b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:30:22 executing program 2: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x4, 0x4, {0x51, 0x1, 0x20, {0x6, 0xc5}, {0x800, 0xb98}, @period={0x5d, 0x2, 0x3, 0x4, 0x401, {0x5, 0xffff, 0x81, 0x4}, 0xa, &(0x7f0000000080)=[0x7, 0xee, 0x100, 0x3, 0x0, 0x3ff, 0x4, 0x401, 0x7f, 0xde]}}, {0x53, 0x6, 0xbf1b, {0x90, 0xe661}, {0x8001, 0x7}, @const={0x200, {0x401, 0x829, 0x2, 0x9e95}}}}) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) (async) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000040)={0x3ff}) 06:30:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) (async) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, {0xa, 0x4e20, 0x8, @mcast2, 0x88f}, 0x0, {[0x8001, 0x80, 0x6, 0x432b6, 0x3ff, 0x6, 0x1b]}}, 0x5c) (async) socket$can_raw(0x1d, 0x3, 0x1) 06:30:22 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000000), 0x10) 06:30:22 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000040)=0xfff, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:30:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000080)={0x6, 0x7, 0x1}) write$uinput_user_dev(r1, &(0x7f00000002c0)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, &(0x7f0000000600)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:30:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x3) 06:30:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x3) [ 2161.317590] input: syz1 as /devices/virtual/input/input21750 [ 2161.348431] ieee802154 phy0 wpan0: encryption failed: -22 [ 2161.354031] ieee802154 phy1 wpan1: encryption failed: -22 06:30:22 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x20044801) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x20044801) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, r5, 0x8b460bac824a210f, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x100, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x4}}, {{0x8, 0x1, r7}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x44, 0x3f, 0x0, 0x2}, {0x1, 0x0, 0x20, 0x20}, {0xd46, 0x3f, 0x4, 0x3}]}}}]}}, {{0x8, 0x1, r4}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20004400}, 0x4000045) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="190000000bb856dfe8648a4d336509dbcc9a5e79c9ca63fca32fc36cdbab94fdfbbde1", @ANYRES16=r2, @ANYBLOB="8305000000000000df250600000000020500950100000800040000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000850}, 0x44000) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000000)={0x1, 0x1, @raw_data=[0xffff, 0x8, 0x3, 0x0, 0x3, 0xff, 0x36c, 0x1, 0x3, 0x4, 0xffffffff, 0x0, 0x2, 0x5, 0x1ff, 0x5]}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r8, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f0000000180)={0x8cf3, {0x101, 0xfffffff9, 0x101, 0xfffffffe, 0x4, 0x401}}) 06:30:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 64) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x3) (rerun: 64) 06:30:22 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x20044801) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x20044801) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, r5, 0x8b460bac824a210f, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x100, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x4}}, {{0x8, 0x1, r7}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x44, 0x3f, 0x0, 0x2}, {0x1, 0x0, 0x20, 0x20}, {0xd46, 0x3f, 0x4, 0x3}]}}}]}}, {{0x8, 0x1, r4}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20004400}, 0x4000045) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) (async) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="190000000bb856dfe8648a4d336509dbcc9a5e79c9ca63fca32fc36cdbab94fdfbbde1", @ANYRES16=r2, @ANYBLOB="8305000000000000df250600000000020500950100000800040000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000850}, 0x44000) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000000)={0x1, 0x1, @raw_data=[0xffff, 0x8, 0x3, 0x0, 0x3, 0xff, 0x36c, 0x1, 0x3, 0x4, 0xffffffff, 0x0, 0x2, 0x5, 0x1ff, 0x5]}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r8, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f0000000180)={0x8cf3, {0x101, 0xfffffff9, 0x101, 0xfffffffe, 0x4, 0x401}}) 06:30:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_scan_rsp_data={{0x2009, 0x20}, {0x0, "4e2c57de3562081a984cda9d91436e9e468a350d8b945a12386e048d52fdca"}}}, 0x24) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) [ 2163.104914] Bluetooth: hci1: command 0x0c1a tx timeout 06:30:24 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) (async) ioctl$IOCTL_VMCI_SET_NOTIFY(0xffffffffffffffff, 0x7cb, &(0x7f0000000080)={0x48, 0x2}) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "6f19abdf19c39a03", "7364d6710a4b11db4a206d8efcef6d74", "19641f03", "3d08dec56bbb42db"}, 0x28) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:30:25 executing program 2: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x4, 0x4, {0x51, 0x1, 0x20, {0x6, 0xc5}, {0x800, 0xb98}, @period={0x5d, 0x2, 0x3, 0x4, 0x401, {0x5, 0xffff, 0x81, 0x4}, 0xa, &(0x7f0000000080)=[0x7, 0xee, 0x100, 0x3, 0x0, 0x3ff, 0x4, 0x401, 0x7f, 0xde]}}, {0x53, 0x6, 0xbf1b, {0x90, 0xe661}, {0x8001, 0x7}, @const={0x200, {0x401, 0x829, 0x2, 0x9e95}}}}) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) (async) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000040)={0x3ff}) 06:30:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_scan_rsp_data={{0x2009, 0x20}, {0x0, "4e2c57de3562081a984cda9d91436e9e468a350d8b945a12386e048d52fdca"}}}, 0x24) (async) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) 06:30:25 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x20044801) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x20044801) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, r5, 0x8b460bac824a210f, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x100, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x4}}, {{0x8, 0x1, r7}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x44, 0x3f, 0x0, 0x2}, {0x1, 0x0, 0x20, 0x20}, {0xd46, 0x3f, 0x4, 0x3}]}}}]}}, {{0x8, 0x1, r4}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20004400}, 0x4000045) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="190000000bb856dfe8648a4d336509dbcc9a5e79c9ca63fca32fc36cdbab94fdfbbde1", @ANYRES16=r2, @ANYBLOB="8305000000000000df250600000000020500950100000800040000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000850}, 0x44000) (async) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000000)={0x1, 0x1, @raw_data=[0xffff, 0x8, 0x3, 0x0, 0x3, 0xff, 0x36c, 0x1, 0x3, 0x4, 0xffffffff, 0x0, 0x2, 0x5, 0x1ff, 0x5]}) (async) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r8, 0x40045567, 0x0) (async) ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f0000000180)={0x8cf3, {0x101, 0xfffffff9, 0x101, 0xfffffffe, 0x4, 0x401}}) 06:30:25 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:30:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000080)={0x6, 0x7, 0x1}) write$uinput_user_dev(r1, &(0x7f00000002c0)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, &(0x7f0000000600)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000080)={0x6, 0x7, 0x1}) (async) write$uinput_user_dev(r1, &(0x7f00000002c0)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, &(0x7f0000000600)) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) 06:30:25 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) ioctl$IOCTL_VMCI_SET_NOTIFY(0xffffffffffffffff, 0x7cb, &(0x7f0000000080)={0x48, 0x2}) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "6f19abdf19c39a03", "7364d6710a4b11db4a206d8efcef6d74", "19641f03", "3d08dec56bbb42db"}, 0x28) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:30:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_scan_rsp_data={{0x2009, 0x20}, {0x0, "4e2c57de3562081a984cda9d91436e9e468a350d8b945a12386e048d52fdca"}}}, 0x24) (async) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) 06:30:25 executing program 1: r0 = socket(0x11, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x7}, "55cc487e9dcb279d", "7d1ef962dffd419b912088dada877af6ea1be5414c3c81ce36d01f38ca7458bf", "9f81740d", "d2eb7fbc72ea6c97"}, 0x38) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000002c0)="0c87f2e886313190cb6296aed4f26f37", 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f0000000280)={@any, 0x6}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, r3, 0x8b460bac824a210f, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x60, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x46ae}}, {0x8}}}]}}]}, 0x60}}, 0x1) [ 2164.519516] input: syz1 as /devices/virtual/input/input21754 06:30:25 executing program 3: ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000040)={@any, 0xd18}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) 06:30:25 executing program 1: r0 = socket(0x11, 0x3, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) (async) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x7}, "55cc487e9dcb279d", "7d1ef962dffd419b912088dada877af6ea1be5414c3c81ce36d01f38ca7458bf", "9f81740d", "d2eb7fbc72ea6c97"}, 0x38) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000002c0)="0c87f2e886313190cb6296aed4f26f37", 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f0000000280)={@any, 0x6}) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, r3, 0x8b460bac824a210f, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x60, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x46ae}}, {0x8}}}]}}]}, 0x60}}, 0x1) 06:30:25 executing program 3: ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000040)={@any, 0xd18}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000040)={@any, 0xd18}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) (async) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) (async) 06:30:25 executing program 1: r0 = socket(0x11, 0x3, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x7}, "55cc487e9dcb279d", "7d1ef962dffd419b912088dada877af6ea1be5414c3c81ce36d01f38ca7458bf", "9f81740d", "d2eb7fbc72ea6c97"}, 0x38) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000002c0)="0c87f2e886313190cb6296aed4f26f37", 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f0000000280)={@any, 0x6}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, r3, 0x8b460bac824a210f, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x60, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x46ae}}, {0x8}}}]}}]}, 0x60}}, 0x1) [ 2165.184937] Bluetooth: hci1: command 0x0c1a tx timeout [ 2167.264610] Bluetooth: hci1: command 0x0c1a tx timeout 06:30:28 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2001, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:30:28 executing program 1: r0 = socket(0x11, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:30:28 executing program 3: ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000040)={@any, 0xd18}) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) (async) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) 06:30:28 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000040)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) (async) 06:30:28 executing program 0: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x7f, {0x7, 0x1, 0x0, 0x9, 0x3f, 0x8}}) getpgrp(0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0, 0x0, r0}) 06:30:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000080)={0x6, 0x7, 0x1}) write$uinput_user_dev(r1, &(0x7f00000002c0)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) (async, rerun: 32) ioctl$UI_DEV_CREATE(r1, 0x5501) (rerun: 32) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, &(0x7f0000000600)) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:30:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, &(0x7f0000000000)={0x0, 0x1, 0x1}) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) 06:30:28 executing program 0: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x7f, {0x7, 0x1, 0x0, 0x9, 0x3f, 0x8}}) getpgrp(0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0, 0x0, r0}) 06:30:28 executing program 1: r0 = socket(0x11, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 2167.652890] input: syz1 as /devices/virtual/input/input21757 06:30:28 executing program 1: r0 = socket(0x11, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:30:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, &(0x7f0000000000)={0x0, 0x1, 0x1}) (async) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) 06:30:28 executing program 0: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x7f, {0x7, 0x1, 0x0, 0x9, 0x3f, 0x8}}) (async) getpgrp(0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0, 0x0, r0}) [ 2169.674446] Bluetooth: hci1: command 0x0c1a tx timeout [ 2171.744377] Bluetooth: hci1: command 0x0c1a tx timeout [ 2172.798177] oom_reaper: reaped process 14825 (syz-executor.2), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 2172.832923] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2172.851312] in:imklog cpuset=/ mems_allowed=0-1 [ 2172.856055] CPU: 0 PID: 12213 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2172.863493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2172.872839] Call Trace: [ 2172.875430] dump_stack+0x1fc/0x2ef [ 2172.879059] dump_header+0x15d/0xc3f [ 2172.882779] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2172.887871] ? ___ratelimit+0x319/0x590 [ 2172.891831] oom_kill_process.cold+0x10/0x692 [ 2172.896306] ? check_preemption_disabled+0x41/0x280 [ 2172.901304] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2172.906562] out_of_memory+0x1072/0x1390 [ 2172.910606] ? oom_killer_disable+0x270/0x270 [ 2172.915083] ? mutex_trylock+0x15f/0x1a0 [ 2172.919124] __alloc_pages_nodemask+0x23a2/0x2890 [ 2172.923952] ? find_get_entry+0x4cd/0x8a0 [ 2172.928080] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2172.932913] alloc_pages_current+0x193/0x2a0 [ 2172.937299] filemap_fault+0x146e/0x2180 [ 2172.941344] ext4_filemap_fault+0x84/0xb0 [ 2172.945469] __do_fault+0x10b/0x4b0 [ 2172.949077] __handle_mm_fault+0x273b/0x41c0 [ 2172.953465] ? vm_insert_page+0x9c0/0x9c0 [ 2172.957589] ? lock_downgrade+0x720/0x720 [ 2172.961722] ? check_preemption_disabled+0x41/0x280 [ 2172.966717] handle_mm_fault+0x436/0xb10 [ 2172.970784] __do_page_fault+0x68e/0xd60 [ 2172.974853] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2172.979869] ? spurious_fault+0x840/0x840 [ 2172.984084] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2172.988915] ? page_fault+0x8/0x30 [ 2172.992435] page_fault+0x1e/0x30 [ 2172.995867] RIP: 0033:0x7f450b45922d [ 2172.999563] Code: Bad RIP value. [ 2173.002905] RSP: 002b:00007f4508df5580 EFLAGS: 00010293 [ 2173.008246] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f450b45922d [ 2173.015496] RDX: 0000000000001fa0 RSI: 00007f4508df5da0 RDI: 0000000000000004 [ 2173.022744] RBP: 00005579568fc9d0 R08: 0000000000000000 R09: 0000000004000001 [ 2173.029998] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f4508df5da0 [ 2173.037251] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f4508df5ddd [ 2173.049411] Mem-Info: [ 2173.051850] active_anon:16895 inactive_anon:28436 isolated_anon:0 [ 2173.051850] active_file:35 inactive_file:3 isolated_file:0 [ 2173.051850] unevictable:0 dirty:25 writeback:0 unstable:0 [ 2173.051850] slab_reclaimable:14887 slab_unreclaimable:125379 [ 2173.051850] mapped:22266 shmem:29849 pagetables:574 bounce:0 [ 2173.051850] free:13863 free_pcp:644 free_cma:0 [ 2173.054760] syz-executor.2: vmalloc: allocation failure, allocated 1705013248 of 2128986112 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2173.085372] Node 0 active_anon:65868kB inactive_anon:70348kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74044kB dirty:0kB writeback:0kB shmem:75808kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2173.113393] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2173.126937] Node 1 active_anon:1720kB inactive_anon:43396kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14888kB dirty:0kB writeback:0kB shmem:43588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2173.126946] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:1852kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2173.144869] CPU: 1 PID: 14825 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 2173.160851] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2173.185546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2173.185552] Call Trace: [ 2173.185574] dump_stack+0x1fc/0x2ef [ 2173.185591] warn_alloc.cold+0x7b/0x18f [ 2173.185608] ? zone_watermark_ok_safe+0x260/0x260 [ 2173.185621] ? rcu_nmi_exit+0xb3/0x180 [ 2173.185654] __vmalloc_area_node+0x4fd/0x780 [ 2173.193512] Node 0 DMA32 free:17900kB min:35996kB low:44992kB high:53988kB active_anon:65808kB inactive_anon:68496kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:1964kB bounce:0kB free_pcp:624kB local_pcp:372kB free_cma:0kB [ 2173.198520] ? __vmalloc_node_range+0x180/0x180 [ 2173.198535] ? _raw_spin_unlock+0x29/0x40 [ 2173.198547] ? __get_vm_area_node+0x2e2/0x3a0 [ 2173.198566] __vmalloc_node_range+0xed/0x180 [ 2173.209379] lowmem_reserve[]: 0 0 1 1 1 [ 