last executing test programs: 13m57.794851338s ago: executing program 4 (id=3443): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x75, 0x84, &(0x7f0000000340)=""/132, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x2, 0xd, 0x8}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x1, 0x2, 0x8, 0x3}, {0x2, 0x1, 0x3, 0x9}, {0x4, 0x2, 0x5, 0x9}, {0x4, 0x3, 0x2}, {0x1, 0x4, 0x5, 0x1}, {0x0, 0x5, 0x0, 0x1}, {0x3, 0x2, 0xe}, {0x3, 0x1, 0x0, 0xb}, {0x0, 0x3, 0x4, 0x2}], 0x10, 0x7}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x90) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x141801, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x0, 0x3a) sched_getaffinity(r2, 0x8, &(0x7f0000000280)) setsockopt$inet6_int(r7, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}}, 0x48) 13m0.092803441s ago: executing program 4 (id=3444): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r0 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r0, 0xffff) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x1410, 0x6964cf48694fdc75}, 0x10}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_vhci(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001140)={0x3c, r3, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "02d0e86cbe4d68f75ce39f0dab"}]}]}, @chandef_params]}, 0x3c}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x101a40) r6 = socket$qrtr(0x2a, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r9 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) sendfile(r9, r7, 0x0, 0x7ffff000) splice(r8, 0x0, r7, 0x0, 0x0, 0x0) r10 = syz_io_uring_setup(0x7e29, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000280)) r11 = io_uring_setup(0x2f64, &(0x7f0000000340)={0x0, 0x1aeb, 0x0, 0x2, 0x315, 0x0, r10}) syz_io_uring_setup(0x60c9, &(0x7f00000003c0)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r11}, &(0x7f00000000c0), &(0x7f00000005c0)) io_uring_enter(r10, 0x0, 0x0, 0x0, 0x0, 0x0) connect$qrtr(r6, &(0x7f0000000040), 0xc) fchdir(r6) socket$netlink(0x10, 0x3, 0x0) 12m54.711203435s ago: executing program 0 (id=3518): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MAP={0x24}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}]}, 0x58}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904002c11018b7500090583"], 0x0) syz_usb_disconnect(r5) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x249, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x421}}, {0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="440312"]}]}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0xa, @in6=@loopback}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) 12m53.977674094s ago: executing program 4 (id=3519): r0 = socket(0x2b, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c, 0x0}}], 0x1, 0x20000000) sendmsg$xdp(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000851) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 12m52.679217719s ago: executing program 4 (id=3521): socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) gettid() r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x880) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x49, {0x2a00, 0x80010000, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, "fee885fde408179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dd9de2b7fb0a0100000000000006000300000000000000030600", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r5) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000280)="79ef34395d4c410d25e52319c6a502980fd70906f311", 0x16}, {&(0x7f0000000180)="21e86059062c57c14198b24339ac70b26123e39fda5912aba3c6fb5f31a089a6796a63e8cacd18a3d72d99de7b621f1d3074", 0x32}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES32=r6, @ANYRES16, @ANYRES8, @ANYRES64=r0], 0x590}}], 0x1, 0x8008801) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES16=r4, @ANYBLOB="0c0001800800010003000100100001800c0004800800020000000000100001"], 0x44}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000000d80)=[{{&(0x7f00000009c0)={0xa, 0x4e24, 0x7ff, @local, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000a40)="1cdf8585310620c8fd152b08da295658d10d5c6481b65ba208", 0x19}, {&(0x7f0000000a80)="ac2f2d8e7d99a4565334dd5e2b533a7fd5f99c65dae8bbdb4a6fa9793b95e5b0b7ac7895554d4f9518a1ff8d6194ea23a9e8a9dd089bab51f47aa7c6b15385a0f3e2468334cc4d27c17d5e5352881be46bdf907e76d8055baba9c1c0811e0c1fcb35bc630af93ee824f898fa863f940b10a0aea3ba5681f0131fdb2f", 0x7c}, {&(0x7f0000000b00)="36a9d6fca83aa16cd42cc327f1a6d0c0411b42225cf4606931cc8a9ad50484337b16aa7eabf73791637cd118603aba511b42a0edd271ba66c04c446c07cc5b067509b8ff7b23da403fdd97d15313f56a6e78f023147d30baf2c57562e3e7f221e73c24b1c007", 0x66}, {&(0x7f0000000b80)="5bfb54d29e49c2e2d8827ad76187b4482775102f1f712462a577dfa775cf06582bc07d47b0a61e3784050825acc61aaa0f6c80a56cbe2ad2383eb271", 0x3c}, {&(0x7f0000000bc0)="5560d97b6792430e0c92faa670787e51d4db964e5ae42073d3db14279ec1225f11e4d7f09911795a1464aa2dde9b9a60653c7b6e67da3963248ad3dfb2595aa837c9ed2ee500cd3b7e6ce73d863bac34116b8a7a0785b75b2a2ef5912855c58530e673dd98dcc1c10b7496a041a8cc64a9e9d40a3c8077cf8f66930bc5cfba743381573e79aeaca46e366a8be5483bc3b6281320a4c759cdb4d44192b046789342b5c599ec4404bff10bad710daa279d1474b9bedcdc89840572a9c6ff6447fff7bcfe7d6b8294d7084b175144ceb9ae2360655d2330a46f9d0dad99eec787b409ea9b10741a1a5dded78b3c44", 0xed}], 0x5, &(0x7f0000000d40)=[@dstopts={{0x28, 0x29, 0x37, {0x2f, 0x1, '\x00', [@enc_lim, @enc_lim={0x4, 0x1, 0xe}, @enc_lim={0x4, 0x1, 0xfe}]}}}], 0x28}}], 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x80, 0x3fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x4]}}}) 12m51.227545859s ago: executing program 0 (id=3525): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x40) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x2) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_size', 0x464b81, 0x20) write$sysctl(r5, &(0x7f0000000100)='7\x00', 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 12m10.30723872s ago: executing program 1 (id=3562): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) (async) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000080)) (async) prlimit64(r2, 0x3, &(0x7f0000000280)={0x6, 0x40}, &(0x7f00000002c0)) (async) r8 = dup(r7) (async) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/117, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000240)={0x1, r8}) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93}, 0xe) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000340), 0x10) (async) sendto$inet6(r9, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) shutdown(r9, 0x1) 12m7.419692276s ago: executing program 1 (id=3564): sysfs$1(0x1, &(0x7f0000000080)='\x00\x8f#.V\x98\xf0\xe2)(\xda:Rrq*\x88a\xb2A\x87hE\x95 \xe1\xcc\xb38! 4\xbf\x10\xaa\xe1\x98\xf2\xc4|Gh_\x0e\xe4jB\xff[\xac\xd7]\x99\xd2$\xd0\xbb\xd8*6X\x88+c\x86\x93\xa7`\xa4\xa5\f\x13\xaa\x9eer\x92\xd5\xc8!E\x9689F\xc7H\xdf\xd7\x1e\xf8#\xd8\x95l\xaf\xa0\xd1`B\a\t\xb3\x18\x80\x1e\x83u\xa8\xbf\',\x98\xfd5\xc0>\xad\xe1\xf5M8b\x90\xd4\xa0v\xed\xcaRc') 12m7.279252012s ago: executing program 1 (id=3565): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x891f, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}}}) 12m1.186214457s ago: executing program 2 (id=3576): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r6, @ANYBLOB="48007a8014000200d36432e2a15db69c2720e386548c2d7f0c0003"], 0x64}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x75, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0xa0}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000540)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) userfaultfd(0x0) 12m0.2422742s ago: executing program 2 (id=3577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000340)={0x42}, 0x10) sendmmsg$inet6(r4, &(0x7f0000007500)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0xc, 0x2c, 0x0, @remote, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) getpid() ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0xb, 0x148, 0xf8, 0x148, 0x188, 0x242, 0x240, 0x188, 0x215, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'geneve1\x00', 'ipvlan0\x00'}, 0x0, 0x98, 0xc0, 0x0, {0xff0f000000000000}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000180)={0xdc}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 11m57.935687294s ago: executing program 3 (id=3580): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='hfs\x00', 0x0, &(0x7f0000000180)) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, 0x0, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) 11m57.592964621s ago: executing program 2 (id=3581): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x6905, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000140), &(0x7f0000000100)) (async) r1 = syz_io_uring_setup(0x6905, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, r1}, &(0x7f0000000000), &(0x7f0000000240)) (async) r3 = syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x91, 0x4) r6 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000740)=[{r6, 0x140}, {r3, 0x40}, {r1, 0x40}, {r0, 0x210}, {r3, 0x208}, {r1, 0x40}], 0x6, &(0x7f0000000180), &(0x7f0000000380)={[0x7]}, 0x8) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[], 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000000000000c003b07b6b7af368ccb68130600000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000", @ANYRES32=r5, @ANYRES32=r5], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="020026bd7000fddbdf250100000008000100", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x43916301124f1467}, 0x48450) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r10, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) preadv(r10, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x2) 11m56.558496721s ago: executing program 3 (id=3582): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x0, 0x4fa, &(0x7f0000000540)=ANY=[@ANYBLOB="120100022502aa10120a105daae9010203010902e8040406000000090498fd061704400309050b"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000"], 0x18}, 0x0) recvmmsg(r9, &(0x7f0000001140), 0x700, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfa4}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xb0}}, 0x0) dup2(r3, r10) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc}]}], {0x14}}, 0x50}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="913d807af0b15450000000", @ANYRES16=r12, @ANYBLOB="0100000000000000000014000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000000000006001100000000000800150000000000"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 11m56.230437092s ago: executing program 2 (id=3583): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp, @sack_perm, @sack_perm, @mss={0x2, 0xde}, @mss={0x2, 0x7}, @mss={0x2, 0x1}], 0xd) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r1, 0x8b2c, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000011) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000cc0)={0x1, @sdr={0x42303159, 0x100}}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x3650}]}, 0x10) r4 = syz_io_uring_setup(0x5c90, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000600)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r5, r6, &(0x7f0000000740)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}) listen(r7, 0x0) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) 9m14.432634977s ago: executing program 2 (id=3584): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9c322e565b0900fe000088766116d0b8231e00000000000000000100000104000180"], 0x28}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x0, {[@window={0x9, 0x3}, @timestamp={0x5, 0x2, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r6 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x9) r7 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x9) r8 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x40, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r6}, @free_buffer={0x40086303, r7}, @free_buffer={0x40086303, r8}, @enter_looper, @register_looper, @increfs_done={0x40106308, 0x2}], 0x3f, 0x0, &(0x7f0000000380)="4e71cf6fab50e2244d5dd465de48f4a71b546e49a00af7e977a5a2d6f09ba28dcd35d33e6298a007b63aebd14d88be1c3ecb973dec7810734cd5d6778d5643"}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r10, @ANYRES16=r9, @ANYRES32=r9], 0x90}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r13}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x5}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7f}]}, 0xac}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) 8m47.973105792s ago: executing program 0 (id=3532): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x4, 0x4, @SEQ_NOTEON=@special}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1, 0xe, 0x82, 0x41, 0x1, 0x7, '\x00', 0x0, r1, 0x2, 0x0, 0x1, 0x6}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2000000000000212, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="16c1d8e2d822f8670c549f4e3f21f69402547cfba9f24a4a9e27f0616307c4cc429a48614ee2b208e66666c8ee", @ANYRES64=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x40) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x890b, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) r5 = syz_open_procfs(0x0, &(0x7f0000001880)='numa_maps\x00') pread64(r5, &(0x7f0000000880)=""/4096, 0x1000, 0x0) r6 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r6, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f0000b9000004000000040000000c000180cafc089d"], 0x78}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) 8m35.23263722s ago: executing program 1 (id=3566): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000340)=ANY=[@ANYRES16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x3, 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4a202) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x800}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) getpgid(0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x6}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r4, &(0x7f0000000200), 0x20000000}, 0x20) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/178, 0xb2}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000007140)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)='J', 0x1}], 0x1}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001600)=""/137, 0x89}], 0x1}}], 0x40000a4, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x6, 0x0, 0x0, 0x0, 0x2) futex(0x0, 0xb, 0x1, &(0x7f0000000280)={0x77359400}, 0x0, 0x1) 7m59.860026536s ago: executing program 0 (id=3532): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x4, 0x4, @SEQ_NOTEON=@special}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1, 0xe, 0x82, 0x41, 0x1, 0x7, '\x00', 0x0, r1, 0x2, 0x0, 0x1, 0x6}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2000000000000212, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="16c1d8e2d822f8670c549f4e3f21f69402547cfba9f24a4a9e27f0616307c4cc429a48614ee2b208e66666c8ee", @ANYRES64=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x40) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x890b, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) r5 = syz_open_procfs(0x0, &(0x7f0000001880)='numa_maps\x00') pread64(r5, &(0x7f0000000880)=""/4096, 0x1000, 0x0) r6 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r6, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f0000b9000004000000040000000c000180cafc089d"], 0x78}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) 6m43.474242389s ago: executing program 2 (id=3584): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9c322e565b0900fe000088766116d0b8231e00000000000000000100000104000180"], 0x28}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x0, {[@window={0x9, 0x3}, @timestamp={0x5, 0x2, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r6 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x9) r7 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x9) r8 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x40, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r6}, @free_buffer={0x40086303, r7}, @free_buffer={0x40086303, r8}, @enter_looper, @register_looper, @increfs_done={0x40106308, 0x2}], 0x3f, 0x0, &(0x7f0000000380)="4e71cf6fab50e2244d5dd465de48f4a71b546e49a00af7e977a5a2d6f09ba28dcd35d33e6298a007b63aebd14d88be1c3ecb973dec7810734cd5d6778d5643"}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r10, @ANYRES16=r9, @ANYRES32=r9], 0x90}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r13}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x5}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7f}]}, 0xac}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) 6m35.959650346s ago: executing program 3 (id=3585): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[], 0xfce) getpid() r4 = syz_open_procfs(0x0, &(0x7f0000001080)='net/protocols\x00') ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) preadv(r4, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/158, 0x9e}], 0x1, 0x2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRES16]) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='devpts\x00', 0x0, &(0x7f0000000400)) capget(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r8, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x40}}, 0x0) write$tcp_mem(r0, &(0x7f00000006c0)={0x5, 0x2d, 0x0, 0xa, 0x0, 0x2c}, 0x48) 6m32.380214606s ago: executing program 4 (id=3531): socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) gettid() r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x880) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x49, {0x2a00, 0x80010000, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, "fee885fde408179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dd9de2b7fb0a0100000000000006000300000000000000030600", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000280)="79ef34395d4c410d25e52319c6a502980fd70906f311", 0x16}, {&(0x7f0000000180)="21e86059062c57c14198b24339ac70b26123e39fda5912aba3c6fb5f31a089a6796a63e8cacd", 0x26}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES32=r6, @ANYRES16, @ANYRES8=r1], 0x590}}], 0x1, 0x8008801) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES16=r4, @ANYBLOB="0c0001800800010003000100100001800c0004800800020000000000100001"], 0x44}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000000d80)=[{{&(0x7f00000009c0)={0xa, 0x4e24, 0x7ff, @local, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000a40)="1cdf8585310620c8fd152b08da295658d10d5c6481b65ba208", 0x19}, {&(0x7f0000000a80)="ac2f2d8e7d99a4565334dd5e2b533a7fd5f99c65dae8bbdb4a6fa9793b95e5b0b7ac7895554d4f9518a1ff8d6194ea23a9e8a9dd089bab51f47aa7c6b15385a0f3e2468334cc4d27c17d5e5352881be46bdf907e76d8055baba9c1c0811e0c1fcb35bc630af93ee824f898fa863f940b10a0aea3ba5681f0131fdb2f", 0x7c}, {&(0x7f0000000b00)="36a9d6fca83aa16cd42cc327f1a6d0c0411b42225cf4606931cc8a9ad50484337b16aa7eabf73791637cd118603aba511b42a0edd271ba66c04c446c07cc5b067509b8ff7b23da403fdd97d15313f56a6e78f023147d30baf2c57562e3e7f221e73c24b1c007", 0x66}, {&(0x7f0000000b80)="5bfb54d29e49c2e2d8827ad76187b4482775102f1f712462a577dfa775cf06582bc07d47b0a61e3784050825acc61aaa0f6c80a56cbe2ad2383eb271", 0x3c}, {&(0x7f0000000bc0)="5560d97b6792430e0c92faa670787e51d4db964e5ae42073d3db14279ec1225f11e4d7f09911795a1464aa2dde9b9a60653c7b6e67da3963248ad3dfb2595aa837c9ed2ee500cd3b7e6ce73d863bac34116b8a7a0785b75b2a2ef5912855c58530e673dd98dcc1c10b7496a041a8cc64a9e9d40a3c8077cf8f66930bc5cfba743381573e79aeaca46e366a8be5483bc3b6281320a4c759cdb4d44192b046789342b5c599ec4404bff10bad710daa279d1474b9bedcdc89840572a9c6ff6447fff7bcfe7d6b8294d7084b175144ceb9ae2360655d2330a46f9d0dad99eec787b409ea9b10741a1a5dded78b3c44", 0xed}], 0x5, &(0x7f0000000d40)=[@dstopts={{0x28, 0x29, 0x37, {0x2f, 0x1, '\x00', [@enc_lim, @enc_lim={0x4, 0x1, 0xe}, @enc_lim={0x4, 0x1, 0xfe}]}}}], 0x28}}], 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fspick(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1) r9 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x80, 