185.715231][ T5251] process_scheduled_works+0xa65/0x1850 [ 185.720786][ T5251] ? __pfx_process_scheduled_works+0x10/0x10 [ 185.726856][ T5251] ? assign_work+0x364/0x3d0 [ 185.731444][ T5251] worker_thread+0x870/0xd30 [ 185.736039][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.741682][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.747323][ T5251] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 185.753224][ T5251] ? __kthread_parkme+0x169/0x1d0 [ 185.758255][ T5251] ? __pfx_worker_thread+0x10/0x10 [ 185.762749][ T5249] Bluetooth: hci3: command 0x0406 tx timeout [ 185.763357][ T5251] kthread+0x2f2/0x390 [ 185.773415][ T5251] ? __pfx_worker_thread+0x10/0x10 [ 185.778549][ T5251] ? __pfx_kthread+0x10/0x10 [ 185.783138][ T5251] ret_from_fork+0x4d/0x80 [ 185.787554][ T5251] ? __pfx_kthread+0x10/0x10 [ 185.792131][ T5251] ret_from_fork_asm+0x1a/0x30 [ 185.796903][ T5251] [ 185.799909][ T5251] [ 185.802218][ T5251] Allocated by task 5249: [ 185.806529][ T5251] kasan_save_track+0x3f/0x80 [ 185.811195][ T5251] __kasan_kmalloc+0x98/0xb0 [ 185.815774][ T5251] __kmalloc_cache_noprof+0x19c/0x2c0 [ 185.821143][ T5251] l2cap_conn_add+0xa9/0x8e0 [ 185.825726][ T5251] l2cap_connect_cfm+0x136/0x1220 [ 185.830746][ T5251] hci_remote_features_evt+0x538/0xaf0 [ 185.836199][ T5251] hci_event_packet+0xac4/0x1540 [ 185.841126][ T5251] hci_rx_work+0x3e8/0xca0 [ 185.845536][ T5251] process_scheduled_works+0xa65/0x1850 [ 185.851078][ T5251] worker_thread+0x870/0xd30 [ 185.855668][ T5251] kthread+0x2f2/0x390 [ 185.859723][ T5251] ret_from_fork+0x4d/0x80 [ 185.864141][ T5251] ret_from_fork_asm+0x1a/0x30 [ 185.868903][ T5251] [ 185.871215][ T5251] Freed by task 5243: [ 185.875181][ T5251] kasan_save_track+0x3f/0x80 [ 185.879848][ T5251] kasan_save_free_info+0x40/0x50 [ 185.884870][ T5251] __kasan_slab_free+0x59/0x70 [ 185.889622][ T5251] kfree+0x1a1/0x440 [ 185.893510][ T5251] l2cap_connect_cfm+0x11f/0x1220 [ 185.898543][ T5251] hci_conn_failed+0x1d0/0x300 [ 185.903333][ T5251] hci_abort_conn_sync+0x583/0xde0 [ 185.908438][ T5251] hci_cmd_sync_work+0x22d/0x400 [ 185.913376][ T5251] process_scheduled_works+0xa65/0x1850 [ 185.918918][ T5251] worker_thread+0x870/0xd30 [ 185.923504][ T5251] kthread+0x2f2/0x390 [ 185.927561][ T5251] ret_from_fork+0x4d/0x80 [ 185.931976][ T5251] ret_from_fork_asm+0x1a/0x30 [ 185.936741][ T5251] [ 185.939052][ T5251] Last potentially related work creation: [ 185.944753][ T5251] kasan_save_stack+0x3f/0x60 [ 185.949420][ T5251] __kasan_record_aux_stack+0xac/0xc0 [ 185.954789][ T5251] insert_work+0x3e/0x330 [ 185.959115][ T5251] __queue_work+0xc8b/0xf50 [ 185.963619][ T5251] call_timer_fn+0x190/0x650 [ 185.968201][ T5251] __run_timer_base+0x695/0x8e0 [ 185.973044][ T5251] run_timer_softirq+0xb7/0x170 [ 185.978061][ T5251] handle_softirqs+0x2c7/0x980 [ 185.982826][ T5251] __irq_exit_rcu+0xf4/0x1c0 [ 185.987414][ T5251] irq_exit_rcu+0x9/0x30 [ 185.991649][ T5251] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 185.997285][ T5251] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 186.003268][ T5251] [ 186.005581][ T5251] Second to last potentially related work creation: [ 186.012142][ T5251] kasan_save_stack+0x3f/0x60 [ 186.016811][ T5251] __kasan_record_aux_stack+0xac/0xc0 [ 186.022184][ T5251] insert_work+0x3e/0x330 [ 186.026511][ T5251] __queue_work+0xb66/0xf50 [ 186.031013][ T5251] queue_work_on+0x1c2/0x380 [ 186.035602][ T5251] l2cap_connect_cfm+0xec2/0x1220 [ 186.040623][ T5251] hci_remote_features_evt+0x538/0xaf0 [ 186.046078][ T5251] hci_event_packet+0xac4/0x1540 [ 186.051010][ T5251] hci_rx_work+0x3e8/0xca0 [ 186.055418][ T5251] process_scheduled_works+0xa65/0x1850 [ 186.060959][ T5251] worker_thread+0x870/0xd30 [ 186.065551][ T5251] kthread+0x2f2/0x390 [ 186.069613][ T5251] ret_from_fork+0x4d/0x80 [ 186.074030][ T5251] ret_from_fork_asm+0x1a/0x30 [ 186.078807][ T5251] [ 186.081114][ T5251] The buggy address belongs to the object at ffff88802df0e000 [ 186.081114][ T5251] which belongs to the cache kmalloc-1k of size 1024 [ 186.095157][ T5251] The buggy address is located 16 bytes inside of [ 186.095157][ T5251] freed 1024-byte region [ffff88802df0e000, ffff88802df0e400) [ 186.108951][ T5251] [ 186.111261][ T5251] The buggy address belongs to the physical page: [ 186.117656][ T5251] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2df08 [ 186.126407][ T5251] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 186.134896][ T5251] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 186.142867][ T5251] page_type: 0xfdffffff(slab) [ 186.147542][ T5251] raw: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001 [ 186.156122][ T5251] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 186.164706][ T5251] head: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001 [ 186.173371][ T5251] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 186.182030][ T5251] head: 00fff00000000003 ffffea0000b7c201 ffffffffffffffff 0000000000000000 [ 186.190693][ T5251] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 186.199351][ T5251] page dumped because: kasan: bad access detected [ 186.205762][ T5251] page_owner tracks the page as allocated [ 186.211487][ T5251] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14724966451, free_ts 0 [ 186.231200][ T5251] post_alloc_hook+0x1f3/0x230 [ 186.235975][ T5251] get_page_from_freelist+0x2e4c/0x2f10 [ 186.241511][ T5251] __alloc_pages_noprof+0x256/0x6c0 [ 186.246704][ T5251] alloc_pages_mpol_noprof+0x3e8/0x680 [ 186.252158][ T5251] alloc_slab_page+0x6a/0x130 [ 186.256825][ T5251] allocate_slab+0x5a/0x2f0 [ 186.261320][ T5251] ___slab_alloc+0xcd1/0x14b0 [ 186.265996][ T5251] __slab_alloc+0x58/0xa0 [ 186.270325][ T5251] __kmalloc_noprof+0x25a/0x400 [ 186.275173][ T5251] ops_init+0x1f1/0x590 [ 186.279327][ T5251] register_pernet_operations+0x30d/0x630 [ 186.285046][ T5251] register_pernet_device+0x33/0x80 [ 186.290244][ T5251] sit_init+0x22/0x170 [ 186.294301][ T5251] do_one_initcall+0x24a/0x880 [ 186.299061][ T5251] do_initcall_level+0x157/0x210 [ 186.303997][ T5251] do_initcalls+0x3f/0x80 [ 186.308335][ T5251] page_owner free stack trace missing [ 186.313700][ T5251] [ 186.316009][ T5251] Memory state around the buggy address: [ 186.321645][ T5251] ffff88802df0df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.329708][ T5251] ffff88802df0df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.337766][ T5251] >ffff88802df0e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.345818][ T5251] ^ [ 186.350393][ T5251] ffff88802df0e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.358443][ T5251] ffff88802df0e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.366503][ T5251] ================================================================== [ 186.382913][ T5251] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 186.390179][ T5251] CPU: 1 UID: 0 PID: 5251 Comm: kworker/u9:10 Not tainted 6.11.0-syzkaller-05591-g2a17bb8c204f #0 [ 186.400791][ T5251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 186.410857][ T5251] Workqueue: hci4 hci_rx_work [ 186.415560][ T5251] Call Trace: [ 186.418836][ T5251] [ 186.421763][ T5251] dump_stack_lvl+0x241/0x360 [ 186.426461][ T5251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.431674][ T5251] ? __pfx__printk+0x10/0x10 [ 186.436278][ T5251] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 186.442276][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.447931][ T5251] ? vscnprintf+0x5d/0x90 [ 186.452269][ T5251] panic+0x349/0x870 [ 186.456182][ T5251] ? check_panic_on_warn+0x21/0xb0 [ 186.461299][ T5251] ? __pfx_panic+0x10/0x10 [ 186.465732][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.471385][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.477033][ T5251] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 186.483028][ T5251] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 186.489369][ T5251] check_panic_on_warn+0x86/0xb0 [ 186.494315][ T5251] ? l2cap_send_cmd+0x67b/0x8d0 [ 186.499171][ T5251] end_report+0x77/0x160 [ 186.503420][ T5251] kasan_report+0x154/0x180 [ 186.507926][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.513580][ T5251] ? l2cap_send_cmd+0x67b/0x8d0 [ 186.518439][ T5251] l2cap_send_cmd+0x67b/0x8d0 [ 186.523122][ T5251] ? __lock_acquire+0x1384/0x2050 [ 186.528164][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.533812][ T5251] ? skb_pull+0xc1/0x1e0 [ 186.538064][ T5251] l2cap_recv_frame+0x22f1/0x10850 [ 186.543189][ T5251] ? validate_chain+0x11e/0x5920 [ 186.548132][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.553795][ T5251] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 186.559178][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.564823][ T5251] ? do_raw_spin_unlock+0x13c/0x8b0 [ 186.570030][ T5251] ? __pfx_validate_chain+0x10/0x10 [ 186.575231][ T5251] ? __pfx_validate_chain+0x10/0x10 [ 186.580433][ T5251] ? lockdep_hardirqs_on+0x99/0x150 [ 186.585643][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.591289][ T5251] ? sched_fork+0xc0/0x570 [ 186.595713][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.601359][ T5251] ? mark_lock+0x9a/0x360 [ 186.605692][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.611343][ T5251] ? __lock_acquire+0x1384/0x2050 [ 186.616390][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.622037][ T5251] ? mark_lock+0x9a/0x360 [ 186.626370][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.632020][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.637669][ T5251] ? hci_rx_work+0x4e7/0xca0 [ 186.642267][ T5251] ? __pfx_lock_release+0x10/0x10 [ 186.647310][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.652972][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.658619][ T5251] ? __mutex_unlock_slowpath+0x21d/0x750 [ 186.664269][ T5251] ? __pfx_lock_release+0x10/0x10 [ 186.669312][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.674961][ T5251] ? hci_conn_enter_active_mode+0x260/0x370 [ 186.680873][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.686522][ T5251] ? l2cap_recv_acldata+0x490/0x1560 [ 186.691816][ T5251] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 186.697723][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.703471][ T5251] ? hci_conn_hash_lookup_handle+0x226/0x240 [ 186.709468][ T5251] hci_rx_work+0x50f/0xca0 [ 186.713895][ T5251] ? process_scheduled_works+0x976/0x1850 [ 186.719631][ T5251] process_scheduled_works+0xa65/0x1850 [ 186.725207][ T5251] ? __pfx_process_scheduled_works+0x10/0x10 [ 186.731202][ T5251] ? assign_work+0x364/0x3d0 [ 186.736154][ T5251] worker_thread+0x870/0xd30 [ 186.740757][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.746408][ T5251] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.752053][ T5251] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 186.757961][ T5251] ? __kthread_parkme+0x169/0x1d0 [ 186.763003][ T5251] ? __pfx_worker_thread+0x10/0x10 [ 186.768126][ T5251] kthread+0x2f2/0x390 [ 186.772200][ T5251] ? __pfx_worker_thread+0x10/0x10 [ 186.777331][ T5251] ? __pfx_kthread+0x10/0x10 [ 186.781926][ T5251] ret_from_fork+0x4d/0x80 [ 186.786361][ T5251] ? __pfx_kthread+0x10/0x10 [ 186.790954][ T5251] ret_from_fork_asm+0x1a/0x30 [ 186.795740][ T5251] [ 186.799004][ T5251] Kernel Offset: disabled [ 186.803324][ T5251] Rebooting in 86400 seconds..