2173.210479] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2173.214142] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2173.218064] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2173.222885] lowmem_reserve[]: 0 0 0 0 0 [ 2173.226766] vmalloc_user+0x70/0xe0 [ 2173.226781] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2173.226794] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2173.226809] __vb2_queue_alloc+0x472/0xe60 [ 2173.226835] vb2_core_create_bufs+0x273/0x7e0 [ 2173.233260] Node 1 Normal free:26668kB min:53876kB low:67344kB high:80812kB active_anon:1720kB inactive_anon:43396kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:332kB bounce:0kB free_pcp:1956kB local_pcp:248kB free_cma:0kB [ 2173.260086] ? __vb2_queue_free+0x870/0x870 [ 2173.260103] ? mutex_trylock+0x1a0/0x1a0 [ 2173.260119] ? __video_do_ioctl+0x632/0xcd0 [ 2173.260139] vb2_create_bufs+0x332/0x620 [ 2173.260154] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2173.260166] ? __video_do_ioctl+0x632/0xcd0 [ 2173.260178] ? mutex_trylock+0x1a0/0x1a0 [ 2173.260193] ? mark_held_locks+0xf0/0xf0 [ 2173.260209] ? futex_wait_queue_me+0x404/0x5e0 [ 2173.260224] vb2_ioctl_create_bufs+0x20d/0x360 [ 2173.260239] ? memset+0x20/0x40 [ 2173.260257] v4l_create_bufs+0xb2/0x160 [ 2173.260273] __video_do_ioctl+0x49a/0xcd0 [ 2173.260294] ? v4l_querycap+0x340/0x340 [ 2173.260312] ? __might_fault+0x192/0x1d0 [ 2173.260330] ? v4l_querycap+0x340/0x340 [ 2173.260347] video_usercopy+0x13f/0xfa0 [ 2173.260369] ? v4l_enumstd+0x60/0x60 [ 2173.260383] ? do_futex+0x171/0x1880 [ 2173.260398] ? mark_held_locks+0xf0/0xf0 [ 2173.260417] ? debug_check_no_obj_freed+0x201/0x490 [ 2173.260441] ? video_usercopy+0xfa0/0xfa0 [ 2173.260453] v4l2_ioctl+0x147/0x1a0 [ 2173.260466] ? video_devdata+0xa0/0xa0 [ 2173.260481] do_vfs_ioctl+0xcdb/0x12e0 [ 2173.260497] ? lock_downgrade+0x720/0x720 [ 2173.260513] ? check_preemption_disabled+0x41/0x280 [ 2173.260526] ? ioctl_preallocate+0x200/0x200 [ 2173.260545] ? __fget+0x356/0x510 [ 2173.260562] ? do_dup2+0x450/0x450 [ 2173.260577] ? __se_sys_futex+0x298/0x3b0 [ 2173.260598] ksys_ioctl+0x9b/0xc0 [ 2173.260614] __x64_sys_ioctl+0x6f/0xb0 [ 2173.260629] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2173.260643] do_syscall_64+0xf9/0x620 [ 2173.260662] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2173.260674] RIP: 0033:0x7f341ec39209 [ 2173.260687] Code: Bad RIP value. [ 2173.260695] RSP: 002b:00007f341d5ae168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2173.260708] RAX: ffffffffffffffda RBX: 00007f341ed4bf60 RCX: 00007f341ec39209 [ 2173.260716] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 2173.260723] RBP: 00007f341ec93161 R08: 0000000000000000 R09: 0000000000000000 [ 2173.260731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2173.260740] R13: 00007ffc3f7ea9cf R14: 00007f341d5ae300 R15: 0000000000022000 [ 2173.277081] Mem-Info: [ 2173.281035] lowmem_reserve[]: 0 0 0 0 0 [ 2173.283701] active_anon:16897 inactive_anon:28436 isolated_anon:0 [ 2173.283701] active_file:11 inactive_file:13 isolated_file:0 [ 2173.283701] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2173.283701] slab_reclaimable:14887 slab_unreclaimable:125377 [ 2173.283701] mapped:22233 shmem:29849 pagetables:574 bounce:0 [ 2173.283701] free:13889 free_pcp:645 free_cma:0 [ 2173.287986] Node 0 DMA: 3*4kB (UE) 3*8kB (UME) 2*16kB (M) 2*32kB (ME) 2*64kB (ME) 3*128kB (UE) 4*256kB (UE) 4*512kB (UE) 3*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10884kB [ 2173.324950] Node 0 active_anon:65868kB inactive_anon:70348kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74044kB dirty:0kB writeback:0kB shmem:75808kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2173.330165] Node 0 DMA32: 877*4kB (ME) 339*8kB (UMEH) 305*16kB (UMEH) 93*32kB (UMEH) 32*64kB (UMEH) 11*128kB (UMH) 2*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18044kB [ 2173.331287] Node 1 active_anon:1720kB inactive_anon:43396kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14888kB dirty:0kB writeback:0kB shmem:43588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2173.335437] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2173.350763] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:1852kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2173.377925] Node 1 Normal: 253*4kB (ME) 199*8kB (UME) 128*16kB (UME) 76*32kB (UM) 30*64kB (M) 8*128kB (UM) 3*256kB (ME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (M) 2*4096kB (M) = 26668kB [ 2173.392853] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2173.398233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2173.400921] Node 0 DMA32 free:18004kB min:35996kB low:44992kB high:53988kB active_anon:65808kB inactive_anon:68496kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:1964kB bounce:0kB free_pcp:624kB local_pcp:252kB free_cma:0kB [ 2173.403483] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2173.416936] lowmem_reserve[]: 0 0 1 1 1 [ 2173.422896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2173.433015] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2173.436679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2173.442535] lowmem_reserve[]: 0 0 0 0 0 [ 2173.444255] 29873 total pagecache pages [ 2173.444270] 0 pages in swap cache [ 2173.444278] Swap cache stats: add 0, delete 0, find 0/0 [ 2173.444283] Free swap = 0kB [ 2173.444288] Total swap = 0kB [ 2173.444295] 2097051 pages RAM [ 2173.444300] 0 pages HighMem/MovableOnly [ 2173.444304] 369649 pages reserved [ 2173.444312] 0 pages cma reserved [ 2173.457423] Node 1 Normal free:26668kB min:53876kB low:67344kB high:80812kB active_anon:1720kB inactive_anon:43396kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:512kB pagetables:332kB bounce:0kB free_pcp:1956kB local_pcp:1708kB free_cma:0kB [ 2173.457457] lowmem_reserve[]: 0 0 0 0 0 [ 2173.457475] Node 0 DMA: 3*4kB (UE) 3*8kB (UME) 2*16kB (M) 2*32kB (ME) 2*64kB (ME) 3*128kB (UE) 4*256kB (UE) 4*512kB (UE) 3*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10884kB [ 2173.465793] Unreclaimable slab info: [ 2173.473025] Node 0 DMA32: 877*4kB (ME) 339*8kB (UMEH) 305*16kB (UMEH) 93*32kB (UMEH) 32*64kB (UMEH) 11*128kB (UMH) 2*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18044kB [ 2173.478953] Name Used Total [ 2173.482238] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2173.490463] pid_2 91KB 100KB [ 2173.498054] Node 1 Normal: 253*4kB (ME) 199*8kB (UME) 128*16kB (UME) 76*32kB (UM) 30*64kB (M) 8*128kB (UM) 3*256kB (ME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (M) 2*4096kB (M) = 26668kB [ 2173.503210] batadv_tl_cache 4KB 12KB [ 2173.509544] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2173.513456] TIPC 10KB 22KB [ 2173.517999] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2173.523126] SCTPv6 14KB 18KB [ 2173.523878] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2173.530741] SCTP 15KB 15KB [ 2173.533811] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2173.543129] DCCPv6 17KB 37KB [ 2173.549505] 29873 total pagecache pages [ 2173.560078] DCCP 16KB 28KB [ 2173.560602] 0 pages in swap cache [ 2173.570895] RXRPC 11KB 19KB [ 2173.581385] Swap cache stats: add 0, delete 0, find 0/0 [ 2173.587149] rxrpc_call_jar 78KB 94KB [ 2173.625481] Free swap = 0kB [ 2173.633407] can_receiver 0KB 3KB [ 2173.668551] Total swap = 0kB [ 2173.677927] bridge_fdb_cache 9KB 23KB [ 2173.713450] 2097051 pages RAM [ 2173.742474] fib6_nodes 156KB 252KB [ 2173.767159] 0 pages HighMem/MovableOnly [ 2173.774803] ip6_dst_cache 84KB 480KB [ 2173.811935] 369649 pages reserved [ 2173.816113] RAWv6 77KB 94KB [ 2173.827135] 0 pages cma reserved [ 2173.850813] UDPv6 26KB 41KB [ 2174.147053] TCPv6 27KB 36KB [ 2174.152421] nf_conntrack 3KB 18KB [ 2174.157854] AF_VSOCK 133KB 138KB [ 2174.163258] t10_alua_lu_gp_cache 0KB 3KB [ 2174.170594] sd_ext_cdb 0KB 7KB [ 2174.176027] scsi_sense_cache 1056KB 1060KB [ 2174.181385] virtio_scsi_cmd 16KB 16KB [ 2174.186812] sgpool-128 8KB 8KB [ 2174.192171] sgpool-64 4KB 12KB [ 2174.197588] sgpool-32 2KB 15KB [ 2174.202952] sgpool-16 1KB 7KB [ 2174.208347] sgpool-8 0KB 7KB [ 2174.213712] mqueue_inode_cache 10KB 22KB [ 2174.219220] bio_post_read_ctx 14KB 15KB [ 2174.224683] bio-2 14KB 15KB [ 2174.230041] jfs_mp 7KB 7KB [ 2174.235463] cifs_small_rq 15KB 16KB [ 2174.240816] cifs_request 67KB 67KB [ 2174.246207] cifs_mpx_ids 0KB 7KB [ 2174.251585] nfs_commit_data 3KB 14KB [ 2174.257081] nfs_write_data 34KB 44KB [ 2174.262473] ext4_system_zone 1KB 7KB [ 2174.267919] bio-1 1KB 7KB [ 2174.281766] pid_namespace 2KB 11KB [ 2174.287193] rpc_buffers 17KB 25KB [ 2174.292555] rpc_tasks 2KB 7KB [ 2174.304899] UNIX 155KB 176KB [ 2174.310277] tcp_bind_bucket 1KB 4KB [ 2174.315722] ip_fib_trie 23KB 47KB [ 2174.321082] ip_fib_alias 111KB 181KB [ 2174.333365] ip_dst_cache 4KB 20KB [ 2174.338770] RAW 42KB 60KB [ 2174.350999] UDP 30KB 47KB [ 2174.356415] TCP 36KB 56KB [ 2174.361773] hugetlbfs_inode_cache 3KB 15KB [ 2174.376251] fscache_cookie_jar 1KB 7KB [ 2174.381703] eventpoll_pwq 32KB 51KB [ 2174.387114] eventpoll_epi 59KB 74KB [ 2174.392473] inotify_inode_mark 36KB 43KB [ 2174.405011] request_queue 199KB 199KB [ 2174.410376] blkdev_requests 1KB 3KB [ 2174.415795] blkdev_ioc 11KB 30KB [ 2174.421156] bio-0 275KB 337KB [ 2174.433479] biovec-max 1518KB 1584KB [ 2174.438903] biovec-64 154KB 236KB [ 2174.451161] biovec-16 35KB 52KB [ 2174.456577] bio_integrity_payload 1KB 8KB [ 2174.462283] khugepaged_mm_slot 20KB 34KB [ 2174.474646] uid_cache 0KB 4KB [ 2174.481985] dmaengine-unmap-2 0KB 3KB [ 2174.490814] skbuff_fclone_cache 96KB 105KB [ 2174.499851] skbuff_head_cache 4741KB 6348KB [ 2174.508830] configfs_dir_cache 3KB 7KB [ 2174.517768] file_lock_cache 180KB 198KB [ 2174.523131] file_lock_ctx 9KB 15KB [ 2174.532056] fsnotify_mark_connector 21KB 27KB [ 2174.541415] net_namespace 52KB 52KB [ 2174.550307] shmem_inode_cache 8561KB 8571KB [ 2174.559258] task_delay_info 229KB 419KB [ 2174.568245] taskstats 89KB 103KB [ 2174.573625] proc_dir_entry 695KB 840KB [ 2174.582073] pde_opener 10KB 73KB [ 2174.587538] seq_file 293KB 468KB [ 2174.592898] sigqueue 72KB 82KB [ 2174.598315] kernfs_node_cache 18303KB 18321KB [ 2174.604430] mnt_cache 173KB 196KB [ 2174.610438] filp 5168KB 7376KB [ 2174.615896] names_cache 150237KB 150297KB [ 2174.621855] iint_cache 30KB 43KB [ 2174.628600] key_jar 4KB 7KB [ 2174.635809] uts_namespace 2KB 7KB [ 2174.641912] nsproxy 30KB 43KB [ 2174.647510] vm_area_struct 4181KB 4640KB [ 2174.652924] mm_struct 606KB 689KB [ 2174.658325] fs_cache 141KB 304KB [ 2174.663931] files_cache 516KB 791KB [ 2174.669430] signal_cache 1160KB 1717KB [ 2174.674986] sighand_cache 573KB 652KB [ 2174.682647] task_struct 7758KB 7846KB [ 2174.688640] cred_jar 1046KB 2568KB [ 2174.694770] anon_vma_chain 1573KB 1744KB [ 2174.700758] anon_vma 170KB 323KB [ 2174.706203] pid 67KB 252KB [ 2174.711612] Acpi-Operand 156KB 194KB [ 2174.717752] Acpi-ParseExt 9KB 11KB [ 2174.723167] Acpi-Parse 41KB 47KB [ 2174.728709] Acpi-State 52KB 63KB [ 2174.734431] Acpi-Namespace 20KB 27KB [ 2174.740522] numa_policy 0KB 3KB [ 2174.746051] debug_objects_cache 1449KB 2143KB [ 2174.751642] trace_event_file 297KB 298KB [ 2174.757197] ftrace_event_field 398KB 401KB [ 2174.763405] pool_workqueue 121KB 152KB [ 2174.768946] page->ptl 645KB 766KB [ 2174.774509] kmalloc-2097152 2050KB 2050KB [ 2174.779923] kmalloc-524288 2056KB 2056KB [ 2174.787276] kmalloc-262144 1290KB 1290KB [ 2174.793405] kmalloc-131072 650KB 650KB [ 2174.798943] kmalloc-65536 1848KB 1914KB [ 2174.804532] kmalloc-32768 1650KB 1650KB [ 2174.810020] kmalloc-16384 940KB 990KB [ 2174.815504] kmalloc-8192 4001KB 4017KB [ 2174.821547] kmalloc-4096 21632KB 21692KB [ 2174.827550] kmalloc-2048 11498KB 14522KB [ 2174.833498] kmalloc-1024 5853KB 11489KB [ 2174.839335] kmalloc-512 11574KB 13916KB [ 2174.845370] kmalloc-256 3877KB 5970KB [ 2174.851204] kmalloc-128 997KB 1586KB [ 2174.857117] kmalloc-96 2935KB 4292KB [ 2174.863048] kmalloc-64 2403KB 3432KB [ 2174.869087] kmalloc-32 1835KB 2460KB [ 2174.875487] kmalloc-192 1538KB 2860KB [ 2174.881582] kmem_cache 177KB 183KB [ 2174.898810] Out of memory (oom_kill_allocating_task): Kill process 12213 (in:imklog) score 0 or sacrifice child [ 2174.919417] Killed process 12178 (rsyslogd) total-vm:254332kB, anon-rss:636kB, file-rss:0kB, shmem-rss:0kB [ 2174.945364] oom_reaper: reaped process 12178 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:30:38 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2001, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:30:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000040)={&(0x7f00000001c0)=[0x10000, 0x0, 0x1, 0xe54e, 0x1, 0x84e, 0x1, 0x5, 0x6, 0x1, 0x0, 0x0, 0x9, 0x7709, 0x986, 0xffffffe0, 0x3ff, 0xfffffffe, 0x7fffffff, 0x6, 0x1, 0x9, 0x5, 0x8, 0x9, 0x20, 0x800, 0x800, 0xb62, 0x6, 0xfffffff9, 0x0, 0x0, 0x3, 0x7, 0x6, 0x9, 0x5, 0x0, 0xf70e, 0x3f, 0xb0, 0x5, 0x4c0, 0x10a8, 0x8001, 0x0, 0x53, 0x4b, 0x6, 0xffff19d8, 0x3, 0x6, 0x5, 0x6, 0x81, 0x7, 0x5, 0xb29, 0x3, 0x1, 0x7b, 0x2, 0x2e48efe4, 0x2, 0x1, 0x6, 0x7f, 0x9, 0x5, 0x80000001, 0x101, 0x9, 0xe38, 0x3, 0x0, 0x4, 0x10001, 0x8, 0x9, 0x5, 0x7, 0x5e0, 0x80000001, 0x67f, 0x5, 0x10, 0x5, 0x101, 0x4, 0x1, 0x3, 0x40, 0x3ff, 0x8, 0x1f65, 0xca4d, 0x800, 0x24cf, 0x9, 0x101, 0x8, 0x6a, 0x1f, 0x6, 0x1, 0x2, 0x2, 0x9, 0x71cc, 0x1, 0x100, 0x9, 0x0, 0x763, 0x3, 0x7ff, 0x7ff, 0x0, 0x80, 0x101, 0x7, 0x5ad, 0x3ff, 0xffff, 0x9, 0x1, 0x8, 0x2, 0x0, 0xff, 0x6, 0x9, 0x4, 0xfd0, 0xabbe, 0x20, 0x8, 0xe9, 0x3, 0x9, 0x4, 0x2, 0x1, 0x1, 0x7fffffff, 0x3, 0x0, 0x10001, 0x6, 0x8001, 0x401, 0xffff, 0xfffffffe, 0xfff, 0xffffffff, 0x80, 0x0, 0x3, 0x1000, 0x3, 0x0, 0x1, 0x6, 0x80000001, 0x0, 0x6, 0x9, 0x6, 0x1, 0x7, 0x0, 0x0, 0x33c0, 0x5, 0x80000000, 0x3, 0x6, 0x5af4, 0x1, 0xffff, 0x9, 0x1, 0x9, 0x0, 0x6, 0x4, 0x5, 0x800, 0x9, 0x9, 0x3, 0xfff, 0x3, 0x40, 0x5, 0xe86, 0x4, 0x4, 0x80000001, 0xff, 0xffff0001, 0x8, 0x3, 0x35, 0x39, 0x6, 0x5330, 0x9, 0x1000, 0x8, 0x8, 0x7, 0x9, 0x2, 0x80000000, 0xef11, 0x3ff, 0x10000, 0x7, 0x81e, 0x4362, 0x10000, 0x1, 0x9, 0x7f, 0x7, 0x2, 0x7f, 0xb96, 0x7, 0x1ff, 0xd5d2, 0x7ff, 0x100, 0x5, 0x7ff, 0x24, 0x3, 0x7fffffff, 0x6, 0x5, 0x93, 0x10000, 0x0, 0x80000000, 0x602, 0xce79, 0x1, 0x8, 0x6, 0x3, 0x0, 0xfff, 0x80000001, 0x4, 0x3f, 0x1, 0x8, 0x79, 0x7, 0xff, 0x7, 0x4, 0x9, 0x10001, 0x1, 0x81, 0x7fffffff, 0x7, 0x5, 0x4, 0x200, 0x8, 0x10001, 0x10001, 0x6, 0x5, 0x2, 0x1, 0x1, 0x9, 0x63d3, 0x0, 0x5f, 0x1, 0xe15c, 0x7ff, 0x2, 0x3, 0xfffffffc, 0xf, 0x4, 0x3f, 0x10, 0x2, 0x0, 0x7f, 0xfe, 0xfffff038, 0x7, 0xdf5, 0x9, 0x0, 0x4, 0x8001, 0x100, 0x1, 0x9, 0x8, 0x3, 0x1, 0x86a3, 0xff, 0x432d, 0x9, 0x0, 0x2, 0x5, 0x5, 0xff, 0x7, 0x6, 0x40, 0x7, 0x41e5d66a, 0x800, 0xff, 0x7fff, 0x5, 0x6, 0x8, 0x4, 0x8, 0x6, 0x57, 0x8, 0x9, 0xfffffff4, 0x6, 0x81, 0x5, 0x5ecdbe3c, 0x80000001, 0xffffffff, 0x9, 0x4, 0x9, 0x6, 0x4, 0x8, 0x5cd0, 0x20, 0x7fffffff, 0xffffffff, 0x2, 0x1, 0x20, 0x3, 0xfff, 0x7, 0x1, 0x8000, 0x9, 0x772e, 0x7f, 0x41, 0xffffffff, 0xffffffff, 0x7fff, 0x400, 0xfffffff9, 0x0, 0x7, 0x4, 0x4, 0x37, 0x6, 0x832, 0x80000001, 0x8001, 0x2, 0xbce, 0x2, 0x401, 0x69f, 0x48, 0x800, 0x5, 0x2a, 0xfffffffe, 0x5, 0x7, 0x1a, 0x0, 0x2, 0x1, 0x992, 0x4, 0x8, 0x8, 0x7, 0x1, 0x9e, 0x1400, 0xb165, 0x9, 0x1ff, 0x4, 0x3, 0x1, 0x3ff, 0x7, 0x3, 0x401, 0x80000001, 0x76c, 0x7, 0x3, 0xb, 0x700, 0x5, 0x80, 0x7, 0x20, 0xa6, 0x6, 0x1, 0x5b6, 0x1, 0xffffffff, 0x8000, 0x1000, 0x80000000, 0xb1e2b2f6, 0x101, 0x7ff, 0x1000, 0x9, 0x48, 0x9, 0x7, 0x5, 0x1b1eb9a5, 0x80000000, 0x2, 0x56, 0x81, 0x40, 0xd486, 0xfffffffb, 0xeba, 0x2b, 0x6, 0x81e, 0xda, 0x1, 0x40000, 0x80000001, 0x10001, 0x7, 0x8c, 0x0, 0x2, 0xfffff801, 0xb9, 0x0, 0x44b0, 0x80000000, 0x4, 0xfffffff8, 0x80000000, 0x400, 0x1, 0x800, 0x8000, 0x7, 0xe40f, 0x7ff, 0x3c9d, 0x8, 0x0, 0x8001, 0x1, 0xffffffff, 0xffffffff, 0xe62, 0xfffffc00, 0x1000, 0x1, 0x1ff, 0x5, 0x9e1, 0x3, 0x1, 0x1, 0x7fff, 0x1, 0x0, 0x6f24d2c1, 0x7fffffff, 0x7, 0x8, 0x20, 0x20, 0x800, 0x4, 0x9, 0x2, 0x3, 0x7, 0x4, 0x5, 0x4, 0x9, 0x7, 0x7, 0x8000, 0x401, 0x100, 0x2, 0x401, 0xf4, 0x0, 0x5, 0x6ac, 0x200, 0x100, 0x80, 0x3, 0x10000, 0x4, 0xc71, 0x80, 0xe5, 0x1000, 0x3ff, 0x5a8, 0xcf, 0x4, 0x80000000, 0x0, 0x80000001, 0x401, 0x10001, 0x0, 0x1f, 0x4, 0xd40d, 0x1f, 0x0, 0x1, 0x1, 0x8, 0x800, 0x100, 0x0, 0x3f, 0xe778, 0x40, 0x7f, 0x7, 0x3ff, 0x8, 0x2, 0x4, 0x1, 0x45, 0x1065, 0x9c9, 0x6, 0x81, 0x4, 0x7, 0x81, 0x1, 0x4, 0x8, 0x10000, 0x1, 0x5, 0x1f, 0x5, 0x800, 0x1, 0xffd, 0xf, 0xfff, 0xffffffff, 0x0, 0xff, 0xcff, 0xfffe000, 0x4, 0x2, 0x318, 0x1f, 0x8, 0xf2, 0x70, 0x4, 0x9, 0xffff2cab, 0x101, 0x2, 0x7fffffff, 0x6b04, 0x80, 0x0, 0x4, 0x2, 0x4, 0x1ff, 0x2, 0xfff, 0xffff, 0x1, 0x1f, 0x1f, 0x7, 0x6, 0x20, 0x8, 0xe000, 0x1e6, 0x8000, 0x0, 0x20, 0x1f, 0x5, 0x3, 0x6, 0xfffffff7, 0x9, 0x8001, 0x5, 0x64e, 0x401, 0x9, 0x9, 0x1, 0x0, 0x0, 0x9, 0x44a8, 0x83a3, 0x0, 0x6, 0x101, 0x3f, 0x0, 0x81, 0x400, 0xc6, 0x15, 0x3, 0x8, 0x8, 0x7, 0x5, 0x65, 0xa, 0x400, 0x28, 0x1, 0x9, 0x3f, 0x2, 0x7, 0x0, 0xffffff01, 0x7, 0x82, 0x200, 0x9, 0x7, 0x101, 0x8000, 0x2, 0x0, 0x9, 0x1, 0x1, 0xeb6, 0xb42a, 0x261, 0x5, 0x80, 0x7692, 0x4, 0x544, 0x0, 0xce, 0x5, 0x4, 0x0, 0x5, 0x3, 0xcd, 0xfffffff8, 0x78, 0x61a, 0x7ff, 0x8400, 0x5, 0x7, 0x9, 0x7fff, 0xffffbcfe, 0x6, 0x81, 0x7, 0x20, 0x80, 0x5, 0x100, 0x7, 0xcdfe, 0x1, 0x2, 0x5, 0x8, 0x1f, 0x4, 