0x3fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x4]}}}) 6m7.905752534s ago: executing program 3 (id=3585): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[], 0xfce) getpid() r4 = syz_open_procfs(0x0, &(0x7f0000001080)='net/protocols\x00') ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) preadv(r4, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/158, 0x9e}], 0x1, 0x2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRES16]) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='devpts\x00', 0x0, &(0x7f0000000400)) capget(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r8, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x40}}, 0x0) write$tcp_mem(r0, &(0x7f00000006c0)={0x5, 0x2d, 0x0, 0xa, 0x0, 0x2c}, 0x48) 4m52.037079309s ago: executing program 3 (id=3585): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[], 0xfce) getpid() r4 = syz_open_procfs(0x0, &(0x7f0000001080)='net/protocols\x00') ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) preadv(r4, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/158, 0x9e}], 0x1, 0x2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRES16]) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='devpts\x00', 0x0, &(0x7f0000000400)) capget(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r8, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x40}}, 0x0) write$tcp_mem(r0, &(0x7f00000006c0)={0x5, 0x2d, 0x0, 0xa, 0x0, 0x2c}, 0x48) 3m53.848257506s ago: executing program 0 (id=3532): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x4, 0x4, @SEQ_NOTEON=@special}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1, 0xe, 0x82, 0x41, 0x1, 0x7, '\x00', 0x0, r1, 0x2, 0x0, 0x1, 0x6}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2000000000000212, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="16c1d8e2d822f8670c549f4e3f21f69402547cfba9f24a4a9e27f0616307c4cc429a48614ee2b208e66666c8ee", @ANYRES64=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x40) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x890b, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) r5 = syz_open_procfs(0x0, &(0x7f0000001880)='numa_maps\x00') pread64(r5, &(0x7f0000000880)=""/4096, 0x1000, 0x0) r6 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r6, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f0000b9000004000000040000000c000180cafc089d"], 0x78}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) 3m47.306552611s ago: executing program 1 (id=3566): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000340)=ANY=[@ANYRES16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x3, 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4a202) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x800}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) getpgid(0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x6}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r4, &(0x7f0000000200), 0x20000000}, 0x20) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/178, 0xb2}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000007140)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)='J', 0x1}], 0x1}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001600)=""/137, 0x89}], 0x1}}], 0x40000a4, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x6, 0x0, 0x0, 0x0, 0x2) futex(0x0, 0xb, 0x1, &(0x7f0000000280)={0x77359400}, 0x0, 0x1) 3m29.503807975s ago: executing program 3 (id=3585): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[], 0xfce) getpid() r4 = syz_open_procfs(0x0, &(0x7f0000001080)='net/protocols\x00') ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) preadv(r4, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/158, 0x9e}], 0x1, 0x2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRES16]) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='devpts\x00', 0x0, &(0x7f0000000400)) capget(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r8, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x40}}, 0x0) write$tcp_mem(r0, &(0x7f00000006c0)={0x5, 0x2d, 0x0, 0xa, 0x0, 0x2c}, 0x48) 1m54.849931729s ago: executing program 0 (id=3532): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x4, 0x4, @SEQ_NOTEON=@special}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1, 0xe, 0x82, 0x41, 0x1, 0x7, '\x00', 0x0, r1, 0x2, 0x0, 0x1, 0x6}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2000000000000212, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="16c1d8e2d822f8670c549f4e3f21f69402547cfba9f24a4a9e27f0616307c4cc429a48614ee2b208e66666c8ee", @ANYRES64=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x40) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x890b, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) r5 = syz_open_procfs(0x0, &(0x7f0000001880)='numa_maps\x00') pread64(r5, &(0x7f0000000880)=""/4096, 0x1000, 0x0) r6 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r6, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f0000b9000004000000040000000c000180cafc089d"], 0x78}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) 1m43.598380002s ago: executing program 4 (id=3531): socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) gettid() r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x880) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x49, {0x2a00, 0x80010000, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, "fee885fde408179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dd9de2b7fb0a0100000000000006000300000000000000030600", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000280)="79ef34395d4c410d25e52319c6a502980fd70906f311", 0x16}, {&(0x7f0000000180)="21e86059062c57c14198b24339ac70b26123e39fda5912aba3c6fb5f31a089a6796a63e8cacd", 0x26}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES32=r6, @ANYRES16, @ANYRES8=r1], 0x590}}], 0x1, 0x8008801) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES16=r4, @ANYBLOB="0c0001800800010003000100100001800c0004800800020000000000100001"], 0x44}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000000d80)=[{{&(0x7f00000009c0)={0xa, 0x4e24, 0x7ff, @local, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000a40)="1cdf8585310620c8fd152b08da295658d10d5c6481b65ba208", 0x19}, {&(0x7f0000000a80)="ac2f2d8e7d99a4565334dd5e2b533a7fd5f99c65dae8bbdb4a6fa9793b95e5b0b7ac7895554d4f9518a1ff8d6194ea23a9e8a9dd089bab51f47aa7c6b15385a0f3e2468334cc4d27c17d5e5352881be46bdf907e76d8055baba9c1c0811e0c1fcb35bc630af93ee824f898fa863f940b10a0aea3ba5681f0131fdb2f", 0x7c}, {&(0x7f0000000b00)="36a9d6fca83aa16cd42cc327f1a6d0c0411b42225cf4606931cc8a9ad50484337b16aa7eabf73791637cd118603aba511b42a0edd271ba66c04c446c07cc5b067509b8ff7b23da403fdd97d15313f56a6e78f023147d30baf2c57562e3e7f221e73c24b1c007", 0x66}, {&(0x7f0000000b80)="5bfb54d29e49c2e2d8827ad76187b4482775102f1f712462a577dfa775cf06582bc07d47b0a61e3784050825acc61aaa0f6c80a56cbe2ad2383eb271", 0x3c}, {&(0x7f0000000bc0)="5560d97b6792430e0c92faa670787e51d4db964e5ae42073d3db14279ec1225f11e4d7f09911795a1464aa2dde9b9a60653c7b6e67da3963248ad3dfb2595aa837c9ed2ee500cd3b7e6ce73d863bac34116b8a7a0785b75b2a2ef5912855c58530e673dd98dcc1c10b7496a041a8cc64a9e9d40a3c8077cf8f66930bc5cfba743381573e79aeaca46e366a8be5483bc3b6281320a4c759cdb4d44192b046789342b5c599ec4404bff10bad710daa279d1474b9bedcdc89840572a9c6ff6447fff7bcfe7d6b8294d7084b175144ceb9ae2360655d2330a46f9d0dad99eec787b409ea9b10741a1a5dded78b3c44", 0xed}], 0x5, &(0x7f0000000d40)=[@dstopts={{0x28, 0x29, 0x37, {0x2f, 0x1, '\x00', [@enc_lim, @enc_lim={0x4, 0x1, 0xe}, @enc_lim={0x4, 0x1, 0xfe}]}}}], 0x28}}], 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fspick(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1) r9 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x80, 0x3fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x4]}}}) 0s ago: executing program 1 (id=3566): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000340)=ANY=[@ANYRES16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x3, 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4a202) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x800}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) getpgid(0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x6}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r4, &(0x7f0000000200), 0x20000000}, 0x20) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/178, 0xb2}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000007140)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)='J', 0x1}], 0x1}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001600)=""/137, 0x89}], 0x1}}], 0x40000a4, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x6, 0x0, 0x0, 0x0, 0x2) futex(0x0, 0xb, 0x1, &(0x7f0000000280)={0x77359400}, 0x0, 0x1) kernel console output (not intermixed with test programs): 4.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b10775cd0 code=0x7ffc0000 [ 1912.507023][ T29] audit: type=1326 audit(1722157785.631:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22326 comm="syz.4.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1b10776e9b code=0x7ffc0000 [ 1912.622847][ T29] audit: type=1326 audit(1722157785.631:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22326 comm="syz.4.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1b10776e9b code=0x7ffc0000 [ 1912.650775][ T4964] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1912.708078][ T4964] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1912.729282][ T29] audit: type=1326 audit(1722157785.631:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22326 comm="syz.4.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1b10776e9b code=0x7ffc0000 [ 1912.772161][ T4964] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 1912.825382][ T4964] usb 5-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1912.859073][ T29] audit: type=1326 audit(1722157785.631:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22326 comm="syz.4.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1b10776e9b code=0x7ffc0000 [ 1912.923479][ T29] audit: type=1326 audit(1722157785.761:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22326 comm="syz.4.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1b10776e9b code=0x7ffc0000 [ 1912.956981][ T4964] usb 5-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 1913.008747][ T4964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.039328][ T4964] usb 5-1: Product: syz [ 1913.058917][ T4964] usb 5-1: Manufacturer: syz [ 1913.079625][ T4964] usb 5-1: SerialNumber: syz [ 1913.102792][ T4964] usb 5-1: config 0 descriptor?? [ 1913.162609][T22332] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1913.669191][T22337] FAULT_INJECTION: forcing a failure. [ 1913.669191][T22337] name failslab, interval 1, probability 0, space 0, times 0 [ 1913.697081][T22337] CPU: 0 UID: 0 PID: 22337 Comm: syz.3.3431 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 1913.707569][T22337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1913.717637][T22337] Call Trace: [ 1913.720910][T22337] [ 1913.723827][T22337] dump_stack_lvl+0x16c/0x1f0 [ 1913.728501][T22337] should_fail_ex+0x497/0x5b0 [ 1913.733173][T22337] ? fs_reclaim_acquire+0xae/0x160 [ 1913.738270][T22337] should_failslab+0xc2/0x120 [ 1913.742941][T22337] __kmalloc_cache_noprof+0x6b/0x300 [ 1913.748221][T22337] ? alloc_pipe_info+0x10e/0x590 [ 1913.753154][T22337] alloc_pipe_info+0x10e/0x590 [ 1913.757904][T22337] ? __pfx___lock_acquire+0x10/0x10 [ 1913.763093][T22337] splice_direct_to_actor+0x79c/0xa40 [ 1913.768462][T22337] ? __pfx_direct_splice_actor+0x10/0x10 [ 1913.774089][T22337] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1913.779983][T22337] ? __pfx___might_resched+0x10/0x10 [ 1913.785263][T22337] ? __pfx_lock_release+0x10/0x10 [ 1913.790286][T22337] do_splice_direct+0x17e/0x250 [ 1913.795137][T22337] ? __pfx_do_splice_direct+0x10/0x10 [ 1913.800505][T22337] ? avc_policy_seqno+0x9/0x20 [ 1913.805279][T22337] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1913.811167][T22337] do_sendfile+0xb1e/0xe50 [ 1913.815580][T22337] ? __pfx_do_sendfile+0x10/0x10 [ 1913.820511][T22337] __x64_sys_sendfile64+0x1da/0x220 [ 1913.825699][T22337] ? ksys_write+0x1ab/0x260 [ 1913.830187][T22337] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1913.835900][T22337] do_syscall_64+0xcd/0x250 [ 1913.840389][T22337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1913.846278][T22337] RIP: 0033:0x7fa3aaf77299 [ 1913.850690][T22337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1913.870481][T22337] RSP: 002b:00007fa3abcbc048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1913.878884][T22337] RAX: ffffffffffffffda RBX: 00007fa3ab106058 RCX: 00007fa3aaf77299 [ 1913.886844][T22337] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1913.894840][T22337] RBP: 00007fa3abcbc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1913.902802][T22337] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1913.910765][T22337] R13: 000000000000006e R14: 00007fa3ab106058 R15: 00007ffd7ffe7168 [ 1913.918727][T22337] [ 1914.371255][ T3021] team0 (unregistering): Port device team_slave_1 removed [ 1914.442616][ T5277] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1914.451999][ T3021] team0 (unregistering): Port device team_slave_0 removed [ 1914.655273][ T5277] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1914.672528][ T5277] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1914.701959][ T5277] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1914.719756][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1914.750669][ T5277] usb 4-1: SerialNumber: syz [ 1914.818111][ T8] usb 5-1: USB disconnect, device number 70 [ 1915.020359][ T5277] usb 4-1: 0:2 : does not exist [ 1915.069050][ T5277] usb 4-1: USB disconnect, device number 63 [ 1915.306301][T22201] udevd[22201]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1915.339750][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.340497][ T8] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1915.346227][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.581157][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 1915.599366][ T8] usb 5-1: config 0 has an invalid interface number: 206 but max is 0 [ 1915.618279][ T8] usb 5-1: config 0 has no interface number 0 [ 1915.627846][ T8] usb 5-1: config 0 interface 206 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1915.650782][ T8] usb 5-1: config 0 interface 206 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1915.680362][ T8] usb 5-1: config 0 interface 206 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1915.691618][ T8] usb 5-1: config 0 interface 206 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1915.747902][ T8] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a96, bcdDevice=52.4c [ 1915.760631][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.783847][ T8] usb 5-1: Product: syz [ 1915.788549][ T8] usb 5-1: Manufacturer: syz [ 1915.831421][ T8] usb 5-1: SerialNumber: syz [ 1915.881213][ T8] usb 5-1: config 0 descriptor?? [ 1915.948750][T22130] hsr_slave_0: entered promiscuous mode [ 1915.982900][T22130] hsr_slave_1: entered promiscuous mode [ 1916.095789][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1916.162083][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1916.297070][ T8] usb 5-1: USB disconnect, device number 71 [ 1916.666482][T22001] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1916.836475][T22001] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1916.936001][T22001] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1917.009002][T22001] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1917.238122][T22369] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3436'. [ 1919.503739][T22001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1919.640446][T22001] 8021q: adding VLAN 0 to HW filter on device team0 [ 1919.795245][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1919.802400][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1919.866381][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 1919.873574][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1920.046852][T22393] vivid-004: ================= START STATUS ================= [ 1920.072408][T22393] vivid-004: Radio HW Seek Mode: Bounded [ 1920.132214][T22393] vivid-004: Radio Programmable HW Seek: false [ 1920.171302][T22393] vivid-004: RDS Rx I/O Mode: Block I/O [ 1920.190404][T22393] vivid-004: Generate RBDS Instead of RDS: false [ 1920.200965][T22393] vivid-004: RDS Reception: true [ 1920.250386][T22393] vivid-004: RDS Program Type: 0 inactive [ 1920.331877][T22393] vivid-004: RDS PS Name: inactive [ 1920.446939][T22393] vivid-004: RDS Radio Text: inactive [ 1920.489360][T22393] vivid-004: RDS Traffic Announcement: false inactive [ 1920.503803][T22393] vivid-004: RDS Traffic Program: false inactive [ 1920.546130][T22130] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1920.609040][T22393] vivid-004: RDS Music: false inactive [ 1920.615389][T22393] vivid-004: ================== END STATUS ================== [ 1920.703281][T22130] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1920.727542][T22130] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1920.790205][T22130] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1920.818704][T22397] vivid-003: ================= START STATUS ================= [ 1920.839658][T22397] vivid-003: Radio HW Seek Mode: Bounded [ 1920.977490][T22397] vivid-003: Radio Programmable HW Seek: false [ 1921.045962][T22397] vivid-003: RDS Rx I/O Mode: Block I/O [ 1921.105256][T22397] vivid-003: Generate RBDS Instead of RDS: false [ 1921.135539][T22397] vivid-003: RDS Reception: true [ 1921.168548][T22397] vivid-003: RDS Program Type: 0 inactive [ 1921.204032][T22397] vivid-003: RDS PS Name: inactive [ 1921.235224][T22397] vivid-003: RDS Radio Text: inactive [ 1921.293906][T22397] vivid-003: RDS Traffic Announcement: false inactive [ 1921.325329][T22397] vivid-003: RDS Traffic Program: false inactive [ 1921.416357][T22397] vivid-003: RDS Music: false inactive [ 1921.482083][T22397] vivid-003: ================== END STATUS ================== [ 1921.509447][T22130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1921.591926][T22001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1921.940223][T22130] 8021q: adding VLAN 0 to HW filter on device team0 [ 1922.089148][ T5307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1922.096332][ T5307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1922.149698][T22422] binder: 22417:22422 ioctl 4018620d 0 returned -22 [ 1922.191024][ T4964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1922.198143][ T4964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1922.277590][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 1922.277610][ T29] audit: type=1326 audit(1722157795.821:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22417 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aaf77299 code=0x7ffc0000 [ 1922.383585][T22001] veth0_vlan: entered promiscuous mode [ 1922.393338][ T29] audit: type=1326 audit(1722157795.861:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22417 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aaf77299 code=0x7ffc0000 [ 1923.446558][ T29] audit: type=1326 audit(1722157795.871:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22417 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3aaf77299 code=0x7ffc0000 [ 1923.499344][T15358] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1923.592865][T22001] veth1_vlan: entered promiscuous mode [ 1923.726734][ T29] audit: type=1326 audit(1722157795.871:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22417 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aaf77299 code=0x7ffc0000 [ 1923.739815][T15358] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1923.876763][T15358] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1923.927485][ T29] audit: type=1326 audit(1722157795.871:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22417 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3aaf75cd0 code=0x7ffc0000 [ 1923.978814][T15358] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 1923.990160][T22001] veth0_macvtap: entered promiscuous mode [ 1924.060894][T22001] veth1_macvtap: entered promiscuous mode [ 1924.061592][T15358] usb 4-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1924.067330][ T29] audit: type=1326 audit(1722157795.881:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22417 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa3aaf76e9b code=0x7ffc0000 [ 1924.170294][T22001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1924.209334][T22001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1924.227916][T15358] usb 4-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 1924.258040][ T29] audit: type=1326 audit(1722157795.901:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22417 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa3aaf76e9b code=0x7ffc0000 [ 1924.282707][T15358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.291336][T22001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1924.323358][T15358] usb 4-1: Product: syz [ 1924.327547][T15358] usb 4-1: Manufacturer: syz [ 1924.360831][T22001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1924.371391][T15358] usb 4-1: SerialNumber: syz [ 1924.407701][T15358] usb 4-1: config 0 descriptor?? [ 1924.441093][T22001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1924.441246][T22418] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1924.458984][ T29] audit: type=1326 audit(1722157795.941:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22417 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa3aaf76e9b code=0x7ffc0000 [ 1924.520295][T22001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1924.557606][T22001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1924.569996][T22001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1924.580862][ T29] audit: type=1326 audit(1722157795.941:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22417 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa3aaf76e9b code=0x7ffc0000 [ 1924.607793][T22001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1924.657380][ T29] audit: type=1326 audit(1722157796.161:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22417 comm="syz.3.