0x8, 0x6f, 0x401, 0x10001, 0x0, 0x80000001, 0x10001, 0x5, 0x7, 0x6, 0x80000000, 0x5, 0x8, 0x585, 0xffffffe0, 0x0, 0x1ff, 0xffffffff, 0x81, 0x8, 0x4, 0xbc1, 0x0, 0x1ff, 0x10001, 0x6, 0x0, 0x0, 0x2, 0x3f, 0x0, 0x800, 0x8, 0x3, 0x4, 0x5, 0xbab, 0xe83, 0x10001, 0x57, 0xffffffff, 0x99, 0x0, 0x7fff, 0x5, 0x1, 0x1, 0x80, 0x9, 0x7a4, 0x49d, 0x9, 0x1, 0x4, 0x8, 0x2, 0x1, 0xa4, 0x1ff, 0x80000000, 0x2, 0x7, 0x200, 0x8, 0x4, 0x6, 0x53, 0x1ff, 0x10001, 0x80000000, 0xffffffe7, 0x8, 0x0, 0x0, 0x200, 0x8, 0x4, 0x8, 0x8d, 0x8, 0x800, 0x800, 0x3ff, 0x1619a6fa, 0x7, 0x9, 0x4, 0x54d3, 0x9, 0x164, 0x2, 0x10000, 0x5, 0x3, 0x8, 0xfffffff7, 0x4, 0x1004, 0x7fffffff, 0x10001, 0x7, 0x0, 0x1ff, 0x66, 0x6, 0xffff, 0x8, 0x81, 0x8, 0x0, 0x6, 0x1, 0xffffffff, 0x0, 0xfffffffb, 0x8000, 0xe7f6, 0x3, 0x8, 0x9, 0x2, 0x1, 0x644b, 0x80000001, 0x7, 0xfff, 0xfff, 0x2, 0x1, 0x3ff, 0x8, 0x5a, 0x7, 0x44, 0x4, 0x10000, 0xfff, 0x8de, 0x9, 0x9, 0x7fffffff, 0x6, 0x7fffffff, 0x2, 0x4, 0x1, 0x3f, 0xfff, 0x400, 0x1, 0x80000001, 0xfff, 0x2, 0x7, 0xabf, 0x7, 0x6, 0x98, 0x8, 0xcb79, 0x7, 0x5, 0x401, 0x2, 0x7, 0x7ff, 0xfce, 0x9, 0x8, 0x4, 0x10001, 0x6, 0x1, 0xc4e870, 0x45, 0xffffffff, 0x9, 0x6, 0x6, 0x2fe5, 0x6, 0x1, 0x1, 0xc57a, 0x10001, 0x8, 0x1f, 0x0, 0x3, 0x8, 0x7ff, 0x0, 0x2c, 0x3862, 0x10001, 0x8, 0x1, 0x3, 0x1, 0x6, 0xa0, 0x7, 0x40, 0x100, 0x9, 0xff, 0x8, 0x6, 0xad, 0xffffff00, 0x81, 0x6, 0xa9ce, 0x6df1, 0x10000, 0x16cd, 0x3, 0x3ff, 0x800, 0x6, 0x1, 0x9, 0x0, 0x9, 0x3, 0x81, 0x6, 0x1000, 0x8, 0x81, 0x9, 0x1ff, 0x7, 0xfffff0eb, 0xd4, 0x1, 0x40, 0x88f7, 0x2e0, 0x80000001, 0x6, 0xd9, 0x100, 0x80, 0x1, 0x80, 0x7, 0x0, 0x5, 0x1, 0x3, 0x3, 0x5, 0x8001, 0x6, 0x9, 0xbaf0, 0xfffeffff, 0x7, 0x101, 0x3, 0x40, 0x2, 0x3, 0x1000, 0x80000001, 0x17, 0x7, 0x8000, 0x5, 0xaf, 0x8, 0x1, 0x4, 0x6, 0x20, 0x8a, 0x9, 0x8, 0x200, 0x8, 0x6, 0x25b616a4, 0x8, 0x74bf, 0x7e, 0x400, 0x7, 0xfa, 0x3, 0x7fff, 0x8, 0x3, 0x440b8f4, 0x1000, 0xdd90, 0x2, 0x7fffffff, 0x9, 0xa37b], 0x6, 0x400, 0x7}) 06:30:38 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000040)) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:30:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, 0x0) (async) ioctl$IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, &(0x7f0000000000)={0x0, 0x1, 0x1}) (async) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) 06:30:38 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:30:38 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e23, 0x1adb, @private2, 0x3ff}, {0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x0, {[0x4, 0x3f, 0x6, 0x0, 0x48, 0x6, 0xffffffff, 0x9]}}, 0x5c) r1 = socket(0x11, 0x3, 0x0) syz_open_dev$media(&(0x7f0000000000), 0xffffffff, 0x8300) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:30:39 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e23, 0x1adb, @private2, 0x3ff}, {0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x0, {[0x4, 0x3f, 0x6, 0x0, 0x48, 0x6, 0xffffffff, 0x9]}}, 0x5c) r1 = socket(0x11, 0x3, 0x0) syz_open_dev$media(&(0x7f0000000000), 0xffffffff, 0x8300) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e23, 0x1adb, @private2, 0x3ff}, {0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x0, {[0x4, 0x3f, 0x6, 0x0, 0x48, 0x6, 0xffffffff, 0x9]}}, 0x5c) (async) socket(0x11, 0x3, 0x0) (async) syz_open_dev$media(&(0x7f0000000000), 0xffffffff, 0x8300) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) 06:30:39 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000000)) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000040)={'\x00', 0xfffffffc, 0x3, 0x1}) 06:30:39 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e23, 0x1adb, @private2, 0x3ff}, {0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x0, {[0x4, 0x3f, 0x6, 0x0, 0x48, 0x6, 0xffffffff, 0x9]}}, 0x5c) r1 = socket(0x11, 0x3, 0x0) syz_open_dev$media(&(0x7f0000000000), 0xffffffff, 0x8300) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e23, 0x1adb, @private2, 0x3ff}, {0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x0, {[0x4, 0x3f, 0x6, 0x0, 0x48, 0x6, 0xffffffff, 0x9]}}, 0x5c) (async) socket(0x11, 0x3, 0x0) (async) syz_open_dev$media(&(0x7f0000000000), 0xffffffff, 0x8300) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) 06:30:39 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000000)) (async) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000040)={'\x00', 0xfffffffc, 0x3, 0x1}) 06:30:39 executing program 1: r0 = socket(0x8, 0x80000, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000004c0)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9bb4}, {0xa, 0x4e21, 0x2000, @remote, 0x7}, 0x0, {[0x4f, 0x1, 0x401, 0x6, 0x80000001, 0xffff8d30, 0x3, 0x9]}}, 0x5c) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x26, 0x0, &(0x7f0000000000)="237779d6c620b4608c3efeb17b149eea09e29d15655358c991543639c39d13ef93b9de719caea8ecc85a16299800bddb83c9e1b10f189092272915e2", {0x4d, 0x6, 0x39555659, 0x1, 0xfff, 0x2, 0x8, 0xcbff}}) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x401, 0x4) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000180)={0xd}) 06:30:39 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) (async, rerun: 32) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000000)) (rerun: 32) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000040)={'\x00', 0xfffffffc, 0x3, 0x1}) [ 2180.143494] Bluetooth: hci1: command 0x0c1a tx timeout 06:30:42 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2001, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x2001, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) 06:30:42 executing program 1: r0 = socket(0x8, 0x80000, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000004c0)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9bb4}, {0xa, 0x4e21, 0x2000, @remote, 0x7}, 0x0, {[0x4f, 0x1, 0x401, 0x6, 0x80000001, 0xffff8d30, 0x3, 0x9]}}, 0x5c) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x26, 0x0, &(0x7f0000000000)="237779d6c620b4608c3efeb17b149eea09e29d15655358c991543639c39d13ef93b9de719caea8ecc85a16299800bddb83c9e1b10f189092272915e2", {0x4d, 0x6, 0x39555659, 0x1, 0xfff, 0x2, 0x8, 0xcbff}}) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x401, 0x4) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000180)={0xd}) socket(0x8, 0x80000, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) (async) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000004c0)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9bb4}, {0xa, 0x4e21, 0x2000, @remote, 0x7}, 0x0, {[0x4f, 0x1, 0x401, 0x6, 0x80000001, 0xffff8d30, 0x3, 0x9]}}, 0x5c) (async) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x26, 0x0, &(0x7f0000000000)="237779d6c620b4608c3efeb17b149eea09e29d15655358c991543639c39d13ef93b9de719caea8ecc85a16299800bddb83c9e1b10f189092272915e2", {0x4d, 0x6, 0x39555659, 0x1, 0xfff, 0x2, 0x8, 0xcbff}}) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x401, 0x4) (async) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000180)={0xd}) (async) 06:30:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000000)={{@host, 0x80000001}, @any, 0x4, 0x1, 0x2, 0x8001, 0xab, 0x7, 0x1000}) 06:30:42 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000140)=""/144, 0x90}, {&(0x7f0000000200)=""/208, 0xd0}, {&(0x7f0000000300)=""/179, 0xb3}, {&(0x7f00000003c0)=""/43, 0x2b}], 0x5, &(0x7f0000000640)=""/4096, 0x1000}, 0xa042) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f0000000000)) 06:30:42 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:30:42 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000040)={&(0x7f00000001c0)=[0x10000, 0x0, 0x1, 0xe54e, 0x1, 0x84e, 0x1, 0x5, 0x6, 0x1, 0x0, 0x0, 0x9, 0x7709, 0x986, 0xffffffe0, 0x3ff, 0xfffffffe, 0x7fffffff, 0x6, 0x1, 0x9, 0x5, 0x8, 0x9, 0x20, 0x800, 0x800, 0xb62, 0x6, 0xfffffff9, 0x0, 0x0, 0x3, 0x7, 0x6, 0x9, 0x5, 0x0, 0xf70e, 0x3f, 0xb0, 0x5, 0x4c0, 0x10a8, 0x8001, 0x0, 0x53, 0x4b, 0x6, 0xffff19d8, 0x3, 0x6, 0x5, 0x6, 0x81, 0x7, 0x5, 0xb29, 0x3, 0x1, 0x7b, 0x2, 0x2e48efe4, 0x2, 0x1, 0x6, 0x7f, 0x9, 0x5, 0x80000001, 0x101, 0x9, 0xe38, 0x3, 0x0, 0x4, 0x10001, 0x8, 0x9, 0x5, 0x7, 0x5e0, 0x80000001, 0x67f, 0x5, 0x10, 0x5, 0x101, 0x4, 0x1, 0x3, 0x40, 0x3ff, 0x8, 0x1f65, 0xca4d, 0x800, 0x24cf, 0x9, 0x101, 0x8, 0x6a, 0x1f, 0x6, 0x1, 0x2, 0x2, 0x9, 0x71cc, 0x1, 0x100, 0x9, 0x0, 0x763, 0x3, 0x7ff, 0x7ff, 0x0, 0x80, 0x101, 0x7, 0x5ad, 0x3ff, 0xffff, 0x9, 0x1, 0x8, 0x2, 0x0, 0xff, 0x6, 0x9, 0x4, 0xfd0, 0xabbe, 0x20, 0x8, 0xe9, 0x3, 0x9, 0x4, 0x2, 0x1, 0x1, 0x7fffffff, 0x3, 0x0, 0x10001, 0x6, 0x8001, 0x401, 0xffff, 0xfffffffe, 0xfff, 0xffffffff, 0x80, 0x0, 0x3, 0x1000, 0x3, 0x0, 0x1, 0x6, 0x80000001, 0x0, 0x6, 0x9, 0x6, 0x1, 0x7, 0x0, 0x0, 0x33c0, 0x5, 0x80000000, 0x3, 0x6, 0x5af4, 0x1, 0xffff, 0x9, 0x1, 0x9, 0x0, 0x6, 0x4, 0x5, 0x800, 0x9, 0x9, 0x3, 0xfff, 0x3, 0x40, 0x5, 0xe86, 0x4, 0x4, 0x80000001, 0xff, 0xffff0001, 0x8, 0x3, 0x35, 0x39, 0x6, 0x5330, 0x9, 0x1000, 0x8, 0x8, 0x7, 0x9, 0x2, 0x80000000, 0xef11, 0x3ff, 0x10000, 0x7, 0x81e, 0x4362, 0x10000, 0x1, 0x9, 0x7f, 0x7, 0x2, 0x7f, 0xb96, 0x7, 0x1ff, 0xd5d2, 0x7ff, 0x100, 0x5, 0x7ff, 0x24, 0x3, 0x7fffffff, 0x6, 0x5, 0x93, 0x10000, 0x0, 0x80000000, 0x602, 0xce79, 0x1, 0x8, 0x6, 0x3, 0x0, 0xfff, 0x80000001, 0x4, 0x3f, 0x1, 0x8, 0x79, 0x7, 0xff, 0x7, 0x4, 0x9, 0x10001, 0x1, 0x81, 0x7fffffff, 0x7, 0x5, 0x4, 0x200, 0x8, 0x10001, 0x10001, 0x6, 0x5, 0x2, 0x1, 0x1, 0x9, 0x63d3, 0x0, 0x5f, 0x1, 0xe15c, 0x7ff, 0x2, 0x3, 0xfffffffc, 0xf, 0x4, 0x3f, 0x10, 0x2, 0x0, 0x7f, 0xfe, 0xfffff038, 0x7, 0xdf5, 0x9, 0x0, 0x4, 0x8001, 0x100, 0x1, 0x9, 0x8, 0x3, 0x1, 0x86a3, 0xff, 0x432d, 0x9, 0x0, 0x2, 0x5, 0x5, 0xff, 0x7, 0x6, 0x40, 0x7, 0x41e5d66a, 0x800, 0xff, 0x7fff, 0x5, 0x6, 0x8, 0x4, 0x8, 0x6, 0x57, 0x8, 0x9, 0xfffffff4, 0x6, 0x81, 0x5, 0x5ecdbe3c, 0x80000001, 0xffffffff, 0x9, 0x4, 0x9, 0x6, 0x4, 0x8, 0x5cd0, 0x20, 0x7fffffff, 0xffffffff, 0x2, 0x1, 0x20, 0x3, 0xfff, 0x7, 0x1, 0x8000, 0x9, 0x772e, 0x7f, 0x41, 0xffffffff, 0xffffffff, 0x7fff, 0x400, 0xfffffff9, 0x0, 0x7, 0x4, 0x4, 0x37, 0x6, 0x832, 0x80000001, 0x8001, 0x2, 0xbce, 0x2, 0x401, 0x69f, 0x48, 0x800, 0x5, 0x2a, 0xfffffffe, 0x5, 0x7, 0x1a, 0x0, 0x2, 0x1, 0x992, 0x4, 0x8, 0x8, 0x7, 0x1, 0x9e, 0x1400, 0xb165, 0x9, 0x1ff, 0x4, 0x3, 0x1, 0x3ff, 0x7, 0x3, 0x401, 0x80000001, 0x76c, 0x7, 0x3, 0xb, 0x700, 0x5, 0x80, 0x7, 0x20, 0xa6, 0x6, 0x1, 0x5b6, 0x1, 0xffffffff, 0x8000, 0x1000, 0x80000000, 0xb1e2b2f6, 0x101, 0x7ff, 0x1000, 0x9, 0x48, 0x9, 0x7, 0x5, 0x1b1eb9a5, 0x80000000, 0x2, 0x56, 0x81, 0x40, 0xd486, 0xfffffffb, 0xeba, 0x2b, 0x6, 0x81e, 0xda, 0x1, 0x40000, 0x80000001, 0x10001, 0x7, 0x8c, 0x0, 0x2, 0xfffff801, 0xb9, 0x0, 0x44b0, 0x80000000, 0x4, 0xfffffff8, 0x80000000, 0x400, 0x1, 0x800, 0x8000, 0x7, 0xe40f, 0x7ff, 0x3c9d, 0x8, 0x0, 0x8001, 0x1, 0xffffffff, 0xffffffff, 0xe62, 0xfffffc00, 0x1000, 0x1, 0x1ff, 0x5, 0x9e1, 0x3, 0x1, 0x1, 0x7fff, 0x1, 0x0, 0x6f24d2c1, 0x7fffffff, 0x7, 0x8, 0x20, 0x20, 0x800, 0x4, 0x9, 0x2, 0x3, 0x7, 0x4, 0x5, 0x4, 0x9, 0x7, 0x7, 0x8000, 0x401, 0x100, 0x2, 0x401, 0xf4, 0x0, 0x5, 0x6ac, 0x200, 0x100, 0x80, 0x3, 0x10000, 0x4, 0xc71, 0x80, 0xe5, 0x1000, 0x3ff, 0x5a8, 0xcf, 0x4, 0x80000000, 0x0, 0x80000001, 0x401, 0x10001, 0x0, 0x1f, 0x4, 0xd40d, 0x1f, 0x0, 0x1, 0x1, 0x8, 0x800, 0x100, 0x0, 0x3f, 0xe778, 0x40, 0x7f, 0x7, 0x3ff, 0x8, 0x2, 0x4, 0x1, 0x45, 0x1065, 0x9c9, 0x6, 0x81, 0x4, 0x7, 0x81, 0x1, 0x4, 0x8, 0x10000, 0x1, 0x5, 0x1f, 0x5, 0x800, 0x1, 0xffd, 0xf, 0xfff, 0xffffffff, 0x0, 0xff, 0xcff, 0xfffe000, 0x4, 0x2, 0x318, 0x1f, 0x8, 0xf2, 0x70, 0x4, 0x9, 0xffff2cab, 0x101, 0x2, 0x7fffffff, 0x6b04, 0x80, 0x0, 0x4, 0x2, 0x4, 0x1ff, 0x2, 0xfff, 0xffff, 0x1, 0x1f, 0x1f, 0x7, 0x6, 0x20, 0x8, 0xe000, 0x1e6, 0x8000, 0x0, 0x20, 0x1f, 0x5, 0x3, 0x6, 0xfffffff7, 0x9, 0x8001, 0x5, 0x64e, 0x401, 0x9, 0x9, 0x1, 0x0, 0x0, 0x9, 0x44a8, 0x83a3, 0x0, 0x6, 0x101, 0x3f, 0x0, 0x81, 0x400, 0xc6, 0x15, 0x3, 0x8, 0x8, 0x7, 0x5, 0x65, 0xa, 0x400, 0x28, 0x1, 0x9, 0x3f, 0x2, 0x7, 0x0, 0xffffff01, 0x7, 0x82, 0x200, 0x9, 0x7, 0x101, 0x8000, 0x2, 0x0, 0x9, 0x1, 0x1, 0xeb6, 0xb42a, 0x261, 0x5, 0x80, 0x7692, 0x4, 0x544, 0x0, 0xce, 0x5, 0x4, 0x0, 0x5, 0x3, 0xcd, 0xfffffff8, 0x78, 0x61a, 0x7ff, 0x8400, 0x5, 0x7, 0x9, 0x7fff, 0xffffbcfe, 0x6, 0x81, 0x7, 0x20, 0x80, 0x5, 0x100, 0x7, 0xcdfe, 0x1, 0x2, 0x5, 0x8, 0x1f, 0x4, 0x8, 0x6f, 0x401, 0x10001, 0x0, 0x80000001, 0x10001, 0x5, 0x7, 0x6, 0x80000000, 0x5, 0x8, 0x585, 0xffffffe0, 0x0, 0x1ff, 0xffffffff, 0x81, 0x8, 0x4, 0xbc1, 0x0, 0x1ff, 0x10001, 0x6, 0x0, 0x0, 0x2, 0x3f, 0x0, 0x800, 0x8, 0x3, 0x4, 0x5, 0xbab, 0xe83, 0x10001, 0x57, 0xffffffff, 0x99, 0x0, 0x7fff, 0x5, 0x1, 0x1, 0x80, 0x9, 0x7a4, 0x49d, 0x9, 0x1, 0x4, 0x8, 0x2, 0x1, 0xa4, 0x1ff, 0x80000000, 0x2, 0x7, 0x200, 0x8, 0x4, 0x6, 0x53, 0x1ff, 0x10001, 0x80000000, 0xffffffe7, 0x8, 0x0, 0x0, 0x200, 0x8, 0x4, 0x8, 0x8d, 0x8, 0x800, 0x800, 0x3ff, 0x1619a6fa, 0x7, 0x9, 0x4, 0x54d3, 0x9, 0x164, 0x2, 0x10000, 0x5, 0x3, 0x8, 0xfffffff7, 0x4, 0x1004, 0x7fffffff, 0x10001, 0x7, 0x0, 0x1ff, 0x66, 0x6, 0xffff, 0x8, 0x81, 0x8, 0x0, 0x6, 0x1, 0xffffffff, 0x0, 0xfffffffb, 0x8000, 0xe7f6, 0x3, 0x8, 0x9, 0x2, 0x1, 0x644b, 0x80000001, 0x7, 0xfff, 0xfff, 0x2, 0x1, 0x3ff, 0x8, 0x5a, 0x7, 0x44, 0x4, 0x10000, 0xfff, 0x8de, 0x9, 0x9, 0x7fffffff, 0x6, 0x7fffffff, 0x2, 0x4, 0x1, 0x3f, 0xfff, 0x400, 0x1, 0x80000001, 0xfff, 0x2, 0x7, 0xabf, 0x7, 0x6, 0x98, 0x8, 0xcb79, 0x7, 0x5, 0x401, 0x2, 0x7, 0x7ff, 0xfce, 0x9, 0x8, 0x4, 0x10001, 0x6, 0x1, 0xc4e870, 0x45, 0xffffffff, 0x9, 0x6, 0x6, 0x2fe5, 0x6, 0x1, 0x1, 0xc57a, 0x10001, 0x8, 0x1f, 0x0, 0x3, 0x8, 0x7ff, 0x0, 0x2c, 0x3862, 0x10001, 0x8, 0x1, 0x3, 0x1, 0x6, 0xa0, 0x7, 0x40, 0x100, 0x9, 0xff, 0x8, 0x6, 0xad, 0xffffff00, 0x81, 0x6, 0xa9ce, 0x6df1, 0x10000, 0x16cd, 0x3, 0x3ff, 0x800, 0x6, 0x1, 0x9, 0x0, 0x9, 0x3, 0x81, 0x6, 0x1000, 0x8, 0x81, 0x9, 0x1ff, 0x7, 0xfffff0eb, 0xd4, 0x1, 0x40, 0x88f7, 0x2e0, 0x80000001, 0x6, 0xd9, 0x100, 0x80, 0x1, 0x80, 0x7, 0x0, 0x5, 0x1, 0x3, 0x3, 0x5, 0x8001, 0x6, 0x9, 0xbaf0, 0xfffeffff, 0x7, 0x101, 0x3, 0x40, 0x2, 0x3, 0x1000, 0x80000001, 0x17, 0x7, 0x8000, 0x5, 0xaf, 0x8, 0x1, 0x4, 0x6, 0x20, 0x8a, 0x9, 0x8, 0x200, 0x8, 0x6, 0x25b616a4, 0x8, 0x74bf, 0x7e, 0x400, 0x7, 0xfa, 0x3, 0x7fff, 0x8, 0x3, 0x440b8f4, 0x1000, 0xdd90, 0x2, 0x7fffffff, 0x9, 0xa37b], 0x6, 0x400, 0x7}) 06:30:42 executing program 1: r0 = socket(0x8, 0x80000, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) (async) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000004c0)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9bb4}, {0xa, 0x4e21, 0x2000, @remote, 0x7}, 0x0, {[0x4f, 0x1, 0x401, 0x6, 0x80000001, 0xffff8d30, 0x3, 0x9]}}, 0x5c) (async) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x26, 0x0, &(0x7f0000000000)="237779d6c620b4608c3efeb17b149eea09e29d15655358c991543639c39d13ef93b9de719caea8ecc85a16299800bddb83c9e1b10f189092272915e2", {0x4d, 0x6, 0x39555659, 0x1, 0xfff, 0x2, 0x8, 0xcbff}}) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x401, 0x4) (async) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000180)={0xd}) 06:30:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000000)={{@host, 0x80000001}, @any, 0x4, 0x1, 0x2, 0x8001, 0xab, 0x7, 0x1000}) 06:30:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000000)={{@host, 0x80000001}, @any, 0x4, 0x1, 0x2, 0x8001, 0xab, 0x7, 0x1000}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000000)={{@host, 0x80000001}, @any, 0x4, 0x1, 0x2, 0x8001, 0xab, 0x7, 0x1000}) (async) 06:30:42 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 06:30:42 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 06:30:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) [ 2183.263290] Bluetooth: hci1: command 0x0c1a tx timeout [ 2186.120570] oom_reaper: reaped process 14944 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2186.156417] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2186.174153] systemd-journal cpuset=/ mems_allowed=0-1 [ 2186.194708] CPU: 1 PID: 12206 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2186.202680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2186.212025] Call Trace: [ 2186.214614] dump_stack+0x1fc/0x2ef [ 2186.218243] dump_header+0x15d/0xc3f [ 2186.221955] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2186.227054] ? ___ratelimit+0x319/0x590 [ 2186.231033] oom_kill_process.cold+0x10/0x692 [ 2186.235531] ? check_preemption_disabled+0x41/0x280 [ 2186.240548] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2186.245823] out_of_memory+0x1072/0x1390 [ 2186.249884] ? oom_killer_disable+0x270/0x270 [ 2186.254387] ? mutex_trylock+0x15f/0x1a0 [ 2186.258451] __alloc_pages_nodemask+0x23a2/0x2890 [ 2186.263300] ? find_get_entry+0x4cd/0x8a0 [ 2186.267456] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2186.272322] alloc_pages_current+0x193/0x2a0 [ 2186.276729] filemap_fault+0x146e/0x2180 [ 2186.280798] ext4_filemap_fault+0x84/0xb0 [ 2186.284943] __do_fault+0x10b/0x4b0 [ 2186.288569] __handle_mm_fault+0x273b/0x41c0 [ 2186.292978] ? vm_insert_page+0x9c0/0x9c0 [ 2186.297136] ? check_preemption_disabled+0x41/0x280 [ 2186.302150] handle_mm_fault+0x436/0xb10 [ 2186.306214] __do_page_fault+0x68e/0xd60 [ 2186.310268] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2186.312992] syz-executor.4: vmalloc: allocation failure, allocated 1709355008 of 2128986112 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2186.315273] ? spurious_fault+0x840/0x840 [ 2186.333176] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2186.335510] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2186.338015] ? page_fault+0x8/0x30 [ 2186.346618] page_fault+0x1e/0x30 [ 2186.350062] RIP: 0033:0x7f51b79e62e3 [ 2186.353765] Code: Bad RIP value. [ 2186.357122] RSP: 002b:00007fff40d8c738 EFLAGS: 00010246 [ 2186.362483] RAX: 0000000000000001 RBX: 00005639b1e451e0 RCX: 00007f51b79e62e3 [ 2186.369740] RDX: 0000000000000013 RSI: 00007fff40d8c740 RDI: 000000000000000c [ 2186.376995] RBP: 00007fff40d8c930 R08: 00007fff40dd3000 R09: 0000023030f690e2 [ 2186.384252] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff40d8c740 [ 2186.391514] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005e5789b1b5b86 [ 2186.398787] CPU: 0 PID: 14944 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 2186.402529] Mem-Info: [ 2186.406662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2186.406667] Call Trace: [ 2186.406686] dump_stack+0x1fc/0x2ef [ 2186.406703] warn_alloc.cold+0x7b/0x18f [ 2186.409132] active_anon:17436 inactive_anon:28436 isolated_anon:0 [ 2186.409132] active_file:40 inactive_file:18 isolated_file:0 [ 2186.409132] unevictable:0 dirty:0 writeback:2 unstable:0 [ 2186.409132] slab_reclaimable:14825 slab_unreclaimable:124254 [ 2186.409132] mapped:22287 shmem:29849 pagetables:589 bounce:0 [ 2186.409132] free:13917 free_pcp:124 free_cma:0 [ 2186.418455] ? zone_watermark_ok_safe+0x260/0x260 [ 2186.418469] ? retint_kernel+0x2d/0x2d [ 2186.418501] __vmalloc_area_node+0x4fd/0x780 [ 2186.421074] Node 0 active_anon:68400kB inactive_anon:70352kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74044kB dirty:0kB writeback:0kB shmem:75812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2186.424674] ? __vmalloc_node_range+0x180/0x180 [ 2186.424693] ? _raw_spin_unlock+0x29/0x40 [ 2186.428670] Node 1 active_anon:1344kB inactive_anon:43392kB active_file:104kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:15104kB dirty:0kB writeback:8kB shmem:43584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2186.461855] ? __get_vm_area_node+0x2e2/0x3a0 [ 2186.461873] __vmalloc_node_range+0xed/0x180 [ 2186.461886] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2186.461905] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2186.461919] vmalloc_user+0x70/0xe0 [ 2186.466833] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:1852kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2186.470605] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2186.474997] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2186.502546] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2186.502561] __vb2_queue_alloc+0x472/0xe60 [ 2186.502585] vb2_core_create_bufs+0x273/0x7e0 [ 2186.507256] Node 0 DMA32 free:17904kB min:35996kB low:44992kB high:53988kB active_anon:68340kB inactive_anon:68500kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2072kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2186.511382] ? __vb2_queue_free+0x870/0x870 [ 2186.538797] lowmem_reserve[]: 0 0 1 1 1 [ 2186.543261] ? mutex_trylock+0x1a0/0x1a0 [ 2186.543275] ? __video_do_ioctl+0x632/0xcd0 [ 2186.543294] vb2_create_bufs+0x332/0x620 [ 2186.547669] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2186.551981] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2186.557328] lowmem_reserve[]: 0 0 0 0 0 [ 2186.560924] ? __video_do_ioctl+0x632/0xcd0 [ 2186.587384] Node 1 Normal free:26872kB min:53876kB low:67344kB high:80812kB active_anon:1344kB inactive_anon:43392kB active_file:20kB inactive_file:116kB unevictable:0kB writepending:8kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:284kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2186.591666] ? mutex_trylock+0x1a0/0x1a0 [ 2186.596671] lowmem_reserve[]: 0 0 0 0 0 [ 2186.600788] ? mark_held_locks+0xf0/0xf0 [ 2186.605009] Node 0 DMA: 3*4kB (UE) 3*8kB (UME) 2*16kB (M) 2*32kB (ME) 2*64kB (ME) 3*128kB (UE) 4*256kB (UE) 4*512kB (UE) 3*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10884kB [ 2186.609477] ? futex_wait_queue_me+0x404/0x5e0 [ 2186.638177] Node 0 DMA32: 848*4kB (UME) 314*8kB (ME) 254*16kB (UME) 88*32kB (UME) 22*64kB (ME) 3*128kB (M) 1*256kB (U) 0*512kB 3*1024kB (U) 0*2048kB 0*4096kB = 17904kB [ 2186.642463] vb2_ioctl_create_bufs+0x20d/0x360 [ 2186.646420] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2186.650450] ? memset+0x20/0x40 [ 2186.654764] Node 1 Normal: 210*4kB (ME) 182*8kB (ME) 135*16kB (ME) 91*32kB (M) 31*64kB (M) 12*128kB (M) 7*256kB (UME) 2*512kB (M) 3*1024kB (UME) 3*2048kB (UM) 1*4096kB (M) = 27016kB [ 2186.658794] v4l_create_bufs+0xb2/0x160 [ 2186.684634] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2186.689696] __video_do_ioctl+0x49a/0xcd0 [ 2186.693661] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2186.697946] ? v4l_querycap+0x340/0x340 [ 2186.726565] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2186.730586] ? __might_fault+0x192/0x1d0 [ 2186.734549] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2186.738573] ? v4l_querycap+0x340/0x340 [ 2186.753642] 29897 total pagecache pages [ 2186.758190] video_usercopy+0x13f/0xfa0 [ 2186.773273] 0 pages in swap cache [ 2186.777815] ? v4l_enumstd+0x60/0x60 [ 2186.788807] Swap cache stats: add 0, delete 0, find 0/0 [ 2186.792052] ? do_futex+0x171/0x1880 [ 2186.808343] Free swap = 0kB [ 2186.812282] ? mark_held_locks+0xf0/0xf0 [ 2186.821105] Total swap = 0kB [ 2186.825221] ? debug_check_no_obj_freed+0x201/0x490 [ 2186.825244] ? video_usercopy+0xfa0/0xfa0 [ 2186.833807] 2097051 pages RAM [ 2186.837739] v4l2_ioctl+0x147/0x1a0 [ 2186.837754] ? video_devdata+0xa0/0xa0 [ 2186.846579] 0 pages HighMem/MovableOnly [ 2186.850605] do_vfs_ioctl+0xcdb/0x12e0 [ 2186.859164] 369649 pages reserved [ 2186.863107] ? lock_downgrade+0x720/0x720 [ 2186.863121] ? check_preemption_disabled+0x41/0x280 [ 2186.863136] ? ioctl_preallocate+0x200/0x200 [ 2186.867081] 0 pages cma reserved [ 2186.871051] ? __fget+0x356/0x510 [ 2186.874587] Unreclaimable slab info: [ 2186.878266] ? do_dup2+0x450/0x450 [ 2186.883630] Name Used Total [ 2186.887312] ? __se_sys_futex+0x298/0x3b0 [ 2186.890310] pid_2 87KB 100KB [ 2186.894356] ksys_ioctl+0x9b/0xc0 [ 2186.894374] __x64_sys_ioctl+0x6f/0xb0 [ 2186.897431] batadv_tl_cache 4KB 12KB [ 2186.902365] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2186.906544] TIPC 10KB 22KB [ 2186.909585] do_syscall_64+0xf9/0x620 [ 2186.913214] SCTPv6 14KB 18KB [ 2186.917074] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2186.921020] SCTP 15KB 15KB [ 2186.924884] RIP: 0033:0x7fd56abe7209 [ 2186.924897] Code: Bad RIP value. [ 2186.924904] RSP: 002b:00007fd56955c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2186.924916] RAX: ffffffffffffffda RBX: 00007fd56acf9f60 RCX: 00007fd56abe7209 [ 2186.924926] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 2186.928373] DCCPv6 17KB 37KB [ 2186.932493] RBP: 00007fd56ac41161 R08: 0000000000000000 R09: 0000000000000000 [ 2186.937520] DCCP 16KB 28KB [ 2186.941872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2186.941883] R13: 00007fff49faaddf R14: 00007fd56955c300 R15: 0000000000022000 [ 2186.945282] RXRPC 11KB 19KB [ 2187.002156] Mem-Info: [ 2187.006409] rxrpc_call_jar 78KB 94KB [ 2187.022317] active_anon:17419 inactive_anon:28436 isolated_anon:0 [ 2187.022317] active_file:16 inactive_file:16 isolated_file:0 [ 2187.022317] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2187.022317] slab_reclaimable:14825 slab_unreclaimable:124258 [ 2187.022317] mapped:22269 shmem:29849 pagetables:589 bounce:0 [ 2187.022317] free:13953 free_pcp:124 free_cma:0 [ 2187.022466] bridge_fdb_cache 9KB 23KB [ 2187.030912] Node 0 active_anon:68336kB inactive_anon:70352kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74044kB dirty:0kB writeback:0kB shmem:75812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2187.041961] fib6_nodes 156KB 252KB [ 2187.054567] Node 1 active_anon:1340kB inactive_anon:43392kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:15032kB dirty:0kB writeback:0kB shmem:43584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2187.062116] ip6_dst_cache 88KB 472KB [ 2187.066114] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:1852kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2187.070196] RAWv6 86KB 94KB [ 2187.070208] UDPv6 26KB 41KB [ 2187.070222] TCPv6 27KB 36KB [ 2187.070238] nf_conntrack 4KB 18KB [ 2187.070257] AF_VSOCK 131KB 135KB [ 2187.070308] t10_alua_lu_gp_cache 0KB 3KB [ 2187.070323] sd_ext_cdb 0KB 7KB [ 2187.070333] scsi_sense_cache 1056KB 1060KB [ 2187.070342] virtio_scsi_cmd 16KB 16KB [ 2187.070354] sgpool-128 8KB 8KB [ 2187.070363] sgpool-64 4KB 12KB [ 2187.070372] sgpool-32 2KB 15KB [ 2187.070381] sgpool-16 1KB 7KB [ 2187.070390] sgpool-8 0KB 7KB [ 2187.070407] mqueue_inode_cache 10KB 22KB [ 2187.070424] bio_post_read_ctx 14KB 15KB [ 2187.070495] bio-2 14KB 15KB [ 2187.070504] jfs_mp 7KB 7KB [ 2187.070543] cifs_small_rq 15KB 16KB [ 2187.070553] cifs_request 67KB 67KB [ 2187.070561] cifs_mpx_ids 0KB 7KB [ 2187.070591] nfs_commit_data 3KB 14KB [ 2187.070600] nfs_write_data 34KB 44KB [ 2187.070641] ext4_system_zone 1KB 7KB [ 2187.070672] bio-1 1KB 7KB [ 2187.070683] pid_namespace 2KB 11KB [ 2187.070702] rpc_buffers 17KB 25KB [ 2187.070712] rpc_tasks 2KB 7KB [ 2187.070721] UNIX 185KB 191KB [ 2187.070736] tcp_bind_bucket 1KB 4KB [ 2187.070753] ip_fib_trie 23KB 47KB [ 2187.070763] ip_fib_alias 111KB 181KB [ 2187.070772] ip_dst_cache 4KB 20KB [ 2187.070783] RAW 42KB 60KB [ 2187.070793] UDP 35KB 47KB [ 2187.070805] TCP 16KB 39KB [ 2187.070817] hugetlbfs_inode_cache 3KB 15KB [ 2187.070826] fscache_cookie_jar 1KB 7KB [ 2187.070836] eventpoll_pwq 31KB 51KB [ 2187.070846] eventpoll_epi 59KB 74KB [ 2187.070855] inotify_inode_mark 33KB 43KB [ 2187.070867] request_queue 199KB 199KB [ 2187.070876] blkdev_requests 1KB 3KB [ 2187.070886] blkdev_ioc 13KB 30KB [ 2187.070895] bio-0 450KB 450KB [ 2187.070904] biovec-max 1575KB 1584KB [ 2187.070916] biovec-64 310KB 315KB [ 2187.070925] biovec-16 53KB 56KB [ 2187.070935] bio_integrity_payload 1KB 8KB [ 2187.070944] khugepaged_mm_slot 19KB 34KB [ 2187.070962] uid_cache 0KB 4KB [ 2187.070972] dmaengine-unmap-2 0KB 3KB [ 2187.070992] skbuff_fclone_cache 79KB 101KB [ 2187.071002] skbuff_head_cache 5104KB 6337KB [ 2187.071011] configfs_dir_cache 3KB 7KB [ 2187.071021] file_lock_cache 171KB 198KB [ 2187.071030] file_lock_ctx 9KB 15KB [ 2187.071040] fsnotify_mark_connector 18KB 27KB [ 2187.071049] net_namespace 52KB 52KB [ 2187.071059] shmem_inode_cache 8510KB 8563KB [ 2187.071068] task_delay_info 215KB 415KB [ 2187.071078] taskstats 91KB 103KB [ 2187.071088] proc_dir_entry 695KB 840KB [ 2187.071097] pde_opener 9KB 73KB [ 2187.071106] seq_file 291KB 464KB [ 2187.071115] sigqueue 59KB 82KB [ 2187.071125] kernfs_node_cache 18299KB 18321KB [ 2187.071135] mnt_cache 173KB 196KB [ 2187.071144] filp 5340KB 7376KB [ 2187.071154] names_cache 149655KB 149693KB [ 2187.071163] iint_cache 32KB 43KB [ 2187.071173] key_jar 4KB 7KB [ 2187.071183] uts_namespace 2KB 7KB [ 2187.071192] nsproxy 21KB 43KB [ 2187.071202] vm_area_struct 4016KB 4617KB [ 2187.071212] mm_struct 550KB 669KB [ 2187.071221] fs_cache 142KB 304KB [ 2187.071230] files_cache 485KB 791KB [ 2187.071240] signal_cache 1118KB 1717KB [ 2187.071249] sighand_cache 566KB 652KB [ 2187.071258] task_struct 7272KB 7360KB [ 2187.071268] cred_jar 1123KB 2564KB [ 2187.071278] anon_vma_chain 1510KB 1740KB [ 2187.071287] anon_vma 167KB 323KB [ 2187.071296] pid 64KB 252KB [ 2187.071306] Acpi-Operand 156KB 194KB [ 2187.071315] Acpi-ParseExt 9KB 11KB [ 2187.071324] Acpi-Parse 41KB 47KB [ 2187.071334] Acpi-State 52KB 63KB [ 2187.071343] Acpi-Namespace 20KB 27KB [ 2187.071354] numa_policy 0KB 3KB [ 2187.071364] debug_objects_cache 1449KB 2143KB [ 2187.071373] trace_event_file 297KB 298KB [ 2187.071383] ftrace_event_field 398KB 401KB [ 2187.071393] pool_workqueue 121KB 152KB [ 2187.071404] page->ptl 618KB 766KB [ 2187.071449] kmalloc-2097152 2050KB 2050KB [ 2187.071460] kmalloc-524288 2056KB 2056KB [ 2187.071469] kmalloc-262144 1290KB 1290KB [ 2187.071478] kmalloc-131072 650KB 650KB [ 2187.071486] kmalloc-65536 1848KB 1914KB [ 2187.071495] kmalloc-32768 1650KB 1650KB [ 2187.071504] kmalloc-16384 940KB 990KB [ 2187.071513] kmalloc-8192 3984KB 3984KB [ 2187.071523] kmalloc-4096 21211KB 21237KB [ 2187.071532] kmalloc-2048 11434KB 14464KB [ 2187.071542] kmalloc-1024 5853KB 11489KB [ 2187.071551] kmalloc-512 12249KB 13897KB [ 2187.071560] kmalloc-256 3882KB 5958KB [ 2187.071570] kmalloc-128 980KB 1586KB [ 2187.071579] kmalloc-96 3017KB 4292KB [ 2187.071588] kmalloc-64 2384KB 3432KB [ 2187.071597] kmalloc-32 1835KB 2460KB [ 2187.071607] kmalloc-192 1529KB 2860KB [ 2187.071616] kmem_cache 177KB 183KB [ 2187.071627] Out of memory (oom_kill_allocating_task): Kill process 12206 (systemd-journal) score 0 or sacrifice child [ 2187.071664] Killed process 12206 (systemd-journal) total-vm:46096kB, anon-rss:492kB, file-rss:0kB, shmem-rss:1764kB [ 2187.072666] oom_reaper: reaped process 12206 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1764kB [ 2187.088750] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2187.106044] kworker/u4:6 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2187.162655] Node 0 DMA32 free:18104kB min:35996kB low:44992kB high:53988kB active_anon:68276kB inactive_anon:68500kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2072kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 2187.169246] kworker/u4:6 cpuset=/ mems_allowed=0-1 [ 2187.205701] lowmem_reserve[]: 0 0 1 1 1 [ 2187.229806] CPU: 1 PID: 10085 Comm: kworker/u4:6 Not tainted 4.19.211-syzkaller #0 [ 2187.246995] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2187.250342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2187.262258] lowmem_reserve[]: 0 0 0 0 0 [ 2187.266638] Workqueue: events_unbound call_usermodehelper_exec_work [ 2187.266646] Call Trace: [ 2187.266666] dump_stack+0x1fc/0x2ef [ 2187.266683] dump_header+0x15d/0xc3f [ 2187.266705] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2187.284599] Node 1 Normal free:27468kB min:53876kB low:67344kB high:80812kB active_anon:940kB inactive_anon:43392kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:284kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2187.288072] ? ___ratelimit+0x319/0x590 [ 2187.302353] lowmem_reserve[]: 0 0 0 0 0 [ 2187.304273] oom_kill_process.cold+0x10/0x692 [ 2187.304287] ? oom_badness.part.0+0x135/0x6e0 [ 2187.304302] ? lock_downgrade+0x720/0x720 [ 2187.304320] ? check_preemption_disabled+0x41/0x280 [ 2187.311626] Node 0 DMA: 3*4kB (UE) 3*8kB (UME) 2*16kB (M) 2*32kB (ME) 2*64kB (ME) 3*128kB (UE) 4*256kB (UE) 4*512kB (UE) 3*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10884kB [ 2187.315005] out_of_memory+0x34d/0x1390 [ 2187.315025] ? oom_killer_disable+0x270/0x270 [ 2187.315041] ? mutex_trylock+0x15f/0x1a0 [ 2187.315060] __alloc_pages_nodemask+0x23a2/0x2890 [ 2187.315090] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2187.331143] Node 0 DMA32: 853*4kB (UME) 315*8kB (UME) 253*16kB (ME) 88*32kB (UME) 22*64kB (ME) 3*128kB (M) 0*256kB 1*512kB (U) 3*1024kB (U) 0*2048kB 0*4096kB = 18172kB [ 2187.336455] ? should_fail+0x142/0x7b0 [ 2187.336469] ? fs_reclaim_release+0xd0/0x110 [ 2187.336489] ? check_preemption_disabled+0x41/0x280 [ 2187.341821] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2187.347176] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2187.347190] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2187.347207] copy_process.part.0+0x3cf/0x8260 [ 2187.347227] ? __lock_acquire+0x6de/0x3ff0 [ 2187.347254] ? __lock_acquire+0x6de/0x3ff0 [ 2187.347273] ? umh_complete+0x90/0x90 [ 2187.347289] ? __cleanup_sighand+0x60/0x60 [ 2187.347305] ? mark_held_locks+0xf0/0xf0 [ 2187.365281] Node 1 Normal: 164*4kB (UME) 146*8kB (UME) 109*16kB (UME) 76*32kB (UM) 38*64kB (UM) 20*128kB (UM) 10*256kB (UME) 2*512kB (M) 3*1024kB (UME) 3*2048kB (UM) 1*4096kB (M) = 27888kB [ 2187.368673] ? __lock_acquire+0x6de/0x3ff0 [ 2187.388861] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2187.390057] _do_fork+0x22f/0xf30 [ 2187.398570] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2187.400736] ? umh_complete+0x90/0x90 [ 2187.418649] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2187.422465] ? fork_idle+0x220/0x220 [ 2187.440486] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2187.443998] ? lock_acquire+0x170/0x3c0 [ 2187.444012] ? debug_object_deactivate+0xfc/0x2e0 [ 2187.444030] ? trace_hardirqs_off+0x64/0x200 [ 2187.444049] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2187.451362] 29881 total pagecache pages [ 2187.454730] ? umh_complete+0x90/0x90 [ 2187.454746] kernel_thread+0x2f/0x40 [ 2187.454762] call_usermodehelper_exec_work+0x16d/0x260 [ 2187.454777] ? call_usermodehelper_exec_async+0x6a0/0x6a0 [ 2187.454799] process_one_work+0x864/0x1570 [ 2187.470858] 0 pages in swap cache [ 2187.476190] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2187.476214] worker_thread+0x64c/0x1130 [ 2187.476235] ? __kthread_parkme+0x133/0x1e0 [ 2187.496976] Swap cache stats: add 0, delete 0, find 0/0 [ 2187.498050] ? process_one_work+0x1570/0x1570 [ 2187.509681] Free