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa3aaf76e9b code=0x7ffc0000 [ 1924.681851][T21034] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1924.715130][T22001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1924.740393][T22001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1924.806878][T22001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1924.827801][T22001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1924.839103][T22001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1924.886741][T22001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1924.897844][T21034] usb 2-1: Using ep0 maxpacket: 32 [ 1924.910223][T21034] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1924.940068][T22001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1924.954608][T21034] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1924.970899][T22001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1924.985824][T21034] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1924.999858][T21034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.044650][T13604] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1925.046662][T22001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1925.077728][T21034] usb 2-1: Product: syz [ 1925.077842][T13604] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1925.098860][T13604] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1925.105005][T21034] usb 2-1: Manufacturer: syz [ 1925.114273][T13604] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1925.119582][T21034] usb 2-1: SerialNumber: syz [ 1925.130075][T13604] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1925.138088][T13604] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1925.217297][T21034] usb 2-1: config 0 descriptor?? [ 1925.454867][T22001] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.466517][T22001] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.480706][T22001] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.500425][T22001] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.659947][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1925.937280][ T4964] usb 2-1: USB disconnect, device number 63 [ 1925.981347][T21034] usb 4-1: USB disconnect, device number 64 [ 1926.185633][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1927.232466][T13604] Bluetooth: hci6: command tx timeout [ 1927.282950][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1928.508089][T22130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1929.323174][T13604] Bluetooth: hci6: command tx timeout [ 1929.602572][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1929.620327][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.000059][ T6360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1930.008402][ T6360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1930.323041][ T2898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1930.339751][ T2898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1930.709291][T22130] veth0_vlan: entered promiscuous mode [ 1930.758141][ T62] bridge_slave_1: left allmulticast mode [ 1930.787310][ T62] bridge_slave_1: left promiscuous mode [ 1930.813838][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1930.849581][ T62] bridge_slave_0: left allmulticast mode [ 1930.871185][ T62] bridge_slave_0: left promiscuous mode [ 1930.898986][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1931.401096][T13604] Bluetooth: hci6: command tx timeout [ 1932.698433][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1932.748507][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1932.789818][ T62] bond0 (unregistering): Released all slaves [ 1932.898304][T22444] chnl_net:caif_netlink_parms(): no params data found [ 1933.209524][T22130] veth1_vlan: entered promiscuous mode [ 1933.248393][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 1933.248412][ T29] audit: type=1400 audit(1722157806.791:3201): avc: denied { setopt } for pid=22546 comm="syz.3.3453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1933.471990][T13604] Bluetooth: hci6: command tx timeout [ 1933.554723][T22554] ax25_connect(): syz.3.3453 uses autobind, please contact jreuter@yaina.de [ 1939.030429][ T29] audit: type=1400 audit(1722157812.571:3202): avc: denied { bind } for pid=22585 comm="syz.0.3457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1939.065058][T22444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1939.089842][T22444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1939.104792][T22444] bridge_slave_0: entered allmulticast mode [ 1939.135314][T22444] bridge_slave_0: entered promiscuous mode [ 1939.286400][ T62] hsr_slave_0: left promiscuous mode [ 1939.293019][ T62] hsr_slave_1: left promiscuous mode [ 1939.309913][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1939.326419][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1939.393607][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1939.409452][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1939.544388][ T62] veth1_macvtap: left promiscuous mode [ 1939.560514][ T62] veth0_macvtap: left promiscuous mode [ 1939.574080][ T62] veth1_vlan: left promiscuous mode [ 1939.583942][ T62] veth0_vlan: left promiscuous mode [ 1941.929832][ T29] audit: type=1326 audit(1722157815.461:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22617 comm="syz.0.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9777299 code=0x7ffc0000 [ 1941.966956][ T29] audit: type=1326 audit(1722157815.461:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22617 comm="syz.0.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f36a9777299 code=0x7ffc0000 [ 1941.997381][ T29] audit: type=1326 audit(1722157815.461:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22617 comm="syz.0.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9777299 code=0x7ffc0000 [ 1942.024567][ T29] audit: type=1326 audit(1722157815.461:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22617 comm="syz.0.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9777299 code=0x7ffc0000 [ 1942.062416][ T29] audit: type=1326 audit(1722157815.461:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22617 comm="syz.0.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36a9777299 code=0x7ffc0000 [ 1942.094770][ T29] audit: type=1326 audit(1722157815.461:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22617 comm="syz.0.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9777299 code=0x7ffc0000 [ 1942.127081][ T29] audit: type=1326 audit(1722157815.461:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22617 comm="syz.0.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36a9777299 code=0x7ffc0000 [ 1942.164452][ T29] audit: type=1326 audit(1722157815.461:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22617 comm="syz.0.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9777299 code=0x7ffc0000 [ 1942.207712][ T29] audit: type=1326 audit(1722157815.461:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22617 comm="syz.0.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9777299 code=0x7ffc0000 [ 1942.964610][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1943.095845][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1944.004084][T22444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1944.011538][T22444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1944.018837][T22444] bridge_slave_1: entered allmulticast mode [ 1944.027969][T22444] bridge_slave_1: entered promiscuous mode [ 1944.050564][T22130] veth0_macvtap: entered promiscuous mode [ 1944.105287][T22130] veth1_macvtap: entered promiscuous mode [ 1944.294632][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1944.309050][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1944.331773][T22130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1944.342625][T22130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1944.355161][T22130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1944.365759][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1944.374957][T22130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1944.385525][T22130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1944.396900][T22130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1944.407473][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1944.417330][T22130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1944.430394][T22130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1944.440866][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1944.448828][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1944.475242][T22130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1944.493603][T22444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1944.512861][T22444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1944.731481][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1944.827767][T22130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1944.867260][T22130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1944.895370][T22130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1944.922009][T22130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1944.955140][T22130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1944.990903][T22130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1945.015856][T22130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1945.033192][T22130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1945.117571][T22130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1945.194679][T22444] team0: Port device team_slave_0 added [ 1945.272395][T22130] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1945.295267][T22130] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1945.325769][T22130] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1945.355533][T22130] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1945.408838][T22444] team0: Port device team_slave_1 added [ 1946.540272][T22444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1946.557399][T22444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1946.590997][T13604] Bluetooth: hci4: command tx timeout [ 1946.598520][T22444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1947.606015][T22444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1947.631075][T22444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1947.711569][T22444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1948.390460][T22444] hsr_slave_0: entered promiscuous mode [ 1948.406631][T22444] hsr_slave_1: entered promiscuous mode [ 1948.434742][T22444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1948.448966][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1948.450730][T22444] Cannot create hsr debugfs directory [ 1948.671647][T13604] Bluetooth: hci4: command tx timeout [ 1948.811683][ T2998] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1950.038105][ T2998] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1950.112966][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1950.157905][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1950.272045][ T2998] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1950.598590][T22705] FAULT_INJECTION: forcing a failure. [ 1950.598590][T22705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1950.613992][T22705] CPU: 0 UID: 0 PID: 22705 Comm: syz.0.3473 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 1950.624441][T22705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1950.634496][T22705] Call Trace: [ 1950.637775][T22705] [ 1950.640703][T22705] dump_stack_lvl+0x16c/0x1f0 [ 1950.645392][T22705] should_fail_ex+0x497/0x5b0 [ 1950.650077][T22705] _copy_to_user+0x30/0xc0 [ 1950.654504][T22705] simple_read_from_buffer+0xd0/0x160 [ 1950.659882][T22705] proc_fail_nth_read+0x1b0/0x290 [ 1950.664910][T22705] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1950.670457][T22705] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1950.676029][T22705] vfs_read+0x1d4/0xbd0 [ 1950.680210][T22705] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1950.686216][T22705] ? __pfx_vfs_read+0x10/0x10 [ 1950.690896][T22705] ? rcu_is_watching+0x12/0xc0 [ 1950.695663][T22705] ? kfree+0x245/0x3b0 [ 1950.699728][T22705] ? vfs_get_tree+0x1f7/0x380 [ 1950.704507][T22705] ? __fget_light+0x173/0x210 [ 1950.709297][T22705] ksys_read+0x12f/0x260 [ 1950.713560][T22705] ? __pfx_ksys_read+0x10/0x10 [ 1950.718339][T22705] do_syscall_64+0xcd/0x250 [ 1950.722846][T22705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1950.728740][T22705] RIP: 0033:0x7f36a9775d7c [ 1950.733166][T22705] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1950.753402][T22705] RSP: 002b:00007f36a91de040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1950.761824][T22705] RAX: ffffffffffffffda RBX: 00007f36a9906058 RCX: 00007f36a9775d7c [ 1950.769792][T22705] RDX: 000000000000000f RSI: 00007f36a91de0b0 RDI: 0000000000000006 [ 1950.777760][T22705] RBP: 00007f36a91de0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1950.785726][T22705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1950.793696][T22705] R13: 000000000000006e R14: 00007f36a9906058 R15: 00007ffce6891ae8 [ 1950.801669][T22705] [ 1951.062669][T13604] Bluetooth: hci4: command tx timeout [ 1951.234309][ T2998] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1951.543296][ T2898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1951.583024][ T2898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1951.649531][T22631] chnl_net:caif_netlink_parms(): no params data found [ 1953.072384][T13604] Bluetooth: hci4: command tx timeout [ 1954.772318][ T2998] bridge_slave_1: left allmulticast mode [ 1954.778302][ T2998] bridge_slave_1: left promiscuous mode [ 1954.819449][ T2998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1954.833950][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1954.908637][ T2998] bridge_slave_0: left allmulticast mode [ 1954.950346][ T2998] bridge_slave_0: left promiscuous mode [ 1954.998367][ T2998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1958.856207][ T2998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1958.869076][ T2998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1958.880529][ T2998] bond0 (unregistering): Released all slaves [ 1958.949781][T22631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1958.959093][T22631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1958.985549][T22631] bridge_slave_0: entered allmulticast mode [ 1958.995443][T22631] bridge_slave_0: entered promiscuous mode [ 1959.080729][T22428] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1959.300153][T22631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1959.315206][T22631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1959.321021][T22428] usb 1-1: Using ep0 maxpacket: 16 [ 1959.327954][T22631] bridge_slave_1: entered allmulticast mode [ 1959.346293][T22631] bridge_slave_1: entered promiscuous mode [ 1959.349118][T22428] usb 1-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 1959.433613][T22428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.468320][T22428] usb 1-1: Product: syz [ 1959.483812][T22428] usb 1-1: Manufacturer: syz [ 1959.493849][T22428] usb 1-1: SerialNumber: syz [ 1959.503015][T22428] usb 1-1: config 0 descriptor?? [ 1959.598146][T22631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1959.628582][T22631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1959.745270][ T2998] hsr_slave_0: left promiscuous mode [ 1959.758719][T22428] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 1959.775747][ T2998] hsr_slave_1: left promiscuous mode [ 1959.812546][ T2998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1959.838944][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1959.876665][ T2998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1959.886107][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1959.919293][ T2998] veth1_macvtap: left promiscuous mode [ 1959.929029][ T2998] veth0_macvtap: left promiscuous mode [ 1959.938857][T22428] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1959.949196][ T2998] veth1_vlan: left promiscuous mode [ 1959.955424][T22428] dib0700: firmware download failed at 7 with -22 [ 1959.970404][ T2998] veth0_vlan: left promiscuous mode [ 1961.313741][ T2998] team0 (unregistering): Port device team_slave_1 removed [ 1961.414922][ T2998] team0 (unregistering): Port device team_slave_0 removed [ 1962.253457][T22631] team0: Port device team_slave_0 added [ 1962.282830][T22631] team0: Port device team_slave_1 added [ 1962.363550][T22428] usb 1-1: USB disconnect, device number 74 [ 1962.555430][T22631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1962.569083][T22631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1962.744833][T22631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1963.640039][T22631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1963.800696][T22631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1963.997569][T22631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1964.265658][T22444] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1964.464736][T22631] hsr_slave_0: entered promiscuous mode [ 1964.554796][T22631] hsr_slave_1: entered promiscuous mode [ 1964.561786][T22631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1964.569389][T22631] Cannot create hsr debugfs directory [ 