swap = 0kB [ 2187.514257] kthread+0x33f/0x460 [ 2187.514269] ? kthread_park+0x180/0x180 [ 2187.514286] ret_from_fork+0x24/0x30 [ 2187.519415] Mem-Info: [ 2187.531161] Total swap = 0kB [ 2187.536568] active_anon:17319 inactive_anon:28436 isolated_anon:0 [ 2187.536568] active_file:16 inactive_file:16 isolated_file:0 [ 2187.536568] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2187.536568] slab_reclaimable:14825 slab_unreclaimable:124258 [ 2187.536568] mapped:21844 shmem:29849 pagetables:589 bounce:0 [ 2187.536568] free:14116 free_pcp:0 free_cma:0 [ 2187.557970] 2097051 pages RAM [ 2187.558116] Node 0 active_anon:68336kB inactive_anon:70352kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74044kB dirty:0kB writeback:0kB shmem:75812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2187.572731] 0 pages HighMem/MovableOnly [ 2187.578620] Node 1 active_anon:940kB inactive_anon:43392kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13332kB dirty:0kB writeback:0kB shmem:43584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2187.592738] 369649 pages reserved [ 2187.601749] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:1852kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2187.622229] 0 pages cma reserved [ 2187.622655] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2188.464001] Node 0 DMA32 free:18172kB min:35996kB low:44992kB high:53988kB active_anon:68260kB inactive_anon:68500kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:2068kB bounce:0kB free_pcp:76kB local_pcp:76kB free_cma:0kB [ 2188.497679] lowmem_reserve[]: 0 0 1 1 1 [ 2188.501670] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2188.528006] lowmem_reserve[]: 0 0 0 0 0 [ 2188.532003] Node 1 Normal free:27888kB min:53876kB low:67344kB high:80812kB active_anon:868kB inactive_anon:43388kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:192kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2188.560215] lowmem_reserve[]: 0 0 0 0 0 [ 2188.564225] Node 0 DMA: 3*4kB (UE) 3*8kB (UME) 2*16kB (M) 2*32kB (ME) 2*64kB (ME) 3*128kB (UE) 4*256kB (UE) 4*512kB (UE) 3*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10884kB [ 2188.579466] Node 0 DMA32: 853*4kB (UME) 332*8kB (UME) 253*16kB (ME) 88*32kB (UME) 22*64kB (ME) 3*128kB (M) 0*256kB 1*512kB (U) 3*1024kB (U) 0*2048kB 0*4096kB = 18308kB [ 2188.594722] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2188.605874] Node 1 Normal: 164*4kB (UME) 146*8kB (UME) 109*16kB (UME) 76*32kB (UM) 38*64kB (UM) 20*128kB (UM) 10*256kB (UME) 2*512kB (M) 3*1024kB (UME) 3*2048kB (UM) 1*4096kB (M) = 27888kB [ 2188.622982] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2188.631820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2188.640468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2188.649356] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2188.657999] 29881 total pagecache pages [ 2188.661971] 0 pages in swap cache [ 2188.665495] Swap cache stats: add 0, delete 0, find 0/0 [ 2188.670846] Free swap = 0kB [ 2188.680454] Total swap = 0kB [ 2188.701889] 2097051 pages RAM [ 2188.709790] 0 pages HighMem/MovableOnly [ 2188.734544] 369649 pages reserved [ 2188.738005] 0 pages cma reserved [ 2188.741364] Unreclaimable slab info: [ 2188.765551] Name Used Total [ 2188.771103] pid_2 84KB 100KB [ 2188.780788] batadv_tl_cache 4KB 12KB [ 2188.805308] TIPC 10KB 22KB [ 2188.812534] SCTPv6 14KB 18KB [ 2188.821880] SCTP 15KB 15KB [ 2188.828083] DCCPv6 17KB 37KB [ 2188.844850] DCCP 16KB 28KB [ 2188.850706] RXRPC 11KB 19KB [ 2188.861983] rxrpc_call_jar 78KB 94KB [ 2188.868477] bridge_fdb_cache 9KB 23KB [ 2188.877900] fib6_nodes 156KB 252KB [ 2188.884792] ip6_dst_cache 88KB 472KB [ 2188.891372] RAWv6 86KB 94KB [ 2188.901723] UDPv6 26KB 41KB [ 2188.908686] TCPv6 24KB 30KB [ 2188.924532] nf_conntrack 4KB 18KB [ 2188.932591] AF_VSOCK 131KB 135KB [ 2188.945093] t10_alua_lu_gp_cache 0KB 3KB [ 2188.950730] sd_ext_cdb 0KB 7KB [ 2188.959629] scsi_sense_cache 1056KB 1060KB [ 2188.966701] virtio_scsi_cmd 16KB 16KB [ 2188.977014] sgpool-128 8KB 8KB [ 2188.984965] sgpool-64 4KB 12KB [ 2188.990342] sgpool-32 2KB 15KB [ 2188.998940] sgpool-16 1KB 7KB [ 2189.005918] sgpool-8 0KB 7KB [ 2189.011349] mqueue_inode_cache 10KB 22KB [ 2189.022157] bio_post_read_ctx 14KB 15KB [ 2189.038974] bio-2 14KB 15KB [ 2189.046835] jfs_mp 7KB 7KB [ 2189.058735] cifs_small_rq 15KB 16KB [ 2189.065107] cifs_request 67KB 67KB [ 2189.070477] cifs_mpx_ids 0KB 7KB [ 2189.080571] nfs_commit_data 3KB 14KB [ 2189.086608] nfs_write_data 34KB 44KB [ 2189.122759] ext4_system_zone 1KB 7KB [ 2189.128187] bio-1 1KB 7KB [ 2189.141150] pid_namespace 2KB 11KB [ 2189.146919] rpc_buffers 17KB 25KB [ 2189.152369] rpc_tasks 2KB 7KB [ 2189.163514] UNIX 185KB 191KB [ 2189.168890] tcp_bind_bucket 1KB 4KB [ 2189.179325] ip_fib_trie 23KB 47KB [ 2189.185195] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2189.197738] ip_fib_alias 111KB 181KB [ 2189.204313] ip_dst_cache 4KB 20KB [ 2189.210064] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2189.226320] RAW 42KB 60KB [ 2189.231693] UDP 35KB 47KB [ 2189.238374] TCP 14KB 16KB [ 2189.250769] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2189.262817] hugetlbfs_inode_cache 3KB 15KB [ 2189.268572] fscache_cookie_jar 1KB 7KB [ 2189.278726] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2189.286596] systemd[1]: Stopped Journal Service. [ 2189.292795] eventpoll_pwq 28KB 51KB [ 2189.298167] eventpoll_epi 54KB 74KB [ 2189.306748] systemd[1]: Starting Journal Service... [ 2189.312716] inotify_inode_mark 33KB 43KB [ 2189.318191] request_queue 199KB 199KB [ 2189.323617] blkdev_requests 1KB 3KB [ 2189.328978] blkdev_ioc 18KB 30KB [ 2189.334438] bio-0 471KB 472KB [ 2189.339803] biovec-max 1575KB 1584KB [ 2189.345358] biovec-64 367KB 370KB [ 2189.350714] biovec-16 56KB 60KB [ 2189.356136] bio_integrity_payload 1KB 8KB [ 2189.361842] khugepaged_mm_slot 18KB 34KB [ 2189.367352] uid_cache 0KB 4KB [ 2189.372756] dmaengine-unmap-2 0KB 3KB [ 2189.378117] skbuff_fclone_cache 77KB 101KB [ 2189.383722] skbuff_head_cache 5272KB 6337KB [ 2189.389086] configfs_dir_cache 3KB 7KB [ 2189.394596] file_lock_cache 171KB 198KB [ 2189.399957] file_lock_ctx 9KB 15KB [ 2189.405377] fsnotify_mark_connector 18KB 27KB [ 2189.411257] net_namespace 52KB 52KB [ 2189.416689] shmem_inode_cache 8501KB 8563KB [ 2189.422048] task_delay_info 213KB 415KB [ 2189.427466] taskstats 90KB 103KB [ 2189.432875] proc_dir_entry 695KB 840KB [ 2189.438231] pde_opener 9KB 73KB [ 2189.443641] seq_file 295KB 464KB [ 2189.449000] sigqueue 72KB 82KB [ 2189.454550] kernfs_node_cache 18309KB 18321KB [ 2189.459906] mnt_cache 173KB 196KB [ 2189.465357] filp 5305KB 7372KB [ 2189.470713] names_cache 148584KB 148584KB [ 2189.476140] iint_cache 32KB 43KB [ 2189.481499] key_jar 4KB 7KB [ 2189.486916] uts_namespace 2KB 7KB [ 2189.492300] nsproxy 19KB 43KB [ 2189.497726] vm_area_struct 4013KB 4617KB [ 2189.503336] mm_struct 537KB 669KB [ 2189.508699] fs_cache 136KB 304KB [ 2189.514145] files_cache 475KB 783KB [ 2189.519510] signal_cache 1108KB 1717KB [ 2189.524917] sighand_cache 555KB 652KB [ 2189.530290] task_struct 7272KB 7347KB [ 2189.536526] cred_jar 1117KB 2564KB [ 2189.541885] anon_vma_chain 1497KB 1740KB [ 2189.549797] anon_vma 153KB 323KB [ 2189.555377] pid 64KB 252KB [ 2189.560746] Acpi-Operand 156KB 194KB [ 2189.570121] Acpi-ParseExt 9KB 11KB [ 2189.575673] Acpi-Parse 41KB 47KB [ 2189.581037] Acpi-State 52KB 63KB [ 2189.586480] Acpi-Namespace 20KB 27KB [ 2189.591841] numa_policy 0KB 3KB [ 2189.597266] debug_objects_cache 1449KB 2143KB [ 2189.602853] trace_event_file 297KB 298KB [ 2189.608216] ftrace_event_field 398KB 401KB [ 2189.613735] pool_workqueue 121KB 152KB [ 2189.619097] page->ptl 608KB 766KB [ 2189.624550] kmalloc-2097152 2050KB 2050KB [ 2189.629911] kmalloc-524288 2056KB 2056KB [ 2189.635358] kmalloc-262144 1290KB 1290KB [ 2189.640721] kmalloc-131072 650KB 650KB [ 2189.650068] kmalloc-65536 1848KB 1914KB [ 2189.656278] kmalloc-32768 1650KB 1650KB [ 2189.661640] kmalloc-16384 940KB 990KB [ 2189.670932] kmalloc-8192 3984KB 3984KB [ 2189.677175] kmalloc-4096 21245KB 21279KB [ 2189.682540] kmalloc-2048 11381KB 14413KB [ 2189.691861] kmalloc-1024 5934KB 11489KB [ 2189.698119] kmalloc-512 12637KB 13897KB [ 2189.707416] kmalloc-256 3891KB 5958KB [ 2189.713651] kmalloc-128 975KB 1586KB [ 2189.719012] kmalloc-96 3070KB 4292KB [ 2189.728306] kmalloc-64 2372KB 3432KB [ 2189.734846] kmalloc-32 1835KB 2460KB [ 2189.740211] kmalloc-192 1559KB 2860KB [ 2189.749515] kmem_cache 177KB 183KB [ 2189.755746] Out of memory: Kill process 14943 (syz-executor.0) score 1001 or sacrifice child [ 2189.768924] Killed process 14953 (syz-executor.0) total-vm:56940kB, anon-rss:404kB, file-rss:14340kB, shmem-rss:68kB [ 2189.781686] oom_reaper: reaped process 14953 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2189.959172] systemd-journald[14987]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2190.522470] systemd[1]: Started Journal Service. 06:30:53 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) 06:30:53 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 06:30:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) (async) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) (async) 06:30:53 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000040)={&(0x7f00000001c0)=[0x10000, 0x0, 0x1, 0xe54e, 0x1, 0x84e, 0x1, 0x5, 0x6, 0x1, 0x0, 0x0, 0x9, 0x7709, 0x986, 0xffffffe0, 0x3ff, 0xfffffffe, 0x7fffffff, 0x6, 0x1, 0x9, 0x5, 0x8, 0x9, 0x20, 0x800, 0x800, 0xb62, 0x6, 0xfffffff9, 0x0, 0x0, 0x3, 0x7, 0x6, 0x9, 0x5, 0x0, 0xf70e, 0x3f, 0xb0, 0x5, 0x4c0, 0x10a8, 0x8001, 0x0, 0x53, 0x4b, 0x6, 0xffff19d8, 0x3, 0x6, 0x5, 0x6, 0x81, 0x7, 0x5, 0xb29, 0x3, 0x1, 0x7b, 0x2, 0x2e48efe4, 0x2, 0x1, 0x6, 0x7f, 0x9, 0x5, 0x80000001, 0x101, 0x9, 0xe38, 0x3, 0x0, 0x4, 0x10001, 0x8, 0x9, 0x5, 0x7, 0x5e0, 0x80000001, 0x67f, 0x5, 0x10, 0x5, 0x101, 0x4, 0x1, 0x3, 0x40, 0x3ff, 0x8, 0x1f65, 0xca4d, 0x800, 0x24cf, 0x9, 0x101, 0x8, 0x6a, 0x1f, 0x6, 0x1, 0x2, 0x2, 0x9, 0x71cc, 0x1, 0x100, 0x9, 0x0, 0x763, 0x3, 0x7ff, 0x7ff, 0x0, 0x80, 0x101, 0x7, 0x5ad, 0x3ff, 0xffff, 0x9, 0x1, 0x8, 0x2, 0x0, 0xff, 0x6, 0x9, 0x4, 0xfd0, 0xabbe, 0x20, 0x8, 0xe9, 0x3, 0x9, 0x4, 0x2, 0x1, 0x1, 0x7fffffff, 0x3, 0x0, 0x10001, 0x6, 0x8001, 0x401, 0xffff, 0xfffffffe, 0xfff, 0xffffffff, 0x80, 0x0, 0x3, 0x1000, 0x3, 0x0, 0x1, 0x6, 0x80000001, 0x0, 0x6, 0x9, 0x6, 0x1, 0x7, 0x0, 0x0, 0x33c0, 0x5, 0x80000000, 0x3, 0x6, 0x5af4, 0x1, 0xffff, 0x9, 0x1, 0x9, 0x0, 0x6, 0x4, 0x5, 0x800, 0x9, 0x9, 0x3, 0xfff, 0x3, 0x40, 0x5, 0xe86, 0x4, 0x4, 0x80000001, 0xff, 0xffff0001, 0x8, 0x3, 0x35, 0x39, 0x6, 0x5330, 0x9, 0x1000, 0x8, 0x8, 0x7, 0x9, 0x2, 0x80000000, 0xef11, 0x3ff, 0x10000, 0x7, 0x81e, 0x4362, 0x10000, 0x1, 0x9, 0x7f, 0x7, 0x2, 0x7f, 0xb96, 0x7, 0x1ff, 0xd5d2, 0x7ff, 0x100, 0x5, 0x7ff, 0x24, 0x3, 0x7fffffff, 0x6, 0x5, 0x93, 0x10000, 0x0, 0x80000000, 0x602, 0xce79, 0x1, 0x8, 0x6, 0x3, 0x0, 0xfff, 0x80000001, 0x4, 0x3f, 0x1, 0x8, 0x79, 0x7, 0xff, 0x7, 0x4, 0x9, 0x10001, 0x1, 0x81, 0x7fffffff, 0x7, 0x5, 0x4, 0x200, 0x8, 0x10001, 0x10001, 0x6, 0x5, 0x2, 0x1, 0x1, 0x9, 0x63d3, 0x0, 0x5f, 0x1, 0xe15c, 0x7ff, 0x2, 0x3, 0xfffffffc, 0xf, 0x4, 0x3f, 0x10, 0x2, 0x0, 0x7f, 0xfe, 0xfffff038, 0x7, 0xdf5, 0x9, 0x0, 0x4, 0x8001, 0x100, 0x1, 0x9, 0x8, 0x3, 0x1, 0x86a3, 0xff, 0x432d, 0x9, 0x0, 0x2, 0x5, 0x5, 0xff, 0x7, 0x6, 0x40, 0x7, 0x41e5d66a, 0x800, 0xff, 0x7fff, 0x5, 0x6, 0x8, 0x4, 0x8, 0x6, 0x57, 0x8, 0x9, 0xfffffff4, 0x6, 0x81, 0x5, 0x5ecdbe3c, 0x80000001, 0xffffffff, 0x9, 0x4, 0x9, 0x6, 0x4, 0x8, 0x5cd0, 0x20, 0x7fffffff, 0xffffffff, 0x2, 0x1, 0x20, 0x3, 0xfff, 0x7, 0x1, 0x8000, 0x9, 0x772e, 0x7f, 0x41, 0xffffffff, 0xffffffff, 0x7fff, 0x400, 0xfffffff9, 0x0, 0x7, 0x4, 0x4, 0x37, 0x6, 0x832, 0x80000001, 0x8001, 0x2, 0xbce, 0x2, 0x401, 0x69f, 0x48, 0x800, 0x5, 0x2a, 0xfffffffe, 0x5, 0x7, 0x1a, 0x0, 0x2, 0x1, 0x992, 0x4, 0x8, 0x8, 0x7, 0x1, 0x9e, 0x1400, 0xb165, 0x9, 0x1ff, 0x4, 0x3, 0x1, 0x3ff, 0x7, 0x3, 0x401, 0x80000001, 0x76c, 0x7, 0x3, 0xb, 0x700, 0x5, 0x80, 0x7, 0x20, 0xa6, 0x6, 0x1, 0x5b6, 0x1, 0xffffffff, 0x8000, 0x1000, 0x80000000, 0xb1e2b2f6, 0x101, 0x7ff, 0x1000, 0x9, 0x48, 0x9, 0x7, 0x5, 0x1b1eb9a5, 0x80000000, 0x2, 0x56, 0x81, 0x40, 0xd486, 0xfffffffb, 0xeba, 0x2b, 0x6, 0x81e, 0xda, 0x1, 0x40000, 0x80000001, 0x10001, 0x7, 0x8c, 0x0, 0x2, 0xfffff801, 0xb9, 0x0, 0x44b0, 0x80000000, 0x4, 0xfffffff8, 0x80000000, 0x400, 0x1, 0x800, 0x8000, 0x7, 0xe40f, 0x7ff, 0x3c9d, 0x8, 0x0, 0x8001, 0x1, 0xffffffff, 0xffffffff, 0xe62, 0xfffffc00, 0x1000, 0x1, 0x1ff, 0x5, 0x9e1, 0x3, 0x1, 0x1, 0x7fff, 0x1, 0x0, 0x6f24d2c1, 0x7fffffff, 0x7, 0x8, 0x20, 0x20, 0x800, 0x4, 0x9, 0x2, 0x3, 0x7, 0x4, 0x5, 0x4, 0x9, 0x7, 0x7, 0x8000, 0x401, 0x100, 0x2, 0x401, 0xf4, 0x0, 0x5, 0x6ac, 0x200, 0x100, 0x80, 0x3, 0x10000, 0x4, 0xc71, 0x80, 0xe5, 0x1000, 0x3ff, 0x5a8, 0xcf, 0x4, 0x80000000, 0x0, 0x80000001, 0x401, 0x10001, 0x0, 0x1f, 0x4, 0xd40d, 0x1f, 0x0, 0x1, 0x1, 0x8, 0x800, 0x100, 0x0, 0x3f, 0xe778, 0x40, 0x7f, 0x7, 0x3ff, 0x8, 0x2, 0x4, 0x1, 0x45, 0x1065, 0x9c9, 0x6, 0x81, 0x4, 0x7, 0x81, 0x1, 0x4, 0x8, 0x10000, 0x1, 0x5, 0x1f, 0x5, 0x800, 0x1, 0xffd, 0xf, 0xfff, 0xffffffff, 0x0, 0xff, 0xcff, 0xfffe000, 0x4, 0x2, 0x318, 0x1f, 0x8, 0xf2, 0x70, 0x4, 0x9, 0xffff2cab, 0x101, 0x2, 0x7fffffff, 0x6b04, 0x80, 0x0, 0x4, 0x2, 0x4, 0x1ff, 0x2, 0xfff, 0xffff, 0x1, 0x1f, 0x1f, 0x7, 0x6, 0x20, 0x8, 0xe000, 0x1e6, 0x8000, 0x0, 0x20, 0x1f, 0x5, 0x3, 0x6, 0xfffffff7, 0x9, 0x8001, 0x5, 0x64e, 0x401, 0x9, 0x9, 0x1, 0x0, 0x0, 0x9, 0x44a8, 0x83a3, 0x0, 0x6, 0x101, 0x3f, 0x0, 0x81, 0x400, 0xc6, 0x15, 0x3, 0x8, 0x8, 0x7, 0x5, 0x65, 0xa, 0x400, 0x28, 0x1, 0x9, 0x3f, 0x2, 0x7, 0x0, 0xffffff01, 0x7, 0x82, 0x200, 0x9, 0x7, 0x101, 0x8000, 0x2, 0x0, 0x9, 0x1, 0x1, 0xeb6, 0xb42a, 0x261, 0x5, 0x80, 0x7692, 0x4, 0x544, 0x0, 0xce, 0x5, 0x4, 0x0, 0x5, 0x3, 0xcd, 0xfffffff8, 0x78, 0x61a, 0x7ff, 0x8400, 0x5, 0x7, 0x9, 0x7fff, 0xffffbcfe, 0x6, 0x81, 0x7, 0x20, 0x80, 0x5, 0x100, 0x7, 0xcdfe, 0x1, 0x2, 0x5, 0x8, 0x1f, 0x4, 0x8, 0x6f, 0x401, 0x10001, 0x0, 0x80000001, 0x10001, 0x5, 0x7, 0x6, 0x80000000, 0x5, 0x8, 0x585, 0xffffffe0, 0x0, 0x1ff, 0xffffffff, 0x81, 0x8, 0x4, 0xbc1, 0x0, 0x1ff, 0x10001, 0x6, 0x0, 0x0, 0x2, 0x3f, 0x0, 0x800, 0x8, 0x3, 0x4, 0x5, 0xbab, 0xe83, 0x10001, 0x57, 0xffffffff, 0x99, 0x0, 0x7fff, 0x5, 0x1, 0x1, 0x80, 0x9, 0x7a4, 0x49d, 0x9, 0x1, 0x4, 0x8, 0x2, 0x1, 0xa4, 0x1ff, 0x80000000, 0x2, 0x7, 0x200, 0x8, 0x4, 0x6, 0x53, 0x1ff, 0x10001, 0x80000000, 0xffffffe7, 0x8, 0x0, 0x0, 0x200, 0x8, 0x4, 0x8, 0x8d, 0x8, 0x800, 0x800, 0x3ff, 0x1619a6fa, 0x7, 0x9, 0x4, 0x54d3, 0x9, 0x164, 0x2, 0x10000, 0x5, 0x3, 0x8, 0xfffffff7, 0x4, 0x1004, 0x7fffffff, 0x10001, 0x7, 0x0, 0x1ff, 0x66, 0x6, 0xffff, 0x8, 0x81, 0x8, 0x0, 0x6, 0x1, 0xffffffff, 0x0, 0xfffffffb, 0x8000, 0xe7f6, 0x3, 0x8, 0x9, 0x2, 0x1, 0x644b, 0x80000001, 0x7, 0xfff, 0xfff, 0x2, 0x1, 0x3ff, 0x8, 0x5a, 0x7, 0x44, 0x4, 0x10000, 0xfff, 0x8de, 0x9, 0x9, 0x7fffffff, 0x6, 0x7fffffff, 0x2, 0x4, 0x1, 0x3f, 0xfff, 0x400, 0x1, 0x80000001, 0xfff, 0x2, 0x7, 0xabf, 0x7, 0x6, 0x98, 0x8, 0xcb79, 0x7, 0x5, 0x401, 0x2, 0x7, 0x7ff, 0xfce, 0x9, 0x8, 0x4, 0x10001, 0x6, 0x1, 0xc4e870, 0x45, 0xffffffff, 0x9, 0x6, 0x6, 0x2fe5, 0x6, 0x1, 0x1, 0xc57a, 0x10001, 0x8, 0x1f, 0x0, 0x3, 0x8, 0x7ff, 0x0, 0x2c, 0x3862, 0x10001, 0x8, 0x1, 0x3, 0x1, 0x6, 0xa0, 0x7, 0x40, 0x100, 0x9, 0xff, 0x8, 0x6, 0xad, 0xffffff00, 0x81, 0x6, 0xa9ce, 0x6df1, 0x10000, 0x16cd, 0x3, 0x3ff, 0x800, 0x6, 0x1, 0x9, 0x0, 0x9, 0x3, 0x81, 0x6, 0x1000, 0x8, 0x81, 0x9, 0x1ff, 0x7, 0xfffff0eb, 0xd4, 0x1, 0x40, 0x88f7, 0x2e0, 0x80000001, 0x6, 0xd9, 0x100, 0x80, 0x1, 0x80, 0x7, 0x0, 0x5, 0x1, 0x3, 0x3, 0x5, 0x8001, 0x6, 0x9, 0xbaf0, 0xfffeffff, 0x7, 0x101, 0x3, 0x40, 0x2, 0x3, 0x1000, 0x80000001, 0x17, 0x7, 0x8000, 0x5, 0xaf, 0x8, 0x1, 0x4, 0x6, 0x20, 0x8a, 0x9, 0x8, 0x200, 0x8, 0x6, 0x25b616a4, 0x8, 0x74bf, 0x7e, 0x400, 0x7, 0xfa, 0x3, 0x7fff, 0x8, 0x3, 0x440b8f4, 0x1000, 0xdd90, 0x2, 0x7fffffff, 0x9, 0xa37b], 0x6, 0x400, 0x7}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000040)={&(0x7f00000001c0)=[0x10000, 0x0, 0x1, 0xe54e, 0x1, 0x84e, 0x1, 0x5, 0x6, 0x1, 0x0, 0x0, 0x9, 0x7709, 0x986, 0xffffffe0, 0x3ff, 0xfffffffe, 0x7fffffff, 0x6, 0x1, 0x9, 0x5, 0x8, 0x9, 0x20, 0x800, 0x800, 0xb62, 0x6, 0xfffffff9, 0x0, 0x0, 0x3, 0x7, 0x6, 0x9, 0x5, 0x0, 0xf70e, 0x3f, 0xb0, 0x5, 0x4c0, 0x10a8, 0x8001, 0x0, 0x53, 0x4b, 0x6, 0xffff19d8, 0x3, 0x6, 0x5, 0x6, 0x81, 0x7, 0x5, 0xb29, 0x3, 0x1, 0x7b, 0x2, 0x2e48efe4, 0x2, 0x1, 0x6, 0x7f, 0x9, 0x5, 0x80000001, 0x101, 0x9, 0xe38, 0x3, 0x0, 0x4, 0x10001, 0x8, 0x9, 0x5, 0x7, 0x5e0, 0x80000001, 0x67f, 0x5, 0x10, 0x5, 0x101, 0x4, 0x1, 0x3, 0x40, 0x3ff, 0x8, 0x1f65, 0xca4d, 0x800, 0x24cf, 0x9, 0x101, 0x8, 0x6a, 0x1f, 0x6, 0x1, 0x2, 0x2, 0x9, 0x71cc, 0x1, 0x100, 0x9, 0x0, 0x763, 0x3, 0x7ff, 0x7ff, 0x0, 0x80, 0x101, 0x7, 0x5ad, 0x3ff, 0xffff, 0x9, 0x1, 0x8, 0x2, 0x0, 0xff, 0x6, 0x9, 0x4, 0xfd0, 0xabbe, 0x20, 0x8, 0xe9, 0x3, 0x9, 0x4, 0x2, 0x1, 0x1, 0x7fffffff, 0x3, 0x0, 0x10001, 0x6, 0x8001, 0x401, 0xffff, 0xfffffffe, 0xfff, 0xffffffff, 0x80, 0x0, 0x3, 0x1000, 0x3, 0x0, 0x1, 0x6, 0x80000001, 0x0, 0x6, 0x9, 0x6, 0x1, 0x7, 0x0, 0x0, 0x33c0, 0x5, 0x80000000, 0x3, 0x6, 0x5af4, 0x1, 0xffff, 0x9, 0x1, 0x9, 0x0, 0x6, 0x4, 0x5, 0x800, 0x9, 0x9, 0x3, 0xfff, 0x3, 0x40, 0x5, 0xe86, 