1964.626442][T22444] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1964.717602][T22444] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1964.821256][T22444] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1964.921034][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1965.959892][T22444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1966.447111][T22444] 8021q: adding VLAN 0 to HW filter on device team0 [ 1966.478071][ T5307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1966.485262][ T5307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1966.561484][ T5307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1966.568761][ T5307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1967.196604][T22631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1967.270489][T22631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1967.277003][T22877] FAULT_INJECTION: forcing a failure. [ 1967.277003][T22877] name failslab, interval 1, probability 0, space 0, times 0 [ 1967.329324][T22877] CPU: 1 UID: 0 PID: 22877 Comm: syz.3.3495 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 1967.342097][T22877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1967.342119][T22877] Call Trace: [ 1967.342130][T22877] [ 1967.342142][T22877] dump_stack_lvl+0x16c/0x1f0 [ 1967.342181][T22877] should_fail_ex+0x497/0x5b0 [ 1967.342216][T22877] ? fs_reclaim_acquire+0xae/0x160 [ 1967.342246][T22877] should_failslab+0xc2/0x120 [ 1967.342279][T22877] __kmalloc_noprof+0xcb/0x400 [ 1967.342309][T22877] ? __pfx_lock_acquire+0x10/0x10 [ 1967.342342][T22877] tomoyo_realpath_from_path+0xb9/0x720 [ 1967.342380][T22877] ? tomoyo_profile+0x47/0x60 [ 1967.342418][T22877] tomoyo_path_number_perm+0x245/0x590 [ 1967.342448][T22877] ? tomoyo_path_number_perm+0x232/0x590 [ 1967.342505][T22877] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1967.342544][T22877] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1967.342587][T22877] ? __fget_files+0x256/0x400 [ 1967.342626][T22877] security_file_ioctl+0x75/0xc0 [ 1967.342661][T22877] __x64_sys_ioctl+0xbb/0x220 [ 1967.342693][T22877] do_syscall_64+0xcd/0x250 [ 1967.342708][T22877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1967.342727][T22877] RIP: 0033:0x7fa3aaf77299 [ 1967.342740][T22877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1967.342755][T22877] RSP: 002b:00007fa3abcdd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1967.342772][T22877] RAX: ffffffffffffffda RBX: 00007fa3ab105f80 RCX: 00007fa3aaf77299 [ 1967.342783][T22877] RDX: 0000000020000280 RSI: 0000000000008914 RDI: 0000000000000004 [ 1967.342794][T22877] RBP: 00007fa3abcdd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1967.342804][T22877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1967.342814][T22877] R13: 000000000000000b R14: 00007fa3ab105f80 R15: 00007ffd7ffe7168 [ 1967.342826][T22877] [ 1967.355735][T22631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1967.366493][T22631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1967.426668][T22877] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1967.623636][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1967.623656][ T29] audit: type=1400 audit(1722157841.171:3225): avc: denied { ioctl } for pid=22876 comm="syz.3.3495" path="socket:[83633]" dev="sockfs" ino=83633 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1967.837092][T22867] vivid-000: ================= START STATUS ================= [ 1967.845523][T22867] vivid-000: Radio HW Seek Mode: Bounded [ 1967.851910][T22867] vivid-000: Radio Programmable HW Seek: false [ 1967.863674][T22867] vivid-000: RDS Rx I/O Mode: Block I/O [ 1967.911218][T22867] vivid-000: Generate RBDS Instead of RDS: false [ 1967.951525][T22867] vivid-000: RDS Reception: true [ 1967.951571][T22867] vivid-000: RDS Program Type: 0 inactive [ 1967.951611][T22867] vivid-000: RDS PS Name: inactive [ 1967.951649][T22867] vivid-000: RDS Radio Text: inactive [ 1967.951687][T22867] vivid-000: RDS Traffic Announcement: false inactive [ 1967.951725][T22867] vivid-000: RDS Traffic Program: false inactive [ 1968.124546][T22867] vivid-000: RDS Music: false inactive [ 1968.130551][T22867] vivid-000: ================== END STATUS ================== [ 1968.216206][T22444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1968.614153][T22631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1968.805634][T22631] 8021q: adding VLAN 0 to HW filter on device team0 [ 1968.952418][T15358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1968.959783][T15358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1969.019413][T15358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1969.026598][T15358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1969.589955][T22916] binder: 22910:22916 ioctl 4018620d 0 returned -22 [ 1969.760224][T22444] veth0_vlan: entered promiscuous mode [ 1969.818279][T22444] veth1_vlan: entered promiscuous mode [ 1969.870455][ T29] audit: type=1326 audit(1722157843.411:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22910 comm="syz.2.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef7f77299 code=0x7ffc0000 [ 1969.990914][ T29] audit: type=1326 audit(1722157843.461:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22910 comm="syz.2.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef7f77299 code=0x7ffc0000 [ 1970.035240][T22444] veth0_macvtap: entered promiscuous mode [ 1970.303411][ T29] audit: type=1326 audit(1722157843.531:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22910 comm="syz.2.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faef7f77299 code=0x7ffc0000 [ 1970.490813][ T5307] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1971.291201][ T29] audit: type=1326 audit(1722157843.561:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22910 comm="syz.2.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef7f77299 code=0x7ffc0000 [ 1971.367432][ T29] audit: type=1326 audit(1722157843.561:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22910 comm="syz.2.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef7f77299 code=0x7ffc0000 [ 1971.423260][ T5307] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1971.429679][T22444] veth1_macvtap: entered promiscuous mode [ 1971.484176][ T5307] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1971.543712][T22631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1971.556393][ T5307] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 1971.614535][ T5307] usb 3-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1971.707883][ T5307] usb 3-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 1971.760810][ T5307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.763723][T22444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1971.794714][ T5307] usb 3-1: Product: syz [ 1971.955128][ T5307] usb 3-1: Manufacturer: syz [ 1971.959749][ T5307] usb 3-1: SerialNumber: syz [ 1972.355681][ T5307] usb 3-1: config 0 descriptor?? [ 1972.388505][T22444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1973.004982][T22444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1973.235580][T22444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1973.245534][T22444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1973.256618][T22444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1973.267440][T22444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1973.277983][T22444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1973.292782][T22444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1973.724841][T22444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1973.746336][T22444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1974.290694][T22444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1974.318452][ T5307] usb 3-1: can't set config #0, error -71 [ 1974.339390][T22444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1974.366423][ T5307] usb 3-1: USB disconnect, device number 59 [ 1974.409116][T22444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1974.437120][T22444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1974.482737][T22444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1974.512980][T22444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.444987][T22444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1975.761878][T22444] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1976.296536][T22444] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1976.343758][T22444] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1976.934097][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.940410][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.962279][T22444] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1977.077422][T22631] veth0_vlan: entered promiscuous mode [ 1977.127763][T22631] veth1_vlan: entered promiscuous mode [ 1977.308237][T22631] veth0_macvtap: entered promiscuous mode [ 1977.387147][T22631] veth1_macvtap: entered promiscuous mode [ 1978.368257][T22631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1978.420646][T22631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1978.453268][T22631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1978.480650][T22631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1978.500701][T22631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1978.514798][T22989] FAULT_INJECTION: forcing a failure. [ 1978.514798][T22989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1978.544050][T22631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1978.562118][T22989] CPU: 1 UID: 0 PID: 22989 Comm: syz.2.3510 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 1978.572597][T22989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1978.582678][T22989] Call Trace: [ 1978.585975][T22989] [ 1978.588919][T22989] dump_stack_lvl+0x16c/0x1f0 [ 1978.593627][T22989] should_fail_ex+0x497/0x5b0 [ 1978.598347][T22989] _copy_from_user+0x30/0xf0 [ 1978.602966][T22989] copy_msghdr_from_user+0x99/0x160 [ 1978.608202][T22989] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1978.614045][T22989] ? __pfx___lock_acquire+0x10/0x10 [ 1978.619274][T22989] ___sys_sendmsg+0xff/0x1e0 [ 1978.621053][T22631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1978.623875][T22989] ? __pfx____sys_sendmsg+0x10/0x10 [ 1978.634537][T22631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1978.639437][T22989] ? __pfx_lock_release+0x10/0x10 [ 1978.654257][T22989] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1978.659990][T22989] ? __fget_light+0x173/0x210 [ 1978.664682][T22989] __sys_sendmmsg+0x1a1/0x450 [ 1978.669371][T22989] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1978.674585][T22989] ? vfs_write+0x14d/0x1140 [ 1978.679095][T22989] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1978.685090][T22989] ? fput+0x32/0x390 [ 1978.688991][T22989] ? ksys_write+0x1ab/0x260 [ 1978.693492][T22989] ? __pfx_ksys_write+0x10/0x10 [ 1978.698346][T22989] __x64_sys_sendmmsg+0x9c/0x100 [ 1978.703291][T22989] ? lockdep_hardirqs_on+0x7c/0x110 [ 1978.708499][T22989] do_syscall_64+0xcd/0x250 [ 1978.713012][T22989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.718910][T22989] RIP: 0033:0x7faef7f77299 [ 1978.723328][T22989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1978.743109][T22989] RSP: 002b:00007faef79de048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1978.751524][T22989] RAX: ffffffffffffffda RBX: 00007faef8106058 RCX: 00007faef7f77299 [ 1978.759494][T22989] RDX: 0000000000000002 RSI: 0000000020000780 RDI: 0000000000000003 [ 1978.767480][T22989] RBP: 00007faef79de0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1978.775454][T22989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1978.783430][T22989] R13: 000000000000006e R14: 00007faef8106058 R15: 00007ffff49ec7d8 [ 1978.791410][T22989] [ 1978.809306][T22631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1978.821235][T22631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1978.834868][T22631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1978.890876][ T2898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1978.898744][ T2898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1978.904174][T22631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1978.938604][T22631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1978.974372][T22631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1979.000637][T22631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1979.030830][T22631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1979.041900][T22631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1979.057089][T22631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1979.073617][T22631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1979.090893][T22631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1979.114193][T22631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1979.133992][T22631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1979.280097][T22999] hfs: can't find a HFS filesystem on dev nullb0 [ 1979.300342][T22631] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1979.337370][T22631] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1979.383098][T22631] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1979.451112][T22631] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1979.511939][T22564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1979.573242][T22564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1979.811621][ T3021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1979.826923][ T3021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1980.031768][ T3021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1980.081565][ T3021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1984.894027][T17364] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1985.102686][T17364] usb 2-1: Using ep0 maxpacket: 8 [ 1985.127666][T17364] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1985.155811][T17364] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1985.197584][T17364] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1985.242977][T17364] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1985.274680][T17364] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1985.388317][T17364] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1985.410822][T17364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1985.694595][T17364] usb 2-1: usb_control_msg returned -32 [ 1985.733496][T17364] usbtmc 2-1:16.0: can't read capabilities [ 1985.940764][ T46] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1986.270718][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 1987.181839][ T942] usb 2-1: USB disconnect, device number 64 [ 1987.195733][ T46] usb 1-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1987.233175][ T46] usb 1-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1987.269403][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1987.461202][ T46] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1988.033915][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.072632][ T46] usb 1-1: Product: syz [ 1988.086691][ T46] usb 1-1: Manufacturer: syz [ 1988.215345][ T46] usb 1-1: SerialNumber: syz [ 1988.543871][ T46] usb 1-1: config 0 descriptor?? [ 1988.585949][ T46] usb 1-1: can't set config #0, error -71 [ 1988.651144][ T46] usb 1-1: USB disconnect, device number 75 [ 1988.891242][T23076] FAULT_INJECTION: forcing a failure. [ 1988.891242][T23076] name failslab, interval 1, probability 0, space 0, times 0 [ 1990.380722][T23076] CPU: 1 UID: 0 PID: 23076 Comm: syz.2.3524 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 1990.391378][T23076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1990.401637][T23076] Call Trace: [ 1990.404941][T23076] [ 1990.407885][T23076] dump_stack_lvl+0x16c/0x1f0 [ 1990.412565][T23076] should_fail_ex+0x497/0x5b0 [ 1990.417255][T23076] ? fs_reclaim_acquire+0xae/0x160 [ 1990.422362][T23076] should_failslab+0xc2/0x120 [ 1990.427037][T23076] __kmalloc_noprof+0xcb/0x400 [ 1990.431792][T23076] ? __pfx_lock_acquire+0x10/0x10 [ 1990.436814][T23076] tomoyo_realpath_from_path+0xb9/0x720 [ 1990.442362][T23076] ? tomoyo_profile+0x47/0x60 [ 1990.447042][T23076] tomoyo_path_number_perm+0x245/0x590 [ 1990.452585][T23076] ? tomoyo_path_number_perm+0x232/0x590 [ 1990.458209][T23076] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1990.464538][T23076] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1990.470532][T23076] ? __fget_files+0x256/0x400 [ 1990.475224][T23076] security_file_ioctl+0x75/0xc0 [ 1990.480245][T23076] __x64_sys_ioctl+0xbb/0x220 [ 1990.484931][T23076] do_syscall_64+0xcd/0x250 [ 1990.489445][T23076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1990.495335][T23076] RIP: 0033:0x7faef7f77299 [ 1990.499738][T23076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1990.519514][T23076] RSP: 002b:00007faef79ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1990.527919][T23076] RAX: ffffffffffffffda RBX: 00007faef8105f80 RCX: 00007faef7f77299 [ 1990.536055][T23076] RDX: 0000000020000080 RSI: 00000000c10c5541 RDI: 0000000000000005 [ 1990.544016][T23076] RBP: 00007faef79ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1990.551977][T23076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1990.559947][T23076] R13: 000000000000000b R14: 00007faef8105f80 R15: 00007ffff49ec7d8 [ 1990.567920][T23076] [ 1990.762166][T23076] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2005.256062][ T29] audit: type=1400 audit(1722157871.101:3231): avc: denied { audit_write } for pid=23096 comm="syz.2.3530" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2005.570535][ T29] audit: type=1107 audit(1722157871.151:3232): pid=23096 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 2007.598588][T23107] Bluetooth: hci3: command 0x0406 tx timeout [ 2013.160030][T23125] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2013.172370][T23125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2013.181416][T23125] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2013.194347][T23125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2013.209083][T23125] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2013.219134][T23125] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2013.449404][T18661] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2013.491909][T23170] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3543'. [ 2013.517177][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2013.596242][T13604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2013.741917][T13604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2013.881064][T21034] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2014.275863][T13604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2014.304767][T13604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2014.315403][T13604] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2014.324823][T13604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2014.333396][T21034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2014.353172][T21034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2014.364080][T21034] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2014.394764][T21034] usb 2-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 2014.443223][T21034] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2014.493800][T21034] usb 2-1: config 0 descriptor?? [ 2014.572685][T18661] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2014.832947][T18661] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2015.507584][T13604] Bluetooth: hci3: command tx timeout [ 2015.795216][T23166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2015.855354][T23166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2015.911332][T21034] waltop 0003:172F:0038.0006: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.1-1/input0 [ 2015.942575][T23166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3543'. [ 2016.301932][T18661] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2016.531710][T13604] Bluetooth: hci5: command tx timeout [ 2016.735606][T21034] usb 2-1: USB disconnect, device number 65 [ 2016.828541][ T29] audit: type=1400 audit(1722157890.371:3233): avc: denied { create } for pid=23188 comm="syz.3.