0x4, 0x4, 0x80000001, 0xff, 0xffff0001, 0x8, 0x3, 0x35, 0x39, 0x6, 0x5330, 0x9, 0x1000, 0x8, 0x8, 0x7, 0x9, 0x2, 0x80000000, 0xef11, 0x3ff, 0x10000, 0x7, 0x81e, 0x4362, 0x10000, 0x1, 0x9, 0x7f, 0x7, 0x2, 0x7f, 0xb96, 0x7, 0x1ff, 0xd5d2, 0x7ff, 0x100, 0x5, 0x7ff, 0x24, 0x3, 0x7fffffff, 0x6, 0x5, 0x93, 0x10000, 0x0, 0x80000000, 0x602, 0xce79, 0x1, 0x8, 0x6, 0x3, 0x0, 0xfff, 0x80000001, 0x4, 0x3f, 0x1, 0x8, 0x79, 0x7, 0xff, 0x7, 0x4, 0x9, 0x10001, 0x1, 0x81, 0x7fffffff, 0x7, 0x5, 0x4, 0x200, 0x8, 0x10001, 0x10001, 0x6, 0x5, 0x2, 0x1, 0x1, 0x9, 0x63d3, 0x0, 0x5f, 0x1, 0xe15c, 0x7ff, 0x2, 0x3, 0xfffffffc, 0xf, 0x4, 0x3f, 0x10, 0x2, 0x0, 0x7f, 0xfe, 0xfffff038, 0x7, 0xdf5, 0x9, 0x0, 0x4, 0x8001, 0x100, 0x1, 0x9, 0x8, 0x3, 0x1, 0x86a3, 0xff, 0x432d, 0x9, 0x0, 0x2, 0x5, 0x5, 0xff, 0x7, 0x6, 0x40, 0x7, 0x41e5d66a, 0x800, 0xff, 0x7fff, 0x5, 0x6, 0x8, 0x4, 0x8, 0x6, 0x57, 0x8, 0x9, 0xfffffff4, 0x6, 0x81, 0x5, 0x5ecdbe3c, 0x80000001, 0xffffffff, 0x9, 0x4, 0x9, 0x6, 0x4, 0x8, 0x5cd0, 0x20, 0x7fffffff, 0xffffffff, 0x2, 0x1, 0x20, 0x3, 0xfff, 0x7, 0x1, 0x8000, 0x9, 0x772e, 0x7f, 0x41, 0xffffffff, 0xffffffff, 0x7fff, 0x400, 0xfffffff9, 0x0, 0x7, 0x4, 0x4, 0x37, 0x6, 0x832, 0x80000001, 0x8001, 0x2, 0xbce, 0x2, 0x401, 0x69f, 0x48, 0x800, 0x5, 0x2a, 0xfffffffe, 0x5, 0x7, 0x1a, 0x0, 0x2, 0x1, 0x992, 0x4, 0x8, 0x8, 0x7, 0x1, 0x9e, 0x1400, 0xb165, 0x9, 0x1ff, 0x4, 0x3, 0x1, 0x3ff, 0x7, 0x3, 0x401, 0x80000001, 0x76c, 0x7, 0x3, 0xb, 0x700, 0x5, 0x80, 0x7, 0x20, 0xa6, 0x6, 0x1, 0x5b6, 0x1, 0xffffffff, 0x8000, 0x1000, 0x80000000, 0xb1e2b2f6, 0x101, 0x7ff, 0x1000, 0x9, 0x48, 0x9, 0x7, 0x5, 0x1b1eb9a5, 0x80000000, 0x2, 0x56, 0x81, 0x40, 0xd486, 0xfffffffb, 0xeba, 0x2b, 0x6, 0x81e, 0xda, 0x1, 0x40000, 0x80000001, 0x10001, 0x7, 0x8c, 0x0, 0x2, 0xfffff801, 0xb9, 0x0, 0x44b0, 0x80000000, 0x4, 0xfffffff8, 0x80000000, 0x400, 0x1, 0x800, 0x8000, 0x7, 0xe40f, 0x7ff, 0x3c9d, 0x8, 0x0, 0x8001, 0x1, 0xffffffff, 0xffffffff, 0xe62, 0xfffffc00, 0x1000, 0x1, 0x1ff, 0x5, 0x9e1, 0x3, 0x1, 0x1, 0x7fff, 0x1, 0x0, 0x6f24d2c1, 0x7fffffff, 0x7, 0x8, 0x20, 0x20, 0x800, 0x4, 0x9, 0x2, 0x3, 0x7, 0x4, 0x5, 0x4, 0x9, 0x7, 0x7, 0x8000, 0x401, 0x100, 0x2, 0x401, 0xf4, 0x0, 0x5, 0x6ac, 0x200, 0x100, 0x80, 0x3, 0x10000, 0x4, 0xc71, 0x80, 0xe5, 0x1000, 0x3ff, 0x5a8, 0xcf, 0x4, 0x80000000, 0x0, 0x80000001, 0x401, 0x10001, 0x0, 0x1f, 0x4, 0xd40d, 0x1f, 0x0, 0x1, 0x1, 0x8, 0x800, 0x100, 0x0, 0x3f, 0xe778, 0x40, 0x7f, 0x7, 0x3ff, 0x8, 0x2, 0x4, 0x1, 0x45, 0x1065, 0x9c9, 0x6, 0x81, 0x4, 0x7, 0x81, 0x1, 0x4, 0x8, 0x10000, 0x1, 0x5, 0x1f, 0x5, 0x800, 0x1, 0xffd, 0xf, 0xfff, 0xffffffff, 0x0, 0xff, 0xcff, 0xfffe000, 0x4, 0x2, 0x318, 0x1f, 0x8, 0xf2, 0x70, 0x4, 0x9, 0xffff2cab, 0x101, 0x2, 0x7fffffff, 0x6b04, 0x80, 0x0, 0x4, 0x2, 0x4, 0x1ff, 0x2, 0xfff, 0xffff, 0x1, 0x1f, 0x1f, 0x7, 0x6, 0x20, 0x8, 0xe000, 0x1e6, 0x8000, 0x0, 0x20, 0x1f, 0x5, 0x3, 0x6, 0xfffffff7, 0x9, 0x8001, 0x5, 0x64e, 0x401, 0x9, 0x9, 0x1, 0x0, 0x0, 0x9, 0x44a8, 0x83a3, 0x0, 0x6, 0x101, 0x3f, 0x0, 0x81, 0x400, 0xc6, 0x15, 0x3, 0x8, 0x8, 0x7, 0x5, 0x65, 0xa, 0x400, 0x28, 0x1, 0x9, 0x3f, 0x2, 0x7, 0x0, 0xffffff01, 0x7, 0x82, 0x200, 0x9, 0x7, 0x101, 0x8000, 0x2, 0x0, 0x9, 0x1, 0x1, 0xeb6, 0xb42a, 0x261, 0x5, 0x80, 0x7692, 0x4, 0x544, 0x0, 0xce, 0x5, 0x4, 0x0, 0x5, 0x3, 0xcd, 0xfffffff8, 0x78, 0x61a, 0x7ff, 0x8400, 0x5, 0x7, 0x9, 0x7fff, 0xffffbcfe, 0x6, 0x81, 0x7, 0x20, 0x80, 0x5, 0x100, 0x7, 0xcdfe, 0x1, 0x2, 0x5, 0x8, 0x1f, 0x4, 0x8, 0x6f, 0x401, 0x10001, 0x0, 0x80000001, 0x10001, 0x5, 0x7, 0x6, 0x80000000, 0x5, 0x8, 0x585, 0xffffffe0, 0x0, 0x1ff, 0xffffffff, 0x81, 0x8, 0x4, 0xbc1, 0x0, 0x1ff, 0x10001, 0x6, 0x0, 0x0, 0x2, 0x3f, 0x0, 0x800, 0x8, 0x3, 0x4, 0x5, 0xbab, 0xe83, 0x10001, 0x57, 0xffffffff, 0x99, 0x0, 0x7fff, 0x5, 0x1, 0x1, 0x80, 0x9, 0x7a4, 0x49d, 0x9, 0x1, 0x4, 0x8, 0x2, 0x1, 0xa4, 0x1ff, 0x80000000, 0x2, 0x7, 0x200, 0x8, 0x4, 0x6, 0x53, 0x1ff, 0x10001, 0x80000000, 0xffffffe7, 0x8, 0x0, 0x0, 0x200, 0x8, 0x4, 0x8, 0x8d, 0x8, 0x800, 0x800, 0x3ff, 0x1619a6fa, 0x7, 0x9, 0x4, 0x54d3, 0x9, 0x164, 0x2, 0x10000, 0x5, 0x3, 0x8, 0xfffffff7, 0x4, 0x1004, 0x7fffffff, 0x10001, 0x7, 0x0, 0x1ff, 0x66, 0x6, 0xffff, 0x8, 0x81, 0x8, 0x0, 0x6, 0x1, 0xffffffff, 0x0, 0xfffffffb, 0x8000, 0xe7f6, 0x3, 0x8, 0x9, 0x2, 0x1, 0x644b, 0x80000001, 0x7, 0xfff, 0xfff, 0x2, 0x1, 0x3ff, 0x8, 0x5a, 0x7, 0x44, 0x4, 0x10000, 0xfff, 0x8de, 0x9, 0x9, 0x7fffffff, 0x6, 0x7fffffff, 0x2, 0x4, 0x1, 0x3f, 0xfff, 0x400, 0x1, 0x80000001, 0xfff, 0x2, 0x7, 0xabf, 0x7, 0x6, 0x98, 0x8, 0xcb79, 0x7, 0x5, 0x401, 0x2, 0x7, 0x7ff, 0xfce, 0x9, 0x8, 0x4, 0x10001, 0x6, 0x1, 0xc4e870, 0x45, 0xffffffff, 0x9, 0x6, 0x6, 0x2fe5, 0x6, 0x1, 0x1, 0xc57a, 0x10001, 0x8, 0x1f, 0x0, 0x3, 0x8, 0x7ff, 0x0, 0x2c, 0x3862, 0x10001, 0x8, 0x1, 0x3, 0x1, 0x6, 0xa0, 0x7, 0x40, 0x100, 0x9, 0xff, 0x8, 0x6, 0xad, 0xffffff00, 0x81, 0x6, 0xa9ce, 0x6df1, 0x10000, 0x16cd, 0x3, 0x3ff, 0x800, 0x6, 0x1, 0x9, 0x0, 0x9, 0x3, 0x81, 0x6, 0x1000, 0x8, 0x81, 0x9, 0x1ff, 0x7, 0xfffff0eb, 0xd4, 0x1, 0x40, 0x88f7, 0x2e0, 0x80000001, 0x6, 0xd9, 0x100, 0x80, 0x1, 0x80, 0x7, 0x0, 0x5, 0x1, 0x3, 0x3, 0x5, 0x8001, 0x6, 0x9, 0xbaf0, 0xfffeffff, 0x7, 0x101, 0x3, 0x40, 0x2, 0x3, 0x1000, 0x80000001, 0x17, 0x7, 0x8000, 0x5, 0xaf, 0x8, 0x1, 0x4, 0x6, 0x20, 0x8a, 0x9, 0x8, 0x200, 0x8, 0x6, 0x25b616a4, 0x8, 0x74bf, 0x7e, 0x400, 0x7, 0xfa, 0x3, 0x7fff, 0x8, 0x3, 0x440b8f4, 0x1000, 0xdd90, 0x2, 0x7fffffff, 0x9, 0xa37b], 0x6, 0x400, 0x7}) (async) 06:30:53 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000140)=""/144, 0x90}, {&(0x7f0000000200)=""/208, 0xd0}, {&(0x7f0000000300)=""/179, 0xb3}, {&(0x7f00000003c0)=""/43, 0x2b}], 0x5, &(0x7f0000000640)=""/4096, 0x1000}, 0xa042) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f0000000000)) 06:30:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @sliced={0x65, [0x5, 0x4, 0x3f, 0x20, 0x6, 0x8000, 0x0, 0x64b4, 0x7, 0x7, 0xcf0e, 0xff, 0x5, 0x1, 0x9, 0x5, 0x8, 0xa88, 0xcf, 0x0, 0x7, 0x3, 0x80, 0x4, 0x1f, 0xff80, 0x9, 0x800, 0x7ff, 0x0, 0x800, 0x0, 0xfe01, 0xf2d, 0x8001, 0x7, 0x0, 0x80, 0x0, 0x2, 0x9, 0x4, 0x6, 0x6, 0x20, 0x7, 0x8, 0x7fff], 0x1000}}, 0x5}) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) write$bt_hci(r2, &(0x7f0000000080)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"42082f8dcf78f9d3"}}}, 0xc) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000040), 0x4) 06:30:53 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}], 0x8) 06:30:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) (async, rerun: 64) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) (rerun: 64) 06:30:53 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}], 0x8) 06:30:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffff, 0x28084) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000080)={{@local, 0x3}, 0xfff, 0x783, 0x81, 0x5}) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000000)) 06:30:53 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}], 0x8) 06:30:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffff, 0x28084) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000080)={{@local, 0x3}, 0xfff, 0x783, 0x81, 0x5}) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000000)) [ 2195.022334] Bluetooth: hci1: command 0x0c1a tx timeout [ 2197.901637] oom_reaper: reaped process 14994 (syz-executor.4), now anon-rss:0kB, file-rss:13632kB, shmem-rss:0kB [ 2197.936239] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2197.952273] in:imklog cpuset=/ mems_allowed=0-1 [ 2197.956980] CPU: 0 PID: 14879 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2197.965383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2197.974845] Call Trace: [ 2197.977442] dump_stack+0x1fc/0x2ef [ 2197.979300] syz-executor.4: vmalloc: allocation failure, allocated 1701879808 of 2128986112 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2197.981070] dump_header+0x15d/0xc3f [ 2197.994871] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2197.998540] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2198.008699] ? ___ratelimit+0x319/0x590 [ 2198.012671] oom_kill_process.cold+0x10/0x692 [ 2198.017167] ? check_preemption_disabled+0x41/0x280 [ 2198.022198] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2198.027490] out_of_memory+0x1072/0x1390 [ 2198.031544] ? oom_killer_disable+0x270/0x270 [ 2198.036031] ? mutex_trylock+0x15f/0x1a0 [ 2198.040099] __alloc_pages_nodemask+0x23a2/0x2890 [ 2198.044958] ? find_get_entry+0x4cd/0x8a0 [ 2198.049112] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2198.053979] alloc_pages_current+0x193/0x2a0 [ 2198.058390] filemap_fault+0x146e/0x2180 [ 2198.062459] ext4_filemap_fault+0x84/0xb0 [ 2198.066603] __do_fault+0x10b/0x4b0 [ 2198.070223] __handle_mm_fault+0x273b/0x41c0 [ 2198.074627] ? vm_insert_page+0x9c0/0x9c0 [ 2198.078774] ? lock_downgrade+0x720/0x720 [ 2198.082920] ? check_preemption_disabled+0x41/0x280 [ 2198.087945] handle_mm_fault+0x436/0xb10 [ 2198.092017] __do_page_fault+0x68e/0xd60 [ 2198.096071] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2198.101538] ? spurious_fault+0x840/0x840 [ 2198.105681] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2198.110516] ? page_fault+0x8/0x30 [ 2198.114045] page_fault+0x1e/0x30 [ 2198.117485] RIP: 0033:0x7ff8a645222d [ 2198.121187] Code: Bad RIP value. [ 2198.124549] RSP: 002b:00007ff8a3dee580 EFLAGS: 00010293 [ 2198.129900] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007ff8a645222d [ 2198.137935] RDX: 0000000000001fa0 RSI: 00007ff8a3deeda0 RDI: 0000000000000004 [ 2198.145192] RBP: 000056143d9669d0 R08: 0000000000000000 R09: 0000000004000001 [ 2198.152449] R10: 0000000000000001 R11: 0000000000000293 R12: 00007ff8a3deeda0 [ 2198.159708] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007ff8a3deeddd [ 2198.166980] CPU: 1 PID: 14994 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 2198.174875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2198.183159] Mem-Info: [ 2198.184319] Call Trace: [ 2198.186733] active_anon:17450 inactive_anon:30468 isolated_anon:0 [ 2198.186733] active_file:14 inactive_file:13 isolated_file:0 [ 2198.186733] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2198.186733] slab_reclaimable:14806 slab_unreclaimable:123929 [ 2198.186733] mapped:22201 shmem:31897 pagetables:588 bounce:0 [ 2198.186733] free:13915 free_pcp:268 free_cma:0 [ 2198.189305] dump_stack+0x1fc/0x2ef [ 2198.226123] warn_alloc.cold+0x7b/0x18f [ 2198.230100] ? zone_watermark_ok_safe+0x260/0x260 [ 2198.232550] Node 0 active_anon:68500kB inactive_anon:78544kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:75532kB dirty:0kB writeback:0kB shmem:84004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2198.234944] ? retint_kernel+0x2d/0x2d [ 2198.266386] ? alloc_pages_current+0x35/0x2a0 [ 2198.270654] Node 1 active_anon:1300kB inactive_anon:43328kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13272kB dirty:0kB writeback:0kB shmem:43584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2198.270886] __vmalloc_area_node+0x4fd/0x780 [ 2198.302242] ? __vmalloc_node_range+0x180/0x180 [ 2198.305751] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:1852kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2198.306908] ? _raw_spin_unlock+0x29/0x40 [ 2198.337475] ? __get_vm_area_node+0x2e2/0x3a0 [ 2198.341973] __vmalloc_node_range+0xed/0x180 [ 2198.343404] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2198.346376] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2198.351367] Node 0 DMA32 free:17868kB min:35996kB low:44992kB high:53988kB active_anon:68440kB inactive_anon:76692kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2072kB bounce:0kB free_pcp:572kB local_pcp:324kB free_cma:0kB [ 2198.355670] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2198.355682] vmalloc_user+0x70/0xe0 [ 2198.355695] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2198.355707] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2198.355720] __vb2_queue_alloc+0x472/0xe60 [ 2198.355745] vb2_core_create_bufs+0x273/0x7e0 [ 2198.355759] ? __vb2_queue_free+0x870/0x870 [ 2198.355775] ? mutex_trylock+0x1a0/0x1a0 [ 2198.355793] ? __video_do_ioctl+0x632/0xcd0 [ 2198.392919] lowmem_reserve[]: 0 0 1 1 1 [ 2198.393617] vb2_create_bufs+0x332/0x620 [ 2198.397914] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2198.402051] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2198.402064] ? __video_do_ioctl+0x632/0xcd0 [ 2198.402078] ? mutex_trylock+0x1a0/0x1a0 [ 2198.402091] ? mark_held_locks+0xf0/0xf0 [ 2198.402110] vb2_ioctl_create_bufs+0x20d/0x360 [ 2198.402124] ? memset+0x20/0x40 [ 2198.402158] v4l_create_bufs+0xb2/0x160 [ 2198.410773] lowmem_reserve[]: 0 0 0 0 0 [ 2198.410847] __video_do_ioctl+0x49a/0xcd0 [ 2198.418459] Node 1 Normal free:26916kB min:53876kB low:67344kB high:80812kB active_anon:1300kB inactive_anon:43328kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:280kB bounce:0kB free_pcp:500kB local_pcp:252kB free_cma:0kB [ 2198.419277] ? v4l_querycap+0x340/0x340 [ 2198.428092] lowmem_reserve[]: 0 0 0 0 0 [ 2198.431572] ? __might_fault+0x192/0x1d0 [ 2198.467551] Node 0 DMA: 3*4kB (UE) 3*8kB (UME) 3*16kB (UM) 3*32kB (UME) 3*64kB (UME) 2*128kB (UE) 4*256kB (UE) 4*512kB (UE) 3*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10868kB [ 2198.470825] ? v4l_querycap+0x340/0x340 [ 2198.474906] Node 0 DMA32: 199*4kB (UME) 132*8kB (ME) 215*16kB (UME) 89*32kB (ME) 32*64kB (ME) 14*128kB (M) 5*256kB (UM) 1*512kB (M) 4*1024kB (M) 0*2048kB 0*4096kB = 17868kB [ 2198.479514] video_usercopy+0x13f/0xfa0 [ 2198.490453] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2198.490681] ? v4l_enumstd+0x60/0x60 [ 2198.494848] Node 1 Normal: 217*4kB (UM) 184*8kB (UME) 138*16kB (UME) 93*32kB (ME) 33*64kB (UM) 7*128kB (ME) 8*256kB (M) 2*512kB (M) 3*1024kB (UME) 3*2048kB (UM) 1*4096kB (M) = 26916kB [ 2198.523594] ? do_futex+0x171/0x1880 [ 2198.523609] ? mark_held_locks+0xf0/0xf0 [ 2198.523625] ? debug_check_no_obj_freed+0x201/0x490 [ 2198.523646] ? video_usercopy+0xfa0/0xfa0 [ 2198.523658] v4l2_ioctl+0x147/0x1a0 [ 2198.523671] ? video_devdata+0xa0/0xa0 [ 2198.523686] do_vfs_ioctl+0xcdb/0x12e0 [ 2198.523703] ? lock_downgrade+0x720/0x720 [ 2198.535242] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2198.535657] ? check_preemption_disabled+0x41/0x280 [ 2198.560510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2198.570430] ? ioctl_preallocate+0x200/0x200 [ 2198.570446] ? __fget+0x356/0x510 [ 2198.570460] ? do_dup2+0x450/0x450 [ 2198.570474] ? __se_sys_futex+0x298/0x3b0 [ 2198.570492] ksys_ioctl+0x9b/0xc0 [ 2198.582243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2198.585438] __x64_sys_ioctl+0x6f/0xb0 [ 2198.589126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2198.605577] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2198.605590] do_syscall_64+0xf9/0x620 [ 2198.605607] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2198.605619] RIP: 0033:0x7fd56abe7209 [ 2198.605633] Code: Bad RIP value. [ 2198.605640] RSP: 002b:00007fd56955c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2198.605652] RAX: ffffffffffffffda RBX: 00007fd56acf9f60 RCX: 00007fd56abe7209 [ 2198.605660] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 2198.605667] RBP: 00007fd56ac41161 R08: 0000000000000000 R09: 0000000000000000 [ 2198.605677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2198.615100] 31924 total pagecache pages [ 2198.618422] R13: 00007fff49faaddf R14: 00007fd56955c300 R15: 0000000000022000 [ 2198.627111] 0 pages in swap cache [ 2198.636739] Mem-Info: [ 2198.651971] Swap cache stats: add 0, delete 0, find 0/0 [ 2198.651978] Free swap = 0kB [ 2198.651982] Total swap = 0kB [ 2198.651991] 2097051 pages RAM [ 2198.651996] 0 pages HighMem/MovableOnly [ 2198.652006] 369649 pages reserved [ 2198.666364] active_anon:17450 inactive_anon:30468 isolated_anon:0 [ 2198.666364] active_file:14 inactive_file:13 isolated_file:0 [ 2198.666364] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2198.666364] slab_reclaimable:14806 slab_unreclaimable:123929 [ 2198.666364] mapped:22201 shmem:31897 pagetables:588 bounce:0 [ 2198.666364] free:13915 free_pcp:268 free_cma:0 [ 2198.676962] 0 pages cma reserved [ 2198.680512] Node 0 active_anon:68500kB inactive_anon:78544kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:75532kB dirty:0kB writeback:0kB shmem:84004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2198.688758] Unreclaimable slab info: [ 2198.698768] Node 1 active_anon:1300kB inactive_anon:43328kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13272kB dirty:0kB writeback:0kB shmem:43584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2198.706770] Name Used Total [ 2198.709556] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:1852kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2198.717334] pid_2 78KB 100KB [ 2198.724144] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2198.737306] batadv_tl_cache 4KB 12KB [ 2198.748082] Node 0 DMA32 free:17868kB min:35996kB low:44992kB high:53988kB active_anon:68440kB inactive_anon:76692kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7584kB pagetables:2072kB bounce:0kB free_pcp:572kB local_pcp:248kB free_cma:0kB [ 2198.761570] TIPC 10KB 22KB [ 2198.770495] lowmem_reserve[]: 0 0 1 1 1 [ 2198.771603] SCTPv6 14KB 18KB [ 2198.775079] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2198.775107] lowmem_reserve[]: 0 0 0 0 0 [ 2198.775126] Node 1 Normal free:26916kB min:53876kB low:67344kB high:80812kB active_anon:1300kB inactive_anon:43328kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:280kB bounce:0kB free_pcp:500kB local_pcp:248kB free_cma:0kB [ 2198.775155] lowmem_reserve[]: 0 0 0 0 0 [ 2198.785647] SCTP 7KB 7KB [ 2198.792631] Node 0 DMA: 3*4kB (UE) 3*8kB (UME) 3*16kB (UM) 3*32kB (UME) 3*64kB (UME) 2*128kB (UE) 4*256kB (UE) 4*512kB (UE) 3*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10868kB [ 2198.798920] DCCPv6 17KB 37KB [ 2198.799990] Node 0 DMA32: 199*4kB (UME) 132*8kB (ME) 215*16kB (UME) 89*32kB (ME) 32*64kB (ME) 14*128kB (M) 5*256kB (UM) 1*512kB (M) 4*1024kB (M) 0*2048kB 0*4096kB = 17868kB [ 2198.841969] DCCP 16KB 28KB [ 2198.871532] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2198.907824] RXRPC 11KB 19KB [ 2198.938555] Node 1 Normal: 217*4kB (UM) 184*8kB (UME) 138*16kB (UME) 93*32kB (ME) 33*64kB (UM) 7*128kB (ME) 8*256kB (M) 2*512kB (M) 3*1024kB (UME) 3*2048kB (UM) 1*4096kB (M) = 26916kB [ 2198.951813] rxrpc_call_jar 78KB 94KB [ 2198.979868] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2198.990199] bridge_fdb_cache 9KB 23KB [ 2198.999078] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2199.029971] fib6_nodes 156KB 252KB [ 2199.054758] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2199.069259] ip6_dst_cache 95KB 472KB [ 2199.081542] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2199.094649] RAWv6 79KB 94KB [ 2199.103651] 31924 total pagecache pages [ 2199.116601] UDPv6 26KB 41KB [ 2199.119856] 0 pages in swap cache [ 2199.127027] TCPv6 30KB 36KB [ 2199.141970] Swap cache stats: add 0, delete 0, find 0/0 [ 2199.157680] nf_conntrack 4KB 18KB [ 2199.160291] Free swap = 0kB [ 2199.171395] AF_VSOCK 131KB 135KB [ 2199.173565] Total swap = 0kB [ 2199.189396] t10_alua_lu_gp_cache 0KB 3KB [ 2199.200094] 2097051 pages RAM [ 2199.212535] sd_ext_cdb 0KB 7KB [ 2199.218224] 0 pages HighMem/MovableOnly [ 2199.220398] scsi_sense_cache 1056KB 1060KB [ 2199.225766] 369649 pages reserved [ 2199.225770] 0 pages cma reserved [ 2199.281256] virtio_scsi_cmd 16KB 16KB [ 2199.286745] sgpool-128 8KB 8KB [ 2199.297117] sgpool-64 4KB 12KB [ 2199.302592] sgpool-32 2KB 15KB [ 2199.307955] sgpool-16 1KB 7KB [ 2199.318340] sgpool-8 0KB 7KB [ 2199.323797] mqueue_inode_cache 10KB 22KB [ 2199.329252] bio_post_read_ctx 14KB 15KB [ 2199.339689] bio-2 14KB 15KB [ 2199.345122] jfs_mp 7KB 7KB [ 2199.350512] cifs_small_rq 15KB 16KB [ 2199.362514] cifs_request 67KB 67KB [ 2199.367888] cifs_mpx_ids 0KB 7KB [ 2199.377214] nfs_commit_data 3KB 14KB [ 2199.383471] nfs_write_data 34KB 44KB [ 2199.388871] ext4_system_zone 1KB 7KB [ 2199.398744] bio-1 1KB 7KB [ 2199.404991] pid_namespace 2KB 11KB [ 2199.410888] rpc_buffers 17KB 25KB [ 2199.420308] rpc_tasks 2KB 7KB [ 2199.426931] UNIX 211KB 213KB [ 2199.436193] tcp_bind_bucket 1KB 4KB [ 2199.441574] ip_fib_trie 23KB 47KB [ 2199.447801] ip_fib_alias 111KB 181KB [ 2199.457291] ip_dst_cache 4KB 20KB [ 2199.465884] RAW 42KB 60KB [ 2199.471271] UDP 35KB 47KB [ 2199.480636] TCP 14KB 16KB [ 2199.491534] hugetlbfs_inode_cache 3KB 15KB [ 2199.501644] fscache_cookie_jar 1KB 7KB [ 2199.518815] eventpoll_pwq 35KB 51KB [ 2199.527592] eventpoll_epi 57KB 74KB [ 2199.541122] inotify_inode_mark 30KB 43KB [ 2199.550019] request_queue 199KB 199KB [ 2199.568907] blkdev_requests 1KB 3KB [ 2199.579280] blkdev_ioc 20KB 30KB [ 2199.591212] bio-0 671KB 671KB [ 2199.601545] biovec-max 1625KB 1633KB [ 2199.618793] biovec-64 572KB 574KB [ 2199.628364] biovec-16 73KB 75KB [ 2199.641054] bio_integrity_payload 1KB 8KB [ 2199.650824] khugepaged_mm_slot 15KB 34KB [ 2199.673213] uid_cache 0KB 4KB [ 2199.678611] dmaengine-unmap-2 0KB 3KB [ 2199.700267] skbuff_fclone_cache 89KB 101KB [ 2199.709316] skbuff_head_cache 5568KB 6307KB [ 2199.726666] configfs_dir_cache 3KB 7KB [ 2199.736849] file_lock_cache 157KB 194KB [ 2199.748860] file_lock_ctx 9KB 15KB [ 2199.759014] fsnotify_mark_connector 16KB 27KB [ 2199.780366] net_namespace 52KB 52KB [ 2199.786539] shmem_inode_cache 8458KB 8555KB [ 2199.798316] task_delay_info 209KB 415KB [ 2199.805261] taskstats 81KB 103KB [ 2199.811254] proc_dir_entry 695KB 840KB [ 2199.822727] pde_opener 9KB 73KB [ 2199.828266] seq_file 296KB 464KB [ 2199.837688] sigqueue 82KB 82KB [ 2199.844058] kernfs_node_cache 18308KB 18325KB [ 2199.849433] mnt_cache 173KB 196KB [ 2199.858913] filp 5676KB 7372KB [ 2199.865268] names_cache 149022KB 149060KB [ 2199.876926] iint_cache 38KB 43KB [ 2199.883221] key_jar 4KB 7KB [ 2199.888591] uts_namespace 2KB 7KB [ 2199.898027] nsproxy 20KB 43KB [ 2199.904733] vm_area_struct 3804KB 4559KB [ 2199.910208] mm_struct 524KB 663KB [ 2199.920153] fs_cache 130KB 304KB [ 2199.926657] files_cache 465KB 783KB [ 2199.936377] signal_cache 1072KB 1710KB [ 2199.941752] sighand_cache 571KB 652KB [ 2199.948008] task_struct 6722KB 6811KB [ 2199.957481] cred_jar 1342KB 2564KB [ 2199.963741] anon_vma_chain 1412KB 1736KB [ 2199.969189] anon_vma 161KB 323KB [ 2199.981158] pid 62KB 252KB [ 2199.988271] Acpi-Operand 156KB 194KB [ 2199.997923] Acpi-ParseExt 9KB 11KB [ 2200.004219] Acpi-Parse 41KB 47KB [ 2200.009651] Acpi-State 52KB 63KB [ 2200.019014] Acpi-Namespace 20KB 27KB [ 2200.025329] numa_policy 0KB 3KB [ 2200.030695] debug_objects_cache 1449KB 2143KB [ 2200.040240] trace_event_file 297KB 298KB [ 2200.046557] ftrace_event_field 398KB 401KB [ 2200.055956] pool_workqueue 121KB 152KB [ 2200.061327] page->ptl 589KB 766KB [ 2200.067637] kmalloc-2097152 2050KB 2050KB [ 2200.102323] kmalloc-524288 2056KB 2056KB [ 2200.107721] kmalloc-262144 1290KB 1290KB [ 2200.121867] kmalloc-131072 650KB 650KB [ 2200.127250] kmalloc-65536 1848KB 1914KB [ 2200.132770] kmalloc-32768 1650KB 1650KB [ 2200.138135] kmalloc-16384 973KB 990KB [ 2200.143595] kmalloc-8192 3984KB 3984KB [ 2200.148959] kmalloc-4096 20026KB 20064KB [ 2200.154398] kmalloc-2048 11328KB 14369KB [ 2200.159766] kmalloc-1024 6001KB 11489KB [ 2200.165369] kmalloc-512 13025KB 13863KB [ 2200.170735] kmalloc-256 3891KB 5958KB [ 2200.176158] kmalloc-128 970KB 1586KB [ 2200.181522] kmalloc-96 3182KB 4292KB [ 2200.187027] kmalloc-64 2352KB 3432KB [ 2200.192532] kmalloc-32 1835KB 2460KB [ 2200.197898] kmalloc-192 1553KB 2860KB [ 2200.203347] kmem_cache 177KB 183KB [ 2200.208718] Out of memory (oom_kill_allocating_task): Kill process 14879 (in:imklog) score 0 or sacrifice child [ 2200.219049] Killed process 14877 (rsyslogd) total-vm:254332kB, anon-rss:2696kB, file-rss:0kB, shmem-rss:0kB [ 2200.231325] oom_reaper: reaped process 14877 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:31:04 executing program 4: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={r0}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:31:04 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket(0xa, 0x6, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, r3, 0x8b460bac824a210f, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x254, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x13e}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}]}, 0x254}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) 06:31:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffff, 0x28084) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000080)={{@local, 0x3}, 0xfff, 0x783, 0x81, 0x5}) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000000)) 06:31:04 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 32) r0 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 32) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) (async, rerun: 64) r1 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) recvmsg$can_raw(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000140)=""/144, 0x90}, {&(0x7f0000000200)=""/208, 0xd0}, {&(0x7f0000000300)=""/179, 0xb3}, {&(0x7f00000003c0)=""/43, 0x2b}], 0x5, &(0x7f0000000640)=""/4096, 0x1000}, 0xa042) (async, rerun: 32) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f0000000000)) 06:31:04 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @sliced={0x65, [0x5, 0x4, 0x3f, 0x20, 0x6, 0x8000, 0x0, 0x64b4, 0x7, 0x7, 0xcf0e, 0xff, 0x5, 0x1, 0x9, 0x5, 0x8, 0xa88, 0xcf, 0x0, 0x7, 0x3, 0x80, 0x4, 0x1f, 0xff80, 0x9, 0x800, 0x7ff, 0x0, 0x800, 0x0, 0xfe01, 0xf2d, 0x8001, 0x7, 0x0, 0x80, 0x0, 0x2, 0x9, 0x4, 0x6, 0x6, 0x20, 0x7, 0x8, 0x7fff], 0x1000}}, 0x5}) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) write$bt_hci(r2, &(0x7f0000000080)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"42082f8dcf78f9d3"}}}, 0xc) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000040), 0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @sliced={0x65, [0x5, 0x4, 0x3f, 0x20, 0x6, 0x8000, 0x0, 0x64b4, 0x7, 0x7, 0xcf0e, 0xff, 0x5, 0x1, 0x9, 0x5, 0x8, 0xa88, 0xcf, 0x0, 0x7, 0x3, 0x80, 0x4, 0x1f, 0xff80, 0x9, 0x800, 0x7ff, 0x0, 0x800, 0x0, 0xfe01, 0xf2d, 0x8001, 0x7, 0x0, 0x80, 0x0, 0x2, 0x9, 0x4, 0x6, 0x6, 0x20, 0x7, 0x8, 0x7fff], 0x1000}}, 0x5}) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) (async) write$bt_hci(r2, &(0x7f0000000080)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"42082f8dcf78f9d3"}}}, 0xc) (async) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000040), 0x4) (async) 06:31:04 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x3, {0x3, @win={{0x5, 0x9, 0x4, 0x800}, 0x4, 0x8, &(0x7f0000000200)={{0xbc01, 0x2, 0x1, 0x9}, &(0x7f00000001c0)={{0xfffff800, 0x9, 0x6, 0x6}, &(0x7f0000000080)={{0x1, 0x3ff, 0x54e, 0x401}}}}, 0x1ff, &(0x7f0000000240)="cb59ec3ac47e4793e334b72add955752c2194ce374b8dd91767848c1e4953a4b2baa3fa31fa1ccceb303ed504b265c246b937a8b4b61a48c535b367a3eaaff493b8ae2ab7882c90dcc3987d8c4868dbec57ba118afd560346c9981a8638987eb8f455faa3794b201e372831bd0283cd8167348a8", 0x1f}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 06:31:04 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x3, {0x3, @win={{0x5, 0x9, 0x4, 0x800}, 0x4, 0x8, &(0x7f0000000200)={{0xbc01, 0x2, 0x1, 0x9}, &(0x7f00000001c0)={{0xfffff800, 0x9, 0x6, 0x6}, &(0x7f0000000080)={{0x1, 0x3ff, 0x54e, 0x401}}}}, 0x1ff, &(0x7f0000000240)="cb59ec3ac47e4793e334b72add955752c2194ce374b8dd91767848c1e4953a4b2baa3fa31fa1ccceb303ed504b265c246b937a8b4b61a48c535b367a3eaaff493b8ae2ab7882c90dcc3987d8c4868dbec57ba118afd560346c9981a8638987eb8f455faa3794b201e372831bd0283cd8167348a8", 0x1f}}}) (async, rerun: 32) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) 06:31:04 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040)=0x100000001, 0x8) 06:31:04 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10, 0x0) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040)=0x100000001, 0x8) 06:31:04 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async, rerun: 64) r1 = socket(0xa, 0x6, 0x7) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, r3, 0x8b460bac824a210f, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x254, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x13e}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}]}, 0x254}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) 06:31:04 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10, 0x0) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040)=0x100000001, 0x8) 06:31:04 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x5) [ 2205.501471] Bluetooth: hci1: command 0x0c1a tx timeout 06:31:07 executing program 4: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={r0}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:31:07 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) (async) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x5) (async) 06:31:07 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x8, 0x4) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000000)) 06:31:07 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket(0xa, 0x6, 0x7) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, r3, 0x8b460bac824a210f, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x254, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x13e}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}]}, 0x254}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) 06:31:09 executing program 4: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={r0}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={r0}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) 06:31:09 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @sliced={0x65, [0x5, 0x4, 0x3f, 0x20, 0x6, 0x8000, 0x0, 0x64b4, 0x7, 0x7, 0xcf0e, 0xff, 0x5, 0x1, 0x9, 0x5, 0x8, 0xa88, 0xcf, 0x0, 0x7, 0x3, 0x80, 0x4, 0x1f, 0xff80, 0x9, 0x800, 0x7ff, 0x0, 0x800, 0x0, 0xfe01, 0xf2d, 0x8001, 0x7, 0x0, 0x80, 0x0, 0x2, 0x9, 0x4, 0x6, 0x6, 0x20, 0x7, 0x8, 0x7fff], 0x1000}}, 0x5}) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) (async, rerun: 64) write$bt_hci(r2, &(0x7f0000000080)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"42082f8dcf78f9d3"}}}, 0xc) (async, rerun: 64) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000040), 0x4) 06:31:09 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x304, 0x0, 0x6d6445da0878bb69, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x304}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) 06:31:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) (async) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x5) 06:31:09 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x3, {0x3, @win={{0x5, 0x9, 0x4, 0x800}, 0x4, 0x8, &(0x7f0000000200)={{0xbc01, 0x2, 0x1, 0x9}, &(0x7f00000001c0)={{0xfffff800, 0x9, 0x6, 0x6}, &(0x7f0000000080)={{0x1, 0x3ff, 0x54e, 0x401}}}}, 0x1ff, &(0x7f0000000240)="cb59ec3ac47e4793e334b72add955752c2194ce374b8dd91767848c1e4953a4b2baa3fa31fa1ccceb303ed504b265c246b937a8b4b61a48c535b367a3eaaff493b8ae2ab7882c90dcc3987d8c4868dbec57ba118afd560346c9981a8638987eb8f455faa3794b201e372831bd0283cd8167348a8", 0x1f}}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x3, {0x3, @win={{0x5, 0x9, 0x4, 0x800}, 0x4, 0x8, &(0x7f0000000200)={{0xbc01, 0x2, 0x1, 0x9}, &(0x7f00000001c0)={{0xfffff800, 0x9, 0x6, 0x6}, &(0x7f0000000080)={{0x1, 0x3ff, 0x54e, 0x401}}}}, 0x1ff, &(0x7f0000000240)="cb59ec3ac47e4793e334b72add955752c2194ce374b8dd91767848c1e4953a4b2baa3fa31fa1ccceb303ed504b265c246b937a8b4b61a48c535b367a3eaaff493b8ae2ab7882c90dcc3987d8c4868dbec57ba118afd560346c9981a8638987eb8f455faa3794b201e372831bd0283cd8167348a8", 0x1f}}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 06:31:09 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x8, 0x4) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000000)) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x8, 0x4) (async) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000000)) (async) 06:31:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'stack ', '\x00'}, 0x7) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) 06:31:09 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x304, 0x0, 0x6d6445da0878bb69, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x304}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) socket(0x11, 0x3, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x304, 0x0, 0x6d6445da0878bb69, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x304}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) (async) 06:31:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'stack ', '\x00'}, 0x7) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'stack ', '\x00'}, 0x7) (async) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) (async) 06:31:09 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x8, 0x4) (async) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000000)) 06:31:09 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x304, 0x0, 0x6d6445da0878bb69, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x304}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) 06:31:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'stack ', '\x00'}, 0x7) (async) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) 06:31:15 executing program 1: socket(0x29, 0x800, 0x401) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000000)={0x3, 0x5}) 06:31:15 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000)=0x200000, 0x34) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) 06:31:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000000)={0x216, 0x3132564e, 0x4, 0xa4, 0x1, @discrete={0x101, 0x14}}) r1 = socket(0x1a, 0x1, 0x7ff00000) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x20, 0x4) 06:31:15 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) r1 = socket(0x15, 0x800, 0xe00b) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040), 0x4) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x7, {0xfffffd6f, 0x1, 0x5, 0x2}, {0x8, 0x8, 0x6, 0x1c}, {0x6, 0x5}}) 06:31:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x3ff, 0x7fffffff, 0xffff, 0x7, 0x1fe, 0x81, 0xffffffffffffffff, 0x3], 0x1, 0x7, 0x1}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, 0x0) ioctl$IOCTL_VMCI_VERSION(r1, 0x79f, &(0x7f00000001c0)=0x10000) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x1) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000002c0)={{@host, 0x8}, @my=0x0, 0x1, 0x7ff, 0x7, 