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2016.889259][ T29] audit: type=1400 audit(1722157890.371:3234): avc: denied { ioctl } for pid=23188 comm="syz.3.3546" path="socket:[86556]" dev="sockfs" ino=86556 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2017.681618][T13604] Bluetooth: hci3: command tx timeout [ 2018.650746][T23125] Bluetooth: hci5: command tx timeout [ 2019.493662][T23156] chnl_net:caif_netlink_parms(): no params data found [ 2019.710898][T23125] Bluetooth: hci3: command tx timeout [ 2019.791023][T23125] Bluetooth: hci2: command 0x0406 tx timeout [ 2020.023952][T18661] bridge_slave_1: left allmulticast mode [ 2020.029656][T18661] bridge_slave_1: left promiscuous mode [ 2020.048811][T18661] bridge0: port 2(bridge_slave_1) entered disabled state [ 2020.067991][T18661] bridge_slave_0: left allmulticast mode [ 2020.074348][T18661] bridge_slave_0: left promiscuous mode [ 2020.082062][T18661] bridge0: port 1(bridge_slave_0) entered disabled state [ 2020.680048][T13604] Bluetooth: hci5: command tx timeout [ 2021.155082][T23231] vivid-002: ================= START STATUS ================= [ 2021.170669][T23231] vivid-002: Radio HW Seek Mode: Bounded [ 2021.179303][T23231] vivid-002: Radio Programmable HW Seek: false [ 2021.187281][T23231] vivid-002: RDS Rx I/O Mode: Block I/O [ 2021.196398][T23231] vivid-002: Generate RBDS Instead of RDS: false [ 2021.206608][T23231] vivid-002: RDS Reception: true [ 2021.214171][T23231] vivid-002: RDS Program Type: 0 inactive [ 2021.222528][T23231] vivid-002: RDS PS Name: inactive [ 2021.228065][T23231] vivid-002: RDS Radio Text: inactive [ 2021.236009][T23231] vivid-002: RDS Traffic Announcement: false inactive [ 2021.253574][T23231] vivid-002: RDS Traffic Program: false inactive [ 2021.260915][T23231] vivid-002: RDS Music: false inactive [ 2021.266564][T23231] vivid-002: ================== END STATUS ================== [ 2021.801082][T13604] Bluetooth: hci3: command tx timeout [ 2022.821288][T13604] Bluetooth: hci5: command tx timeout [ 2024.607077][T23241] FAULT_INJECTION: forcing a failure. [ 2024.607077][T23241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2024.632012][T23241] CPU: 0 UID: 0 PID: 23241 Comm: syz.1.3553 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 2024.642489][T23241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2024.652547][T23241] Call Trace: [ 2024.655826][T23241] [ 2024.658754][T23241] dump_stack_lvl+0x16c/0x1f0 [ 2024.663441][T23241] should_fail_ex+0x497/0x5b0 [ 2024.668129][T23241] _copy_from_user+0x30/0xf0 [ 2024.672726][T23241] __do_sys_clock_adjtime+0x97/0x290 [ 2024.678017][T23241] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 2024.683920][T23241] do_syscall_64+0xcd/0x250 [ 2024.688427][T23241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2024.694328][T23241] RIP: 0033:0x7f1709977299 [ 2024.698743][T23241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2024.718353][T23241] RSP: 002b:00007f170a685048 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 2024.726767][T23241] RAX: ffffffffffffffda RBX: 00007f1709b05f80 RCX: 00007f1709977299 [ 2024.734738][T23241] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 00000000ffffffd3 [ 2024.742713][T23241] RBP: 00007f170a6850a0 R08: 0000000000000000 R09: 0000000000000000 [ 2024.750687][T23241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2024.758672][T23241] R13: 000000000000000b R14: 00007f1709b05f80 R15: 00007ffd074cef58 [ 2024.766650][T23241] [ 2024.812452][T18661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2024.844426][T18661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2024.885727][T18661] bond0 (unregistering): Released all slaves [ 2025.076397][T23243] FAULT_INJECTION: forcing a failure. [ 2025.076397][T23243] name failslab, interval 1, probability 0, space 0, times 0 [ 2025.245065][T23243] CPU: 0 UID: 0 PID: 23243 Comm: syz.1.3554 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 2025.255528][T23243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2025.266015][T23243] Call Trace: [ 2025.269281][T23243] [ 2025.272200][T23243] dump_stack_lvl+0x16c/0x1f0 [ 2025.276891][T23243] should_fail_ex+0x497/0x5b0 [ 2025.281580][T23243] ? fs_reclaim_acquire+0xae/0x160 [ 2025.286714][T23243] should_failslab+0xc2/0x120 [ 2025.291404][T23243] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 2025.296784][T23243] ? getname_flags.part.0+0x4c/0x550 [ 2025.302102][T23243] getname_flags.part.0+0x4c/0x550 [ 2025.307225][T23243] getname_flags+0x93/0xf0 [ 2025.311646][T23243] __x64_sys_rename+0x58/0xa0 [ 2025.316327][T23243] do_syscall_64+0xcd/0x250 [ 2025.320832][T23243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2025.326735][T23243] RIP: 0033:0x7f1709977299 [ 2025.331155][T23243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2025.350767][T23243] RSP: 002b:00007f170a685048 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 2025.359183][T23243] RAX: ffffffffffffffda RBX: 00007f1709b05f80 RCX: 00007f1709977299 [ 2025.367156][T23243] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000020000080 [ 2025.375126][T23243] RBP: 00007f170a6850a0 R08: 0000000000000000 R09: 0000000000000000 [ 2025.383101][T23243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2025.391073][T23243] R13: 000000000000000b R14: 00007f1709b05f80 R15: 00007ffd074cef58 [ 2025.399049][T23243] [ 2025.403051][T23171] chnl_net:caif_netlink_parms(): no params data found [ 2025.655122][T23256] FAULT_INJECTION: forcing a failure. [ 2025.655122][T23256] name failslab, interval 1, probability 0, space 0, times 0 [ 2025.667908][T23256] CPU: 1 UID: 0 PID: 23256 Comm: syz.2.3555 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 2025.678340][T23256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2025.688393][T23256] Call Trace: [ 2025.691672][T23256] [ 2025.694597][T23256] dump_stack_lvl+0x16c/0x1f0 [ 2025.699288][T23256] should_fail_ex+0x497/0x5b0 [ 2025.703976][T23256] ? fs_reclaim_acquire+0xae/0x160 [ 2025.709093][T23256] should_failslab+0xc2/0x120 [ 2025.713792][T23256] __kmalloc_node_noprof+0xd1/0x430 [ 2025.719001][T23256] ? __kvmalloc_node_noprof+0x9d/0x1a0 [ 2025.725726][T23256] ? __pfx_mark_lock+0x10/0x10 [ 2025.731139][T23256] __kvmalloc_node_noprof+0x9d/0x1a0 [ 2025.736902][T23256] seq_read_iter+0x830/0x12c0 [ 2025.741603][T23256] seq_read+0x390/0x4d0 [ 2025.745772][T23256] ? __pfx_seq_read+0x10/0x10 [ 2025.750454][T23256] ? __pfx___might_resched+0x10/0x10 [ 2025.755750][T23256] ? selinux_file_permission+0x125/0x590 [ 2025.761400][T23256] ? __pfx_seq_read+0x10/0x10 [ 2025.766082][T23256] proc_reg_read+0x243/0x340 [ 2025.770683][T23256] ? __pfx_proc_reg_read+0x10/0x10 [ 2025.775803][T23256] vfs_read+0x1d4/0xbd0 [ 2025.779957][T23256] ? __fdget_pos+0xeb/0x180 [ 2025.784461][T23256] ? __pfx_vfs_read+0x10/0x10 [ 2025.789134][T23256] ? __pfx___mutex_lock+0x10/0x10 [ 2025.794158][T23256] ? __fget_files+0x256/0x400 [ 2025.798844][T23256] ksys_read+0x12f/0x260 [ 2025.803087][T23256] ? __pfx_ksys_read+0x10/0x10 [ 2025.807851][T23256] do_syscall_64+0xcd/0x250 [ 2025.812363][T23256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2025.818273][T23256] RIP: 0033:0x7faef7f77299 [ 2025.822696][T23256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2025.842320][T23256] RSP: 002b:00007faef79bd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2025.850747][T23256] RAX: ffffffffffffffda RBX: 00007faef8106130 RCX: 00007faef7f77299 [ 2025.858725][T23256] RDX: 0000000000002020 RSI: 0000000020001380 RDI: 0000000000000009 [ 2025.866695][T23256] RBP: 00007faef79bd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 2025.874663][T23256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2025.882635][T23256] R13: 000000000000006e R14: 00007faef8106130 R15: 00007ffff49ec7d8 [ 2025.890610][T23256] [ 2027.087789][T23156] bridge0: port 1(bridge_slave_0) entered blocking state [ 2027.121345][T23156] bridge0: port 1(bridge_slave_0) entered disabled state [ 2027.180838][T23156] bridge_slave_0: entered allmulticast mode [ 2027.198001][T23156] bridge_slave_0: entered promiscuous mode [ 2027.290691][T23156] bridge0: port 2(bridge_slave_1) entered blocking state [ 2027.297904][T23156] bridge0: port 2(bridge_slave_1) entered disabled state [ 2027.360915][T23156] bridge_slave_1: entered allmulticast mode [ 2027.370258][T23156] bridge_slave_1: entered promiscuous mode [ 2028.467693][T23286] Bluetooth: MGMT ver 1.23 [ 2028.776540][T18661] hsr_slave_0: left promiscuous mode [ 2028.805808][T18661] hsr_slave_1: left promiscuous mode [ 2028.835466][T18661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2028.855814][T18661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2029.003536][T18661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2029.003563][T18661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2029.067337][T18661] veth1_macvtap: left promiscuous mode [ 2029.067443][T18661] veth0_macvtap: left promiscuous mode [ 2029.067691][T18661] veth1_vlan: left promiscuous mode [ 2029.067855][T18661] veth0_vlan: left promiscuous mode [ 2030.018030][T21034] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2030.259649][T21034] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2030.281968][T21034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2030.326749][T21034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2030.338266][T21034] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2030.383924][T21034] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2030.394447][T21034] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2030.411155][T21034] usb 2-1: Manufacturer: syz [ 2030.434255][T21034] usb 2-1: config 0 descriptor?? [ 2030.590845][T13604] Bluetooth: hci3: command tx timeout [ 2031.570018][T18661] team0 (unregistering): Port device team_slave_1 removed [ 2031.713865][T18661] team0 (unregistering): Port device team_slave_0 removed [ 2032.092006][T21034] usbhid 2-1:0.0: can't add hid device: -71 [ 2032.106327][T21034] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2032.164896][T21034] usb 2-1: USB disconnect, device number 66 [ 2033.345175][T23125] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2033.374573][T23125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2033.393718][T23125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2033.404101][T23125] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2033.415251][T23125] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2033.415998][T23156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2033.435932][T23125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2033.448204][T23156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2033.468374][T23171] bridge0: port 1(bridge_slave_0) entered blocking state [ 2033.490061][T23171] bridge0: port 1(bridge_slave_0) entered disabled state [ 2033.498204][T23171] bridge_slave_0: entered allmulticast mode [ 2033.506610][T23171] bridge_slave_0: entered promiscuous mode [ 2033.667772][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2033.746560][T23156] team0: Port device team_slave_0 added [ 2033.779573][T23171] bridge0: port 2(bridge_slave_1) entered blocking state [ 2033.815552][T23171] bridge0: port 2(bridge_slave_1) entered disabled state [ 2033.829966][T23171] bridge_slave_1: entered allmulticast mode [ 2033.839866][T23171] bridge_slave_1: entered promiscuous mode [ 2033.871419][T23156] team0: Port device team_slave_1 added [ 2035.191638][T23156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2035.198659][T23156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2035.231530][T23156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2035.248613][T23156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2035.256189][T23156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2035.294018][T23156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2035.381521][T23171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2035.432379][T23171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2035.471371][T23125] Bluetooth: hci4: command tx timeout [ 2035.519599][ T29] audit: type=1400 audit(1722157909.061:3235): avc: denied { remount } for pid=23353 comm="syz.3.3569" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2035.697822][T23156] hsr_slave_0: entered promiscuous mode [ 2035.700760][ T29] audit: type=1400 audit(1722157909.241:3236): avc: denied { unmount } for pid=17686 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2035.771244][T23156] hsr_slave_1: entered promiscuous mode [ 2035.812795][T23156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2035.827909][T23156] Cannot create hsr debugfs directory [ 2036.054406][T23171] team0: Port device team_slave_0 added [ 2036.214311][T23171] team0: Port device team_slave_1 added [ 2036.359993][ T5307] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2036.475787][ T29] audit: type=1400 audit(1722157910.001:3237): avc: denied { sys_ptrace } for pid=23365 comm="syz.2.3572" capability=19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 2036.620248][ T5307] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2036.643477][T23171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2036.651511][ T5307] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2036.685513][T23171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2036.716516][ T5307] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2036.733356][ T5307] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2036.744811][T23171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2036.756832][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.781442][T23171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2036.794601][T23171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2036.833981][ T5307] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2036.842485][T23171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2036.936669][T18661] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.983250][ T5307] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2037.108967][T23306] udevd[23306]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2037.169298][T18661] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2037.322147][T21034] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2037.421758][T18661] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2037.429468][ T5307] usb 4-1: USB disconnect, device number 65 [ 2037.552584][T23125] Bluetooth: hci4: command tx timeout [ 2037.559316][T21034] usb 3-1: Using ep0 maxpacket: 8 [ 2037.573452][T21034] usb 3-1: config 0 has no interfaces? [ 2037.607642][T21034] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2037.628036][T21034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.637369][T21034] usb 3-1: Product: syz [ 2037.639653][T18661] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2037.641683][T21034] usb 3-1: Manufacturer: syz [ 2037.643825][T21034] usb 3-1: SerialNumber: syz [ 2037.695091][T21034] usb 3-1: config 0 descriptor?? [ 2037.735303][T23171] hsr_slave_0: entered promiscuous mode [ 2037.748884][T23171] hsr_slave_1: entered promiscuous mode [ 2037.756267][T23171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2037.764018][T23171] Cannot create hsr debugfs directory [ 2037.953278][T23387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3574'. [ 2037.973080][T23336] chnl_net:caif_netlink_parms(): no params data found [ 2037.990054][ T942] usb 3-1: USB disconnect, device number 60 [ 2038.197021][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.205044][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.899022][T18661] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2038.978006][T23413] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3576'. [ 2038.991139][T23336] bridge0: port 1(bridge_slave_0) entered blocking state [ 2039.008808][T23336] bridge0: port 1(bridge_slave_0) entered disabled state [ 2039.067170][T23336] bridge_slave_0: entered allmulticast mode [ 2039.080443][T23336] bridge_slave_0: entered promiscuous mode [ 2039.113240][T23336] bridge0: port 2(bridge_slave_1) entered blocking state [ 2039.121521][T23336] bridge0: port 2(bridge_slave_1) entered disabled state [ 2039.141342][T23336] bridge_slave_1: entered allmulticast mode [ 2039.192617][T23336] bridge_slave_1: entered promiscuous mode [ 2039.355298][T18661] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2039.473384][T23336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2039.570363][T18661] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2039.626695][T23336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2039.638507][T23125] Bluetooth: hci4: command tx timeout [ 2039.733726][T18661] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2039.890608][T23336] team0: Port device team_slave_0 added [ 2039.905885][T23336] team0: Port device team_slave_1 added [ 2040.042877][T23336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2040.076520][T23336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2040.105629][T23336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2040.301170][ T46] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2040.382216][T23336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2040.389212][T23336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2040.446335][T23336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2040.528708][T23156] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2040.543486][ T46] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2040.605452][ T46] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2040.647437][ T46] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2040.691381][ T46] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2040.724816][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.770067][T23156] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2040.813217][ T46] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2040.948301][ T46] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2040.992529][T23336] hsr_slave_0: entered promiscuous mode [ 2041.036359][T23336] hsr_slave_1: entered promiscuous mode [ 2041.075659][T23336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2041.111165][T23429] udevd[23429]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2041.135467][T23336] Cannot create hsr debugfs directory [ 2041.154745][T23156] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2041.193322][T23156] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2041.275772][T18661] bridge_slave_1: left allmulticast mode [ 2041.301299][T18661] bridge_slave_1: left promiscuous mode [ 2041.314984][T18661] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.361789][T18661] bridge_slave_0: left allmulticast mode [ 2041.367450][T18661] bridge_slave_0: left promiscuous mode [ 2041.420909][T18661] bridge0: port 1(bridge_slave_0) entered disabled state [ 2041.442149][ T8] usb 3-1: USB disconnect, device number 61 [ 2041.515392][T18661] bridge_slave_1: left allmulticast mode [ 2041.530323][T18661] bridge_slave_1: left promiscuous mode [ 2041.571806][T18661] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.618286][T18661] bridge_slave_0: left allmulticast mode [ 2041.626615][T18661] bridge_slave_0: left promiscuous mode [ 2041.633881][T18661] bridge0: port 1(bridge_slave_0) entered disabled state [ 2041.712161][T23125] Bluetooth: hci4: command tx timeout [ 2042.613197][T23453] hfs: can't find a HFS filesystem on dev nullb0 [ 2043.079533][T18661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2043.093177][T18661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2043.114960][T18661] bond0 (unregistering): Released all slaves [ 2043.465678][T18661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2043.478801][T18661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2043.492964][T18661] bond0 (unregistering): Released all slaves [ 2043.662960][ T8] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2043.870822][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 2043.898054][ T8] usb 4-1: config 6 has an invalid interface number: 152 but max is 3 [ 2043.916928][ T8] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 2043.958654][ T8] usb 4-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 2043.982840][ T8] usb 4-1: config 6 has no interface number 0 [ 2044.011484][ T8] usb 4-1: config 6 interface 152 altsetting 253 endpoint 0xB has invalid wMaxPacketSize 0 [ 2044.032332][ T8] usb 4-1: config 6 interface 152 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2044.083119][ T8] usb 4-1: config 6 interface 152 has no altsetting 0 [ 2044.099507][ T8] usb 4-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 2044.132220][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.148604][ T8] usb 4-1: Product: syz [ 2044.157052][ T8] usb 4-1: Manufacturer: syz [ 2044.167592][ T8] usb 4-1: SerialNumber: syz [ 2051.842554][ T8] ushc 4-1:6.152: probe with driver ushc failed with error -32 [ 2052.827455][T23156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2054.122816][T23156] 8021q: adding VLAN 0 to HW filter on device team0 [ 2055.504263][T21034] bridge0: port 1(bridge_slave_0) entered blocking state [ 2055.511559][T21034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2056.037019][T13604] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2056.066645][T13604] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2056.088825][T13604] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2056.097578][T13604] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2056.108352][T13604] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2056.116300][T13604] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2057.671063][ T5307] usb 4-1: USB disconnect, device number 66 [ 2060.106432][T23125] Bluetooth: hci6: command tx timeout [ 2060.107455][ T5237] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2061.372181][ T5237] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2061.392792][ T5237] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2061.403096][ T5237] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2061.411523][ T5237] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2061.419084][ T5237] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2062.121170][T13604] Bluetooth: hci6: command tx timeout [ 2063.324587][T21034] bridge0: port 2(bridge_slave_1) entered blocking state [ 2063.331834][T21034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2063.965093][T13604] Bluetooth: hci7: command tx timeout [ 2064.805637][T13604] Bluetooth: hci6: command tx timeout [ 2066.053280][T13604] Bluetooth: hci7: command tx timeout [ 2066.841234][T13604] Bluetooth: hci6: command tx timeout [ 2069.571571][T13604] Bluetooth: hci7: command tx timeout [ 2069.585290][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2069.705721][T23490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2069.708556][T23490] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2069.709707][T23490] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2069.712385][T23490] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2069.713369][T23490] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2069.713861][T23490] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2071.403143][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2071.414651][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2072.877657][ T5237] Bluetooth: hci2: command tx timeout [ 2072.884513][ T5237] Bluetooth: hci7: command tx timeout [ 2072.890568][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2072.910767][T23490] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2072.919266][T23490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2075.102154][T23490] Bluetooth: hci2: command tx timeout [ 2075.107723][T23490] Bluetooth: hci1: command tx timeout [ 2077.151371][T13604] Bluetooth: hci1: command tx timeout [ 2077.156840][T13604] Bluetooth: hci2: command tx timeout [ 2077.417418][T23489] chnl_net:caif_netlink_parms(): no params data found [ 2077.737977][T23483] chnl_net:caif_netlink_parms(): no params data found [ 2079.230985][T13604] Bluetooth: hci2: command tx timeout [ 2079.236460][T13604] Bluetooth: hci1: command tx timeout [ 2081.638667][T13604] Bluetooth: hci1: command tx timeout [ 2084.232149][T18661] hsr_slave_0: left promiscuous mode [ 2084.238630][T18661] hsr_slave_1: left promiscuous mode [ 2084.245189][T18661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2084.252675][T18661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2084.261030][T18661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2084.268503][T18661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2084.282180][T18661] hsr_slave_0: left promiscuous mode [ 2084.288647][T18661] hsr_slave_1: left promiscuous mode [ 2084.295019][T18661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2085.558442][T18661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2085.567038][T18661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2085.574499][T18661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2085.632184][T18661] veth1_macvtap: left promiscuous mode [ 2087.297340][T18661] veth0_macvtap: left promiscuous mode [ 2087.303162][T18661] veth1_vlan: left promiscuous mode [ 2087.308556][T18661] veth0_vlan: left promiscuous mode [ 2089.128244][T18661] veth1_macvtap: left promiscuous mode [ 2089.133819][T18661] veth0_macvtap: left promiscuous mode [ 2089.139922][T18661] veth1_vlan: left promiscuous mode [ 2089.145317][T18661] veth0_vlan: left promiscuous mode [ 2095.914112][T23490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2095.926862][T23490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2095.946817][T23490] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2096.637593][T23490] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2096.647972][T23490] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2096.661155][T23490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2097.349613][T18661] team0 (unregistering): Port device team_slave_1 removed [ 2097.405057][T18661] team0 (unregistering): Port device team_slave_0 removed [ 2098.761011][T23490] Bluetooth: hci3: command tx timeout [ 2099.644954][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 2100.132066][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.880885][T23490] Bluetooth: hci3: command tx timeout [ 2102.912307][T23490] Bluetooth: hci3: command tx timeout [ 2102.919911][T18661] team0 (unregistering): Port device team_slave_1 removed [ 2103.224880][T18661] team0 (unregistering): Port device team_slave_0 removed [ 2105.200507][T23490] Bluetooth: hci3: command tx timeout [ 2108.729134][T23483] bridge0: port 1(bridge_slave_0) entered blocking state [ 2108.736413][T23483] bridge0: port 1(bridge_slave_0) entered disabled state [ 2108.743684][T23483] bridge_slave_0: entered allmulticast mode [ 2108.751539][T23483] bridge_slave_0: entered promiscuous mode [ 2108.761393][T23483] bridge0: port 2(bridge_slave_1) entered blocking state [ 2108.768618][T23483] bridge0: port 2(bridge_slave_1) entered disabled state [ 2108.775882][T23483] bridge_slave_1: entered allmulticast mode [ 2108.783795][T23483] bridge_slave_1: entered promiscuous mode [ 2108.792850][T23489] bridge0: port 1(bridge_slave_0) entered blocking state [ 2108.800042][T23489] bridge0: port 1(bridge_slave_0) entered disabled state [ 2108.808008][T23489] bridge_slave_0: entered allmulticast mode [ 2108.815942][T23489] bridge_slave_0: entered promiscuous mode [ 2108.834291][T23489] bridge0: port 2(bridge_slave_1) entered blocking state [ 2108.841521][T23489] bridge0: port 2(bridge_slave_1) entered disabled state [ 2108.848787][T23489] bridge_slave_1: entered allmulticast mode [ 2108.856733][T23489] bridge_slave_1: entered promiscuous mode [ 2109.793359][T23480] chnl_net:caif_netlink_parms(): no params data found [ 2113.351914][T23489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2113.365419][T23489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2116.469267][T23483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2116.496832][T23489] team0: Port device team_slave_0 added [ 2117.498007][T23489] team0: Port device team_slave_1 added [ 2117.537392][T23487] chnl_net:caif_netlink_parms(): no params data found [ 2120.602080][T13604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2120.630891][T13604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2120.660688][T13604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2120.710626][T13604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2120.721461][T13604] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2120.729134][T13604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2121.353882][T13604] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2121.366359][T13604] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2121.377197][T13604] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2121.386267][T13604] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2121.395931][T13604] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2121.405096][T13604] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2122.850762][T13604] Bluetooth: hci5: command tx timeout [ 2122.898319][T23483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2125.021054][T23490] Bluetooth: hci8: command tx timeout [ 2125.028038][T23490] Bluetooth: hci5: command tx timeout [ 2127.102584][T23490] Bluetooth: hci5: command tx timeout [ 2129.122737][T23490] Bluetooth: hci8: command tx timeout [ 2131.379668][T23490] Bluetooth: hci5: command tx timeout [ 2131.385206][T23490] Bluetooth: hci8: command tx timeout [ 2131.456346][T13604] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2131.468724][T13604] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2133.947745][T13604] Bluetooth: hci8: command tx timeout [ 2133.953349][T13604] Bluetooth: hci6: command 0x1001 tx timeout [ 2133.961276][T13604] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2133.968385][T23490] Bluetooth: hci6: Opcode 0x1001 failed: -110 [ 2133.978088][T23487] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 2134.013692][T23490] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2134.030603][T23490] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2134.038714][T23490] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2134.047502][T23490] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2134.057450][T23490] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2134.065563][T23490] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2134.262160][T23125] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2134.274083][T23125] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2134.283259][T23125] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2134.293868][T23125] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2134.303322][T23125] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2134.315971][T23125] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2137.300577][T23125] Bluetooth: hci6: command tx timeout [ 2137.306799][T23125] Bluetooth: hci7: command tx timeout [ 2141.140574][T23490] Bluetooth: hci7: command tx timeout [ 2141.146067][T23490] Bluetooth: hci6: command tx timeout [ 2143.219677][T23125] Bluetooth: hci6: command tx timeout [ 2143.225173][T23125] Bluetooth: hci7: command tx timeout [ 2145.550022][T23490] Bluetooth: hci7: command tx timeout [ 2145.555521][T23490] Bluetooth: hci6: command tx timeout [ 2153.854593][T23547] chnl_net:caif_netlink_parms(): no params data found [ 2154.860458][T23490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2154.872796][T23490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2154.891183][T23490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2154.901541][T23490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2154.911243][T23490] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2154.918936][T23490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2157.001294][T23490] Bluetooth: hci1: command tx timeout [ 2157.047529][T23563] chnl_net:caif_netlink_parms(): no params data found [ 2157.096629][T23574] chnl_net:caif_netlink_parms(): no params data found [ 2158.053840][T23490] Bluetooth: hci4: command 0x0406 tx timeout [ 2159.091214][T23490] Bluetooth: hci1: command tx timeout [ 2163.041232][T23125] Bluetooth: hci1: command tx timeout [ 2163.048799][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 2163.055161][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 2166.308240][T23490] Bluetooth: hci1: command tx timeout [ 2185.939360][T23490] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2185.993070][T13604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2186.002294][T23563] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 2186.325300][T23490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2186.351996][T23490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2186.363281][T23490] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2186.372211][T23490] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2186.383039][T23490] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2186.391444][T23490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2190.697034][T23629] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2190.730608][T23490] Bluetooth: hci3: command tx timeout [ 2195.545901][T23490] Bluetooth: hci3: command tx timeout [ 2200.183688][T23490] Bluetooth: hci3: command tx timeout [ 2204.857454][T13604] Bluetooth: hci3: command tx timeout [ 2210.182476][T23490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2210.244599][T23125] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2210.255598][T23125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2210.265352][T23125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2210.275608][T23125] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2210.283996][T23125] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2210.293138][T23125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2210.328658][T23125] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2210.344117][T23125] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2210.355365][T23125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2210.381717][T23125] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2210.389323][T23125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2223.578611][ T5237] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 2223.591162][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 2223.597527][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.729080][ T5237] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2227.792048][ T5237] Bluetooth: hci4: command tx timeout [ 2227.798758][T23647] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 2231.931717][T23125] Bluetooth: hci4: command tx timeout [ 2231.937255][T23125] Bluetooth: hci2: command tx timeout [ 2235.678311][T13604] Bluetooth: hci2: command tx timeout [ 2235.683868][T13604] Bluetooth: hci4: command tx timeout [ 2239.518917][T13604] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 2239.556702][T13604] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2243.658326][T23654] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 2244.434320][ T5237] Bluetooth: hci4: command tx timeout [ 2244.440826][ T5237] Bluetooth: hci2: command tx timeout [ 2248.700504][T13604] Bluetooth: hci2: command tx timeout [ 2253.778163][ T5237] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2262.820895][T23658] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2262.861523][T13604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2267.371709][T23490] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2267.383459][T23490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2267.417287][T23490] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2267.425740][T23490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2267.435771][T23490] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2267.443762][T23490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2267.473790][T23490] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2267.481539][T23490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2267.513618][T23490] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2267.520882][T23490] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2267.528779][T23490] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2267.536186][T23490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2284.141150][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 2284.147530][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.168757][T23490] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2284.193434][T23490] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2284.219988][T23676] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2284.252855][T23490] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2284.264085][T23490] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2284.277603][T23679] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2284.287663][T23490] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2284.296480][T23490] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2284.304445][T23490] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2284.315331][T23125] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2284.324581][T23490] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2284.355140][T23125] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2284.367761][T23125] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 2284.377471][T23125] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2284.385201][T23125] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2284.397203][T23676] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2284.440800][T23680] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2284.490577][T23680] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2296.934507][T23107] Bluetooth: hci1: command tx timeout [ 2301.320867][T23125] Bluetooth: hci9: command tx timeout [ 2301.327884][T23125] Bluetooth: hci10: command tx timeout [ 2301.335045][T23125] Bluetooth: hci5: command tx timeout [ 2301.341883][T23125] Bluetooth: hci8: command tx timeout [ 2301.348401][T23125] Bluetooth: hci1: command tx timeout [ 2305.586236][ T5237] Bluetooth: hci1: command tx timeout [ 2305.591818][ T5237] Bluetooth: hci8: command tx timeout [ 2305.597484][ T5237] Bluetooth: hci5: command tx timeout [ 2305.602927][ T5237] Bluetooth: hci10: command tx timeout [ 2305.608439][ T5237] Bluetooth: hci9: command tx timeout [ 2309.913401][ T5237] Bluetooth: hci9: command tx timeout [ 2309.918862][ T5237] Bluetooth: hci10: command tx timeout [ 2309.924361][ T5237] Bluetooth: hci5: command tx timeout [ 2309.929772][ T5237] Bluetooth: hci8: command tx timeout [ 2309.935184][ T5237] Bluetooth: hci1: command tx timeout [ 2314.163736][T23676] Bluetooth: hci8: command tx timeout [ 2314.169197][T23676] Bluetooth: hci5: command tx timeout [ 2314.175961][T23676] Bluetooth: hci9: command tx timeout [ 2314.181680][ T5237] Bluetooth: hci10: command tx timeout [ 2321.968702][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2321.980043][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2321.989738][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2322.004775][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2322.012930][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2322.020903][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2324.050827][T23125] Bluetooth: hci3: command tx timeout [ 2327.933432][T23125] Bluetooth: hci3: command tx timeout [ 2330.234439][ T5237] Bluetooth: hci3: command tx timeout [ 2332.632464][T23125] Bluetooth: hci3: command tx timeout [ 2342.740784][ T5237] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2342.744109][T23676] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2342.748002][T23125] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2342.789505][T23676] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2342.820937][T23676] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2342.829706][T23676] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2345.800822][T23676] Bluetooth: hci4: command 0x1001 tx timeout [ 2345.808789][T23676] Bluetooth: hci2: command 0x1003 tx timeout [ 2345.811385][T23125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2345.816317][T23676] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2345.822906][T23697] Bluetooth: hci4: Opcode 0x1001 failed: -110 [ 2345.836387][T23694] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 2345.844106][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.850448][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 2356.338886][T13604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2359.910916][T23676] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2359.950636][T23125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2363.583618][T23700] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2368.421769][T23676] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2368.770955][T23676] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2368.785096][T23676] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2368.794903][T23676] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2368.803414][T23676] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2368.812550][T23676] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2372.477335][ T5237] Bluetooth: hci1: command tx timeout [ 2372.513854][T13604] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2372.519770][T23676] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2372.574735][T23125] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2377.062283][T13604] Bluetooth: hci1: command tx timeout [ 2377.068847][T13604] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2377.110248][T23490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2381.771804][T23490] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2381.779774][T23490] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2381.787675][T23490] Bluetooth: hci1: command tx timeout [ 2381.795087][T23490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2381.917380][T23490] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2381.927887][T23490] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2386.747795][T23125] Bluetooth: hci1: command tx timeout [ 2386.857733][T23125] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2386.866854][T23125] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2386.877654][T23125] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2386.884881][T23125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2386.893298][T23125] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2386.910575][T23125] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2386.918014][T23125] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2391.843832][T23714] Bluetooth: hci2: Opcode 0x0c38 failed: -110 [ 2391.847283][T23490] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2392.042967][T23125] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2392.106250][T23125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2397.330517][T23490] Bluetooth: hci6: command tx timeout [ 2402.201973][T23125] Bluetooth: hci6: command tx timeout [ 2402.461828][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2402.474140][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2402.483014][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2402.493904][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2402.502010][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2402.510827][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2407.253050][ T5237] Bluetooth: hci6: command tx timeout [ 2407.258613][ T5237] Bluetooth: hci4: command tx timeout [ 2407.265549][ T5237] Bluetooth: hci2: command tx timeout [ 2407.276235][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 2407.282589][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 2412.380364][T23490] Bluetooth: hci2: command tx timeout [ 2412.385835][T23490] Bluetooth: hci4: command tx timeout [ 2412.391274][T23490] Bluetooth: hci6: command tx timeout [ 2417.679759][ T5237] Bluetooth: hci4: command tx timeout [ 2417.685413][ T5237] Bluetooth: hci2: command tx timeout [ 2422.962200][T13604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2428.122319][T23107] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 2428.129050][T23680] Bluetooth: hci2: command tx timeout [ 2428.139623][T13604] Bluetooth: hci4: command tx timeout [ 2428.145907][T23680] Bluetooth: hci5: command 0x0406 tx timeout [ 2428.152839][T13604] Bluetooth: hci8: command 0x0406 tx timeout [ 2428.159401][T13604] Bluetooth: hci10: command 0x0406 tx timeout [ 2428.165913][T23680] Bluetooth: hci9: command tx timeout [ 2428.188417][T23107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2434.019173][T23679] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2434.028885][T23679] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2434.037372][T23679] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2434.599417][T13604] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2434.969934][ T5237] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2434.972914][ T5237] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2440.800577][ T5237] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2440.882666][T23679] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2440.895767][T23679] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2440.909287][T23679] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2440.919302][T23679] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2440.930888][T23679] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 2440.938631][T23679] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2447.720621][T23490] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2454.237323][T23679] Bluetooth: hci3: command 0x0c25 tx timeout [ 2454.244875][T23679] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2454.301993][T23732] Bluetooth: hci3: Opcode 0x0c25 failed: -110 [ 2460.873089][T23107] Bluetooth: hci7: Opcode 0x0c38 failed: -110 [ 2460.879357][T23679] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2460.953645][ T5237] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2474.280271][T23736] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 2474.433021][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 2474.439382][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 2474.750163][T23679] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2474.797144][T23679] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2480.892235][ T5237] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2481.019554][ T5237] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 2481.029363][ T5237] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2486.823130][ T5237] Bluetooth: hci11: command tx timeout [ 2486.830142][ T5237] Bluetooth: hci12: command tx timeout [ 2492.508688][T23676] Bluetooth: hci12: command tx timeout [ 2492.514353][T23676] Bluetooth: hci11: command tx timeout [ 2498.127447][T23676] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2498.131797][ T5237] Bluetooth: hci11: command tx timeout [ 2498.135398][T23676] Bluetooth: hci12: command tx timeout [ 2498.224992][T23125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2504.345101][T23125] Bluetooth: hci12: command tx timeout [ 2504.350683][T23125] Bluetooth: hci1: command 0x0406 tx timeout [ 2504.356802][T23125] Bluetooth: hci11: command tx timeout [ 2504.363242][T23125] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2511.332557][T23125] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2511.340628][T23125] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2511.351912][T23679] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2511.354155][T23676] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 2511.381880][T23676] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2511.502167][T23125] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2518.370507][T23125] Bluetooth: hci7: command 0x1009 tx timeout [ 2518.378250][T23125] Bluetooth: hci3: command 0x1005 tx timeout [ 2518.384768][T13604] Bluetooth: hci7: Opcode 0x1009 failed: -110 [ 2518.391405][T23490] Bluetooth: hci3: Opcode 0x1005 failed: -110 [ 2524.960373][T23756] Bluetooth: hci13: Opcode 0x1003 failed: -110 [ 2525.190480][T23754] Bluetooth: hci7: Opcode 0x0c03 failed: -4 [ 2525.395192][T23676] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2531.661913][T23750] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 2531.671972][T23679] Bluetooth: hci6: command 0x0406 tx timeout [ 2531.678038][T23679] Bluetooth: hci4: command 0x0406 tx timeout [ 2531.686536][T23679] Bluetooth: hci2: command 0x0406 tx timeout [ 2531.701452][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 2531.707804][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 2532.021905][T23107] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2532.039036][T23680] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2532.051553][T23107] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2532.062561][T23680] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2532.074897][T23107] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2532.085355][T23680] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2532.098680][T23107] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2532.106244][T23680] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2532.117078][T23680] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2532.124663][T23107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2532.132367][T23680] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2532.140888][T23680] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2560.424812][T23125] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 2560.551554][T23676] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2566.748820][T13604] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2566.783738][ T5237] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2566.794035][ T5237] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2566.819348][ T5237] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2566.827690][T13604] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2566.839270][T13604] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2566.848987][ T5237] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2566.859492][ T5237] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 2566.867494][ T5237] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2566.874797][ T5237] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2566.885740][ T5237] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 2566.916772][T23125] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 2579.676404][T23490] Bluetooth: hci7: command tx timeout [ 2586.405094][T23679] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 2586.454639][ T5237] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 2586.465936][ T5237] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 2586.477341][ T5237] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 2586.486897][ T5237] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 2586.494979][ T5237] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 2593.260707][T23490] Bluetooth: hci7: command tx timeout [ 2593.302593][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 2593.308943][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 2599.864576][T23490] Bluetooth: hci7: command tx timeout [ 2606.587376][T23125] Bluetooth: hci7: command tx timeout [ 2606.593854][T23125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2613.257646][T23679] Bluetooth: hci2: command 0x1003 tx timeout [ 2613.265060][T23679] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2619.896276][ T5237] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 2619.952514][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2620.121657][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2620.282036][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2620.940413][T23107] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2620.992490][ T5237] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2626.879070][T23782] Bluetooth: hci2: Opcode 0x0c25 failed: -110 [ 2626.910078][ T5237] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 2626.918483][T23107] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2626.937998][T23679] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2626.948216][T23679] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2626.957924][T23679] Bluetooth: hci3: command tx timeout [ 2633.063077][T23125] Bluetooth: hci3: command tx timeout [ 2639.150657][T23680] Bluetooth: hci3: command tx timeout [ 2639.230326][T23786] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 2639.237404][T23792] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 2645.076611][ T5237] Bluetooth: hci3: command tx timeout [ 2655.855136][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 2655.861679][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 2655.955959][T23490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2656.121482][T23125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2656.230414][T23490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2656.360556][T23125] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2656.498537][T23676] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2656.505913][T23676] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2656.516667][T23125] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2656.547787][T23125] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2656.568027][T23125] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2656.578349][T23125] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2656.590081][T23125] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2656.599401][T23125] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2656.607157][T23125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2656.619442][T23125] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2656.630114][T23125] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2656.637827][T23125] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2656.645050][T23125] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2656.655319][T23125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2656.662708][T23125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2661.942832][T23125] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2661.954503][T23125] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2661.956725][T23676] Bluetooth: hci11: Opcode 0x0c23 failed: -110 [ 2661.968015][T23125] Bluetooth: hci13: command tx timeout [ 2661.968782][T23676] Bluetooth: hci15: command tx timeout [ 2661.975405][T23125] Bluetooth: hci14: command tx timeout [ 2662.110421][T23107] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2662.162886][ T5237] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2662.210562][ T5237] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2662.489134][ T5237] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2662.582803][T23107] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2662.659460][ T5237] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2662.666819][ T5237] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2662.676989][ T5237] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2662.685082][ T5237] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 2662.694131][ T5237] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2662.704620][ T5237] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2662.750594][T23107] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 2662.758875][ T5237] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2668.505531][ T5237] Bluetooth: hci14: command tx timeout [ 2668.511318][ T5237] Bluetooth: hci4: command tx timeout [ 2668.518357][ T5237] Bluetooth: hci2: command tx timeout [ 2668.525149][ T5237] Bluetooth: hci6: command tx timeout [ 2668.532614][ T5237] Bluetooth: hci11: command tx timeout [ 2668.539318][ T5237] Bluetooth: hci12: command tx timeout [ 2668.546437][ T5237] Bluetooth: hci15: command tx timeout [ 2668.552399][ T5237] Bluetooth: hci13: command tx timeout [ 2675.053963][T23490] Bluetooth: hci13: command tx timeout [ 2675.059637][T23490] Bluetooth: hci15: command tx timeout [ 2675.065167][T23490] Bluetooth: hci12: command tx timeout [ 2675.070684][T23490] Bluetooth: hci11: command tx timeout [ 2675.076197][T23490] Bluetooth: hci6: command tx timeout [ 2675.081793][T23490] Bluetooth: hci2: command tx timeout [ 2675.087215][T23490] Bluetooth: hci4: command tx timeout [ 2675.092641][T23490] Bluetooth: hci14: command tx timeout [ 2681.190125][ T5237] Bluetooth: hci14: command tx timeout [ 2681.195698][ T5237] Bluetooth: hci4: command tx timeout [ 2681.201129][ T5237] Bluetooth: hci2: command tx timeout [ 2681.206553][ T5237] Bluetooth: hci6: command tx timeout [ 2681.211975][ T5237] Bluetooth: hci11: command tx timeout [ 2681.217488][ T5237] Bluetooth: hci12: command tx timeout [ 2681.223089][ T5237] Bluetooth: hci15: command tx timeout [ 2681.228611][ T5237] Bluetooth: hci13: command tx timeout [ 2687.018277][T23490] Bluetooth: hci12: command tx timeout [ 2687.023916][T23490] Bluetooth: hci11: command tx timeout [ 2687.029431][T23490] Bluetooth: hci6: command tx timeout [ 2687.034866][T23490] Bluetooth: hci2: command tx timeout [ 2687.040299][T23490] Bluetooth: hci4: command tx timeout [ 2715.356413][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2715.368916][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2715.379033][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2715.414032][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 2715.430574][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 2722.000427][T23490] Bluetooth: hci3: Opcode 0x1005 failed: -110 [ 2722.170365][T23490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2728.853130][T23816] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 2741.514534][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2741.555008][T23490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2741.564421][T23490] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2753.360426][T23107] Bluetooth: hci3: Opcode 0x1005 failed: -110 [ 2753.368128][T23490] Bluetooth: hci3: command 0x1005 tx timeout [ 2753.727813][T23490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2753.739254][T23490] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2753.759446][T13604] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 2753.777842][T23490] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2753.786714][T23490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2753.796984][T13604] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 2753.809083][T23490] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2753.816345][T23490] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2753.824392][T13604] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 2753.836905][T23490] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2753.844238][T23490] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2753.852335][T13604] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 2753.867778][T23490] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2753.875826][T23490] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2753.884310][T13604] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 2753.892430][T23490] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2753.901099][T23490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2753.909153][T13604] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 2777.058739][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 2777.065170][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 2778.131301][T23125] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2778.164998][ T5237] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2778.195525][T23107] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2778.207383][T23125] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2778.216972][T23107] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2778.226977][T23125] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2778.238557][T23107] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2778.247661][T23125] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2778.258568][T23125] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 2778.266293][T23107] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 2778.274362][T23125] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 2778.283576][T23107] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2783.412647][T23107] Bluetooth: hci16: command tx timeout [ 2783.419584][T23107] Bluetooth: hci7: command tx timeout [ 2783.426301][T23107] Bluetooth: hci3: command tx timeout [ 2790.042453][T23125] Bluetooth: hci3: command tx timeout [ 2790.048073][T23125] Bluetooth: hci7: command tx timeout [ 2790.053880][T23125] Bluetooth: hci16: command tx timeout [ 2796.612383][T23125] Bluetooth: hci16: command tx timeout [ 2796.617944][T23125] Bluetooth: hci7: command tx timeout [ 2796.623446][T23125] Bluetooth: hci3: command tx timeout [ 2803.234074][ T5237] Bluetooth: hci3: command tx timeout [ 2803.239552][ T5237] Bluetooth: hci7: command tx timeout [ 2803.245204][ T5237] Bluetooth: hci16: command tx timeout [ 2821.584761][T23125] Bluetooth: hci15: Opcode 0x0c03 failed: -110 [ 2821.619166][ T5237] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 2827.680786][ T30] INFO: task kworker/0:2:942 blocked for more than 146 seconds. [ 2827.688482][ T30] Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 2827.710191][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2827.718886][ T30] task:kworker/0:2 state:D stack:22896 pid:942 tgid:942 ppid:2 flags:0x00004000 [ 2827.750195][ T30] Workqueue: events drain_vmap_area_work [ 2827.755889][ T30] Call Trace: [ 2827.759183][ T30] [ 2827.780276][ T30] __schedule+0xe37/0x5490 [ 2827.784853][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2827.790098][ T30] ? hlock_class+0x4e/0x130 [ 2827.810201][ T30] ? __pfx___schedule+0x10/0x10 [ 2827.815111][ T30] ? schedule+0x298/0x350 [ 2827.819474][ T30] ? __pfx_lock_release+0x10/0x10 [ 2827.860200][ T30] ? mark_lock+0xb5/0xc60 [ 2827.864600][ T30] ? __pfx_mark_lock+0x10/0x10 [ 2827.869387][ T30] schedule+0xe7/0x350 [ 2827.910560][ T30] schedule_timeout+0x258/0x2a0 [ 2827.915485][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 2827.940216][ T30] ? mark_held_locks+0x9f/0xe0 [ 2827.945050][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2827.964549][ T30] __wait_for_common+0x3de/0x5f0 [ 2827.969560][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 2827.974998][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 2827.981124][ T30] ? mark_held_locks+0x9f/0xe0 [ 2827.985936][ T30] __flush_work+0x5bd/0xc60 [ 2827.990549][ T30] ? __pfx___flush_work+0x10/0x10 [ 2827.995610][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 2828.010207][ T30] ? __pfx___might_resched+0x10/0x10 [ 2828.016389][ T30] ? queue_work_on+0xc6/0x140 [ 2828.040261][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 2828.045554][ T30] __purge_vmap_area_lazy+0x84d/0xc10 [ 2828.069918][ T30] drain_vmap_area_work+0x27/0x40 [ 2828.075062][ T30] process_one_work+0x9c5/0x1b40 [ 2828.080032][ T30] ? __pfx_drain_vmap_area_work+0x10/0x10 [ 2828.100205][ T30] ? __pfx_process_one_work+0x10/0x10 [ 2828.105742][ T30] ? assign_work+0x1a0/0x250 [ 2828.120213][ T30] worker_thread+0x6c8/0xf20 [ 2828.124866][ T30] ? __pfx_worker_thread+0x10/0x10 [ 2828.130004][ T30] kthread+0x2c1/0x3a0 [ 2828.150196][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2828.155449][ T30] ? __pfx_kthread+0x10/0x10 [ 2828.160147][ T30] ret_from_fork+0x45/0x80 [ 2828.166090][ T30] ? __pfx_kthread+0x10/0x10 [ 2828.170751][ T30] ret_from_fork_asm+0x1a/0x30 [ 2828.175550][ T30] [ 2828.178686][ T30] [ 2828.178686][ T30] Showing all locks held in the system: [ 2828.212949][ T30] 1 lock held by khungtaskd/30: [ 2828.218715][ T30] #0: ffffffff8ddb5220 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 2828.246776][ T30] 2 locks held by kworker/1:1/46: [ 2828.251898][ T30] 3 locks held by kworker/0:2/942: [ 2828.257041][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 2828.267617][ T30] #1: ffffc90003d5fd80 (drain_vmap_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 2828.277538][ T30] #2: ffffffff8df31168 (vmap_purge_lock){+.+.}-{3:3}, at: drain_vmap_area_work+0x17/0x40 [ 2828.288179][ T30] 2 locks held by dhcpcd/4883: [ 2828.292992][ T30] #0: ffffffff8f9f3ac8 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x4a8/0x6c0 [ 2828.302387][ T30] #1: ffffffff8fa1dce8 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0xcf/0xa80 [ 2828.321469][ T30] 2 locks held by getty/4979: [ 2828.326184][ T30] #0: ffff88802b3cb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2828.360354][ T5237] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 2828.380597][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 2828.410207][ T30] 4 locks held by kworker/u9:0/13604: [ 2828.415617][ T30] #0: ffff88805aba9148 ((wq_completion)hci14#4){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 2828.456625][ T30] #1: ffffc90003477d80 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 2828.480828][ T30] #2: ffff88805b26c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x99/0x9e0 [ 2828.500214][ T30] #3: ffffffff8fc82468 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4dc/0x9e0 [ 2828.520218][ T30] 4 locks held by kworker/u8:6/18661: [ 2828.526526][ T30] #0: ffff8880166e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 2828.560269][ T30] #1: ffffc90003557d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 2828.590212][ T30] #2: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 [ 2828.599627][ T30] #3: ffffffff8fa1dce8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1b/0x230 [ 2828.631945][T23107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2828.670223][ T30] 5 locks held by kworker/u8:8/18662: [ 2828.675647][ T30] 3 locks held by kworker/u8:12/18665: [ 2828.700215][ T30] 3 locks held by kworker/0:1/21034: [ 2828.705548][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 2828.741405][ T30] #1: ffffc90003317d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 2828.760200][ T30] #2: ffffffff8fa1dce8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 2828.769343][ T30] 3 locks held by kworker/u9:2/23125: [ 2828.790222][ T30] 2 locks held by kworker/0:3/23457: [ 2828.795556][ T30] 4 locks held by kworker/u9:3/23490: [ 2828.822326][ T30] #0: ffff888062282948 ((wq_completion)hci13#5){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 2828.860203][ T30] #1: ffffc90003797d80 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 2828.871874][ T5237] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 2828.900204][ T30] #2: ffff8880246f8078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x99/0x9e0 [ 2828.931619][ T30] #3: ffffffff8fc82468 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4dc/0x9e0 [ 2828.950656][ T30] 2 locks held by syz-executor/23664: [ 2828.956065][ T30] #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 2829.000212][ T30] #1: ffffffff8fa1dce8 (rtnl_mutex){+.+.}-{3:3}, at: gate_exit_net+0x24/0x130 [ 2829.009277][ T30] 2 locks held by syz-executor/23671: [ 2829.040206][ T30] #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 2829.049716][ T30] #1: ffffffff8fa1dce8 (rtnl_mutex){+.+.}-{3:3}, at: mpls_net_exit+0x83/0x350 [ 2829.072490][ T30] 2 locks held by syz-executor/23674: [ 2829.077903][ T30] #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 2829.103438][ T30] #1: ffffffff8fa1dce8 (rtnl_mutex){+.+.}-{3:3}, at: cangw_pernet_exit_batch+0x15/0xa0 [ 2829.119578][ T30] 2 locks held by syz-executor/23677: [ 2829.125012][ T30] #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 2829.135187][ T30] #1: ffffffff8fa1dce8 (rtnl_mutex){+.+.}-{3:3}, at: cangw_pernet_exit_batch+0x15/0xa0 [ 2829.145496][ T30] 2 locks held by syz-executor/23710: [ 2829.151317][ T30] #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 2829.160820][ T30] #1: ffffffff8fa1dce8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0x8c/0xae0 [ 2829.170918][ T30] 3 locks held by syz-executor/23800: [ 2829.176306][ T30] #0: ffff88804d290d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 2829.186916][ T30] #1: ffff88804d290078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 2829.196676][ T30] #2: ffffffff8fc82468 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 2829.206770][ T30] 3 locks held by syz-executor/23803: [ 2829.212203][ T30] #0: ffff88807de0cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 2829.221857][ T30] #1: ffff88807de0c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 2829.231834][ T30] #2: ffffffff8fc82468 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 2829.242398][ T30] 4 locks held by syz-executor/23805: [ 2829.247785][ T30] #0: ffff88805e9f8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 2829.257981][ T30] #1: ffff88805e9f8078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 2829.267785][ T30] #2: ffffffff8fc82468 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 2829.277911][ T30] #3: ffffffff8ddc09b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 2829.288112][ T30] 3 locks held by syz-executor/23808: [ 2829.293621][ T30] #0: ffff888023d5cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 2829.303280][ T30] #1: ffff888023d5c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 2829.313021][ T30] #2: ffffffff8fc82468 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 2829.323115][ T30] 1 lock held by syz-executor/23825: [ 2829.328497][ T30] #0: ffffffff8fa1dce8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2829.338614][ T30] 1 lock held by syz-executor/23829: [ 2829.344406][ T30] #0: ffffffff8fa1dce8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2829.354278][ T30] 1 lock held by syz-executor/23831: [ 2829.359576][ T30] #0: ffffffff8fa1dce8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2829.369065][ T30] 1 lock held by syz-executor/23838: [ 2829.374388][ T30] #0: ffffffff8fa1dce8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2829.384023][ T30] 1 lock held by syz-executor/23839: [ 2829.389321][ T30] #0: ffffffff8fa1dce8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2829.398809][ T30] 2 locks held by syz-executor/23846: [ 2829.404221][ T30] 1 lock held by syz-executor/23847: [ 2829.409514][ T30] #0: ffff8880240d0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_open+0x22/0x90 [ 2829.419087][ T30] [ 2829.421449][ T30] ============================================= [ 2829.421449][ T30] [ 2829.429880][ T30] NMI backtrace for cpu 0 [ 2829.434219][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 2829.444388][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2829.454561][ T30] Call Trace: [ 2829.457861][ T30] [ 2829.460806][ T30] dump_stack_lvl+0x116/0x1f0 [ 2829.465511][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 2829.470478][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2829.476506][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2829.482539][ T30] watchdog+0xf4e/0x1280 [ 2829.486817][ T30] ? __pfx_watchdog+0x10/0x10 [ 2829.491520][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 2829.496744][ T30] ? __kthread_parkme+0x148/0x220 [ 2829.501799][ T30] ? __pfx_watchdog+0x10/0x10 [ 2829.506500][ T30] kthread+0x2c1/0x3a0 [ 2829.510587][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2829.515814][ T30] ? __pfx_kthread+0x10/0x10 [ 2829.520421][ T30] ret_from_fork+0x45/0x80 [ 2829.524888][ T30] ? __pfx_kthread+0x10/0x10 [ 2829.529533][ T30] ret_from_fork_asm+0x1a/0x30 [ 2829.534377][ T30] [ 2829.538080][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2829.543710][ C1] NMI backtrace for cpu 1 [ 2829.543724][ C1] CPU: 1 UID: 0 PID: 23846 Comm: syz-executor Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 2829.543749][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2829.543762][ C1] RIP: 0010:__lock_acquire+0xe3a/0x3cb0 [ 2829.543793][ C1] Code: 7c 10 84 c9 74 0c 48 c7 c7 b4 c4 12 90 e8 6e 84 7f 00 44 8b 1d 5b 92 aa 0e 45 85 db 0f 84 9f 05 00 00 90 31 c0 e9 d5 f7 ff ff <48> 63 5c 24 20 be 08 00 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 c0 [ 2829.543813][ C1] RSP: 0018:ffffc90000a18ae8 EFLAGS: 00000046 [ 2829.543830][ C1] RAX: 0000000000000003 RBX: ffff88807d93a952 RCX: 1ffffffff28c4d81 [ 2829.543845][ C1] RDX: 0000000000000000 RSI: 0000000000000100 RDI: ffffffff94626c08 [ 2829.543860][ C1] RBP: 0000000000000040 R08: 0000000000000000 R09: fffffbfff28c4cd8 [ 2829.543874][ C1] R10: ffffffff946266c7 R11: 0000000000000000 R12: dffffc0000000000 [ 2829.543888][ C1] R13: ffff88807d93a930 R14: 0000000000000002 R15: ffff88807d939e00 [ 2829.543907][ C1] FS: 0000555571b98500(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 2829.543930][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2829.543945][ C1] CR2: 00007f2434eb34c9 CR3: 000000002967a000 CR4: 00000000003506f0 [ 2829.543959][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2829.543972][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2829.543986][ C1] Call Trace: [ 2829.543994][ C1] [ 2829.544002][ C1] ? show_regs+0x8c/0xa0 [ 2829.544032][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 2829.544063][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2829.544091][ C1] ? nmi_handle+0x1a9/0x5c0 [ 2829.544111][ C1] ? __lock_acquire+0xe3a/0x3cb0 [ 2829.544135][ C1] ? default_do_nmi+0x6a/0x160 [ 2829.544158][ C1] ? exc_nmi+0x170/0x1e0 [ 2829.544180][ C1] ? end_repeat_nmi+0xf/0x53 [ 2829.544207][ C1] ? __lock_acquire+0xe3a/0x3cb0 [ 2829.544230][ C1] ? __lock_acquire+0xe3a/0x3cb0 [ 2829.544254][ C1] ? __lock_acquire+0xe3a/0x3cb0 [ 2829.544277][ C1] [ 2829.544284][ C1] [ 2829.544294][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 2829.544319][ C1] ? lock_acquire+0x1b1/0x560 [ 2829.544343][ C1] lock_acquire+0x1b1/0x560 [ 2829.544367][ C1] ? debug_object_deactivate+0x13c/0x370 [ 2829.544391][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2829.544415][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 2829.544438][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 2829.544466][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2829.544496][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 2829.544524][ C1] ? debug_object_deactivate+0x13c/0x370 [ 2829.544545][ C1] debug_object_deactivate+0x13c/0x370 [ 2829.544568][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 2829.544592][ C1] ? __pfx_advance_sched+0x10/0x10 [ 2829.544616][ C1] ? timerqueue_add+0x1c2/0x330 [ 2829.544645][ C1] ? __pfx_advance_sched+0x10/0x10 [ 2829.544668][ C1] __hrtimer_run_queues+0x47d/0xcc0 [ 2829.544700][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2829.544729][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 2829.544756][ C1] hrtimer_interrupt+0x31b/0x800 [ 2829.544789][ C1] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 2829.544811][ C1] sysvec_apic_timer_interrupt+0x90/0xb0 [ 2829.544840][ C1] [ 2829.544846][ C1] [ 2829.544853][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2829.544878][ C1] RIP: 0010:vmap_small_pages_range_noflush+0x5d0/0xd30 [ 2829.544911][ C1] Code: 30 00 0f 85 c2 06 00 00 4c 8b 2b 31 ff 4d 89 ef 41 83 e7 02 4c 89 fe e8 8e 00 b2 ff 4d 85 ff 0f 84 e1 02 00 00 e8 50 05 b2 ff <41> 83 e5 08 31 ff 41 bf 01 00 00 00 4c 89 ee e8 6c 00 b2 ff 4d 85 [ 2829.544931][ C1] RSP: 0018:ffffc90002f0fb58 EFLAGS: 00000293 [ 2829.544947][ C1] RAX: 0000000000000000 RBX: ffff88813fff90e0 RCX: ffffffff81d88a52 [ 2829.544962][ C1] RDX: ffff88807d939e00 RSI: ffffffff81d88a60 RDI: 0000000000000007 [ 2829.544976][ C1] RBP: ffff8880411c2200 R08: 0000000000000007 R09: 0000000000000000 [ 2829.544990][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 8000000000000063 [ 2829.545003][ C1] R13: ffffea000000000f R14: dffffc0000000000 R15: 0000000000000002 [ 2829.545019][ C1] ? vmap_small_pages_range_noflush+0x5c2/0xd30 [ 2829.545044][ C1] ? vmap_small_pages_range_noflush+0x5d0/0xd30 [ 2829.545071][ C1] ? vmap_small_pages_range_noflush+0x5d0/0xd30 [ 2829.545100][ C1] ? __pfx_vmap_small_pages_range_noflush+0x10/0x10 [ 2829.545128][ C1] __vmap_pages_range_noflush+0x1b1/0x1d0 [ 2829.545157][ C1] __vmalloc_node_range_noprof+0x939/0x1520 [ 2829.545188][ C1] ? kcov_ioctl+0x4f/0x730 [ 2829.545216][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2829.545247][ C1] ? kcov_ioctl+0x4f/0x730 [ 2829.545273][ C1] vmalloc_user_noprof+0x6b/0x90 [ 2829.545300][ C1] ? kcov_ioctl+0x4f/0x730 [ 2829.545325][ C1] kcov_ioctl+0x4f/0x730 [ 2829.545351][ C1] ? __pfx_kcov_ioctl+0x10/0x10 [ 2829.545377][ C1] __x64_sys_ioctl+0x193/0x220 [ 2829.545406][ C1] do_syscall_64+0xcd/0x250 [ 2829.545426][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2829.545450][ C1] RIP: 0033:0x7fba8dd76e9b [ 2829.545467][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 2829.545487][ C1] RSP: 002b:00007ffcfe73e5a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2829.545506][ C1] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007fba8dd76e9b [ 2829.545521][ C1] RDX: 0000000000040000 RSI: ffffffff80086301 RDI: 00000000000000e0 [ 2829.545535][ C1] RBP: 00007fba8df066d8 R08: 00000000000000da R09: 0000000000000000 [ 2829.545549][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2829.545562][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 2829.545578][ C1] [ 2829.545712][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2830.109064][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 2830.119234][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2830.129300][ T30] Call Trace: [ 2830.132594][ T30] [ 2830.135541][ T30] dump_stack_lvl+0x3d/0x1f0 [ 2830.140163][ T30] panic+0x6f5/0x7a0 [ 2830.144080][ T30] ? __pfx_panic+0x10/0x10 [ 2830.148520][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2830.153912][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2830.159920][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2830.165483][ T30] ? watchdog+0xd8a/0x1280 [ 2830.169921][ T30] ? watchdog+0xd7d/0x1280 [ 2830.174360][ T30] watchdog+0xd9b/0x1280 [ 2830.178633][ T30] ? __pfx_watchdog+0x10/0x10 [ 2830.183332][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 2830.188559][ T30] ? __kthread_parkme+0x148/0x220 [ 2830.193621][ T30] ? __pfx_watchdog+0x10/0x10 [ 2830.198325][ T30] kthread+0x2c1/0x3a0 [ 2830.202408][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2830.207631][ T30] ? __pfx_kthread+0x10/0x10 [ 2830.212237][ T30] ret_from_fork+0x45/0x80 [ 2830.216683][ T30] ? __pfx_kthread+0x10/0x10 [ 2830.221287][ T30] ret_from_fork_asm+0x1a/0x30 [ 2830.226080][ T30] [ 2831.340113][ T30] Shutting down cpus with NMI [ 2831.345070][ T30] Kernel Offset: disabled [ 2831.349387][ T30] Rebooting in 86400 seconds..