0x0, 0x1, 0x6, 0x6a}) 06:31:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) (async) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) (async) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000000)={0x216, 0x3132564e, 0x4, 0xa4, 0x1, @discrete={0x101, 0x14}}) (async) r1 = socket(0x1a, 0x1, 0x7ff00000) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x20, 0x4) 06:31:15 executing program 1: socket(0x29, 0x800, 0x401) (async) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000000)={0x3, 0x5}) 06:31:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) (async) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000000)={0x216, 0x3132564e, 0x4, 0xa4, 0x1, @discrete={0x101, 0x14}}) (async) r1 = socket(0x1a, 0x1, 0x7ff00000) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x20, 0x4) 06:31:16 executing program 1: socket(0x29, 0x800, 0x401) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000000)={0x3, 0x5}) socket(0x29, 0x800, 0x401) (async) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000000)={0x3, 0x5}) (async) 06:31:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [], [0x0, 0x3ff, 0x3ff, 0x68f], [0x200, 0x2, 0x401, 0x5, 0x1ff, 0xc8cd, 0x0, 0x0, 0x0, 0x5ff, 0x7, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffb, 0x0, 0x73, 0x4, 0x0, 0x10001, 0x0, 0x2, 0x10009, 0x0, 0x0, 0xfff, 0x0, 0x40, 0x2, 0x8, 0x0, 0x8, 0xff, 0x1, 0x8, 0x3, 0xc7, 0x0, 0x0, 0x0, 0x7, 0x5e, 0x6, 0x7ff, 0x0, 0x0, 0x0, 0x1000, 0x2, 0x80000001, 0x8, 0x4, 0x0, 0x7, 0x8, 0xfff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000000)) 06:31:16 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = socket(0x11, 0x3, 0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:31:16 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20eb6, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x260, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0x260}}, 0x0) socket(0x8, 0x800, 0x8) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000540)={0x4, [0x937, 0x3f, 0x7, 0x1000]}, &(0x7f0000000580)=0xc) 06:31:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [], [0x0, 0x3ff, 0x3ff, 0x68f], [0x200, 0x2, 0x401, 0x5, 0x1ff, 0xc8cd, 0x0, 0x0, 0x0, 0x5ff, 0x7, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffb, 0x0, 0x73, 0x4, 0x0, 0x10001, 0x0, 0x2, 0x10009, 0x0, 0x0, 0xfff, 0x0, 0x40, 0x2, 0x8, 0x0, 0x8, 0xff, 0x1, 0x8, 0x3, 0xc7, 0x0, 0x0, 0x0, 0x7, 0x5e, 0x6, 0x7ff, 0x0, 0x0, 0x0, 0x1000, 0x2, 0x80000001, 0x8, 0x4, 0x0, 0x7, 0x8, 0xfff]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000000)) [ 2215.288936] input: syz1 as /devices/virtual/input/input21758 [ 2215.370001] input: syz1 as /devices/virtual/input/input21759 06:31:16 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000)=0x200000, 0x34) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) 06:31:16 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = socket(0x11, 0x3, 0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) (async) socket(0x11, 0x3, 0x0) (async) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) [ 2217.030520] Bluetooth: hci0: command 0x0c1a tx timeout 06:31:19 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) r1 = socket(0x15, 0x800, 0xe00b) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040), 0x4) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x7, {0xfffffd6f, 0x1, 0x5, 0x2}, {0x8, 0x8, 0x6, 0x1c}, {0x6, 0x5}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) socket(0x15, 0x800, 0xe00b) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040), 0x4) (async) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x7, {0xfffffd6f, 0x1, 0x5, 0x2}, {0x8, 0x8, 0x6, 0x1c}, {0x6, 0x5}}) (async) 06:31:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20eb6, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x260, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0x260}}, 0x0) socket(0x8, 0x800, 0x8) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000540)={0x4, [0x937, 0x3f, 0x7, 0x1000]}, &(0x7f0000000580)=0xc) 06:31:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [], [0x0, 0x3ff, 0x3ff, 0x68f], [0x200, 0x2, 0x401, 0x5, 0x1ff, 0xc8cd, 0x0, 0x0, 0x0, 0x5ff, 0x7, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffb, 0x0, 0x73, 0x4, 0x0, 0x10001, 0x0, 0x2, 0x10009, 0x0, 0x0, 0xfff, 0x0, 0x40, 0x2, 0x8, 0x0, 0x8, 0xff, 0x1, 0x8, 0x3, 0xc7, 0x0, 0x0, 0x0, 0x7, 0x5e, 0x6, 0x7ff, 0x0, 0x0, 0x0, 0x1000, 0x2, 0x80000001, 0x8, 0x4, 0x0, 0x7, 0x8, 0xfff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000000)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [], [0x0, 0x3ff, 0x3ff, 0x68f], [0x200, 0x2, 0x401, 0x5, 0x1ff, 0xc8cd, 0x0, 0x0, 0x0, 0x5ff, 0x7, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffb, 0x0, 0x73, 0x4, 0x0, 0x10001, 0x0, 0x2, 0x10009, 0x0, 0x0, 0xfff, 0x0, 0x40, 0x2, 0x8, 0x0, 0x8, 0xff, 0x1, 0x8, 0x3, 0xc7, 0x0, 0x0, 0x0, 0x7, 0x5e, 0x6, 0x7ff, 0x0, 0x0, 0x0, 0x1000, 0x2, 0x80000001, 0x8, 0x4, 0x0, 0x7, 0x8, 0xfff]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000000)) (async) 06:31:19 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) (async, rerun: 64) r1 = socket(0x11, 0x3, 0x0) (rerun: 64) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async, rerun: 32) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (rerun: 32) 06:31:19 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000)=0x200000, 0x34) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) 06:31:19 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x3ff, 0x7fffffff, 0xffff, 0x7, 0x1fe, 0x81, 0xffffffffffffffff, 0x3], 0x1, 0x7, 0x1}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, 0x0) (async) ioctl$IOCTL_VMCI_VERSION(r1, 0x79f, &(0x7f00000001c0)=0x10000) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x1) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000002c0)={{@host, 0x8}, @my=0x0, 0x1, 0x7ff, 0x7, 0x0, 0x1, 0x6, 0x6a}) 06:31:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@none}}}, 0xa) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) [ 2218.300685] input: syz1 as /devices/virtual/input/input21760 06:31:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20eb6, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x260, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0x260}}, 0x0) (async) socket(0x8, 0x800, 0x8) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000540)={0x4, [0x937, 0x3f, 0x7, 0x1000]}, &(0x7f0000000580)=0xc) 06:31:19 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$can_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@canfd={{0x2, 0x1}, 0x15, 0x2, 0x0, 0x0, "25711a2553383979ef360e48b171c73764523ef2abdf0e171803e2e33a4fe8a18e5fff67f7a930733e9ce417a52499872538e0e6dadafd34a4a1499c0afe8050"}, 0x48}}, 0xc004) 06:31:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@none}}}, 0xa) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) 06:31:19 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x0, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000480)) syz_open_dev$vim2m(&(0x7f0000000280), 0x200, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @vbi={0x1, 0xf, 0x663, 0x42303159, [0x6d, 0x5], [0x3, 0x7], 0x1}}}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000300)={0xa, 0xfffffffd, 0x3}) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000240), 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000440)=@ccm_128={{0x303}, "18ed57a77770a96e", "8ba15c1c80d81b23c6e6340bd74aef70", "d70f2077", "8dc3f387c8ff5426"}, 0x28) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f00000003c0)={0xf, 0x4, {0x54, 0x1, 0x8, {0x1000}, {0x6, 0x6}, @period={0x5c, 0xfff8, 0x8ea, 0xffff, 0x2, {0x101, 0x3, 0x4e, 0x7}, 0x4, &(0x7f0000000340)=[0x7f, 0x4, 0x2bbf, 0xd374]}}, {0x55, 0x7, 0xc6da, {0x3, 0x5}, {0x5, 0xff}, @period={0x5c, 0xf600, 0x9, 0x1ff, 0x8, {0x7fff, 0x101, 0x3, 0x39}, 0x8, &(0x7f0000000380)=[0x100, 0x9, 0x3dd, 0x6, 0x1, 0x101, 0x6, 0x4]}}}) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008084}, 0x4081) 06:31:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@none}}}, 0xa) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@none}}}, 0xa) (async) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) (async) [ 2219.100360] Bluetooth: hci0: command 0x0c1a tx timeout [ 2221.180154] Bluetooth: hci0: command 0x0c1a tx timeout 06:31:22 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) r1 = socket(0x15, 0x800, 0xe00b) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040), 0x4) (async, rerun: 64) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x7, {0xfffffd6f, 0x1, 0x5, 0x2}, {0x8, 0x8, 0x6, 0x1c}, {0x6, 0x5}}) (rerun: 64) 06:31:22 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) sendmsg$can_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@canfd={{0x2, 0x1}, 0x15, 0x2, 0x0, 0x0, "25711a2553383979ef360e48b171c73764523ef2abdf0e171803e2e33a4fe8a18e5fff67f7a930733e9ce417a52499872538e0e6dadafd34a4a1499c0afe8050"}, 0x48}}, 0xc004) 06:31:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x27, 0x4, 0x4) write$bt_hci(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="012109000000fbcdbf23e2d1a325eb4de70964ea200a1593833cb3392f949d1cbd37fe5e9f98fcd4011a7ecb681d710f216a45cbcfc0fe236fb9eb82daf1160efc0c71472f7ac0aaba4e6f50324284a1728e54bd3d0046d839ed8f068b6070d94acfabd4e1724073fb17a22d976c5411664ff9f8e8148debf87742656cc681c58a8fa46b35cd5a60e75706aac922e2"], 0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_bt_hci(r2, 0x400448c9, &(0x7f0000000080)="c548f1a38c0a9ea4371e5f547dec5c525ad01d3a99a81a2eb463c2c1dbf382114d786801d3557c18146f9fd0339216a4de9b8c55b65506ddad7da684c89ed6ba9b851d3b2f117f5b2893d43edc9ff100528657dc2a2c3edd72f9b11f7d2f029df6f0517b5edccf1f77278c6810816b05fb53e999f3df37a9baec83803474d28c5fbc2f631dfc034cdad0de017b74be4f1fbd8da7fbc15129128e8ab7b8038c092499348ec25a827dba7a45f42b753eb19134f60a98eb0d817085d5b08a754beae4916dea3891efb0620c81cff8a7eb68f982defcc0701b18aea4aca4817cd79bc59045489e5b24f2095d43b52a5e46f5ee04b41bec557c6948b27025cb9572f6ed1ed40765887ae7b92bf23098fee030aa46e694da2cbf802ba89b1edf6ed74d69bb0eaf76cc5e2b3dc28882ed756e7208dca642e7817eed13c0354d9047cbe6ed6c464d965cd62751e5b13417d372f658bf7194820a7786226a374596bf9b06428c718e9fe7b6f33dbfa742a26d16fd0191dc483e8dc69b10855014863975c301966296a6275b1f1ada85407f0a04bf8d2767c5b2538e53ad000988d50c8c3d9814548e30c9ab81a62134d6e339") r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0xfffffffffffffcb2) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="011b0402c9205a95def9d4f6952816f58edc1d88e2b1acb2adfcbcd31aff3dcdf8eb72375b4908576b5ec0d19b2928e26a8b08663d029e311d375aed65a1bde8f10c5d83fc59162854d29020ef844d98f1ba384c2bd6f4b372d5bd48c9e4e0742b1be6b02c1c067010c5c4a10f65916efda3875b8e9ded4de8c62853156a40df3630b0be669845fa5fc31683635e16cca1d0e3466212459790c57d3b15302cb6f49f0a1a8049ac5dfeb815598ff1dc15060166d9b972c3"], 0x6) 06:31:22 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000040)="1396372795") 06:31:22 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x0, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000480)) syz_open_dev$vim2m(&(0x7f0000000280), 0x200, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @vbi={0x1, 0xf, 0x663, 0x42303159, [0x6d, 0x5], [0x3, 0x7], 0x1}}}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000300)={0xa, 0xfffffffd, 0x3}) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000240), 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000440)=@ccm_128={{0x303}, "18ed57a77770a96e", "8ba15c1c80d81b23c6e6340bd74aef70", "d70f2077", "8dc3f387c8ff5426"}, 0x28) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f00000003c0)={0xf, 0x4, {0x54, 0x1, 0x8, {0x1000}, {0x6, 0x6}, @period={0x5c, 0xfff8, 0x8ea, 0xffff, 0x2, {0x101, 0x3, 0x4e, 0x7}, 0x4, &(0x7f0000000340)=[0x7f, 0x4, 0x2bbf, 0xd374]}}, {0x55, 0x7, 0xc6da, {0x3, 0x5}, {0x5, 0xff}, @period={0x5c, 0xf600, 0x9, 0x1ff, 0x8, {0x7fff, 0x101, 0x3, 0x39}, 0x8, &(0x7f0000000380)=[0x100, 0x9, 0x3dd, 0x6, 0x1, 0x101, 0x6, 0x4]}}}) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008084}, 0x4081) syz_open_dev$vim2m(&(0x7f00000002c0), 0x0, 0x2) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000480)) (async) syz_open_dev$vim2m(&(0x7f0000000280), 0x200, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @vbi={0x1, 0xf, 0x663, 0x42303159, [0x6d, 0x5], [0x3, 0x7], 0x1}}}) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000300)={0xa, 0xfffffffd, 0x3}) (async) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000240), 0x4) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) (async) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000440)=@ccm_128={{0x303}, "18ed57a77770a96e", "8ba15c1c80d81b23c6e6340bd74aef70", "d70f2077", "8dc3f387c8ff5426"}, 0x28) (async) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) (async) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f00000003c0)={0xf, 0x4, {0x54, 0x1, 0x8, {0x1000}, {0x6, 0x6}, @period={0x5c, 0xfff8, 0x8ea, 0xffff, 0x2, {0x101, 0x3, 0x4e, 0x7}, 0x4, &(0x7f0000000340)=[0x7f, 0x4, 0x2bbf, 0xd374]}}, {0x55, 0x7, 0xc6da, {0x3, 0x5}, {0x5, 0xff}, @period={0x5c, 0xf600, 0x9, 0x1ff, 0x8, {0x7fff, 0x101, 0x3, 0x39}, 0x8, &(0x7f0000000380)=[0x100, 0x9, 0x3dd, 0x6, 0x1, 0x101, 0x6, 0x4]}}}) (async) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008084}, 0x4081) (async) 06:31:22 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x3ff, 0x7fffffff, 0xffff, 0x7, 0x1fe, 0x81, 0xffffffffffffffff, 0x3], 0x1, 0x7, 0x1}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, 0x0) ioctl$IOCTL_VMCI_VERSION(r1, 0x79f, &(0x7f00000001c0)=0x10000) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x1) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000002c0)={{@host, 0x8}, @my=0x0, 0x1, 0x7ff, 0x7, 0x0, 0x1, 0x6, 0x6a}) 06:31:22 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) sendmsg$can_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@canfd={{0x2, 0x1}, 0x15, 0x2, 0x0, 0x0, "25711a2553383979ef360e48b171c73764523ef2abdf0e171803e2e33a4fe8a18e5fff67f7a930733e9ce417a52499872538e0e6dadafd34a4a1499c0afe8050"}, 0x48}}, 0xc004) 06:31:22 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000040)="1396372795") setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000040)="1396372795") (async) 06:31:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x27, 0x4, 0x4) write$bt_hci(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="012109000000fbcdbf23e2d1a325eb4de70964ea200a1593833cb3392f949d1cbd37fe5e9f98fcd4011a7ecb681d710f216a45cbcfc0fe236fb9eb82daf1160efc0c71472f7ac0aaba4e6f50324284a1728e54bd3d0046d839ed8f068b6070d94acfabd4e1724073fb17a22d976c5411664ff9f8e8148debf87742656cc681c58a8fa46b35cd5a60e75706aac922e2"], 0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_bt_hci(r2, 0x400448c9, &(0x7f0000000080)="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") r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0xfffffffffffffcb2) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="011b0402c9205a95def9d4f6952816f58edc1d88e2b1acb2adfcbcd31aff3dcdf8eb72375b4908576b5ec0d19b2928e26a8b08663d029e311d375aed65a1bde8f10c5d83fc59162854d29020ef844d98f1ba384c2bd6f4b372d5bd48c9e4e0742b1be6b02c1c067010c5c4a10f65916efda3875b8e9ded4de8c62853156a40df3630b0be669845fa5fc31683635e16cca1d0e3466212459790c57d3b15302cb6f49f0a1a8049ac5dfeb815598ff1dc15060166d9b972c3"], 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket(0x27, 0x4, 0x4) (async) write$bt_hci(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="012109000000fbcdbf23e2d1a325eb4de70964ea200a1593833cb3392f949d1cbd37fe5e9f98fcd4011a7ecb681d710f216a45cbcfc0fe236fb9eb82daf1160efc0c71472f7ac0aaba4e6f50324284a1728e54bd3d0046d839ed8f068b6070d94acfabd4e1724073fb17a22d976c5411664ff9f8e8148debf87742656cc681c58a8fa46b35cd5a60e75706aac922e2"], 0x7) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) (async) ioctl$sock_bt_hci(r2, 0x400448c9, &(0x7f0000000080)="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") (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0xfffffffffffffcb2) (async) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="011b0402c9205a95def9d4f6952816f58edc1d88e2b1acb2adfcbcd31aff3dcdf8eb72375b4908576b5ec0d19b2928e26a8b08663d029e311d375aed65a1bde8f10c5d83fc59162854d29020ef844d98f1ba384c2bd6f4b372d5bd48c9e4e0742b1be6b02c1c067010c5c4a10f65916efda3875b8e9ded4de8c62853156a40df3630b0be669845fa5fc31683635e16cca1d0e3466212459790c57d3b15302cb6f49f0a1a8049ac5dfeb815598ff1dc15060166d9b972c3"], 0x6) (async) 06:31:22 executing program 1: r0 = socket(0x1a, 0xa8af4d407bd54cb7, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:31:22 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000040)="1396372795") setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000040)="1396372795") (async) 06:31:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x27, 0x4, 0x4) write$bt_hci(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="012109000000fbcdbf23e2d1a325eb4de70964ea200a1593833cb3392f949d1cbd37fe5e9f98fcd4011a7ecb681d710f216a45cbcfc0fe236fb9eb82daf1160efc0c71472f7ac0aaba4e6f50324284a1728e54bd3d0046d839ed8f068b6070d94acfabd4e1724073fb17a22d976c5411664ff9f8e8148debf87742656cc681c58a8fa46b35cd5a60e75706aac922e2"], 0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_bt_hci(r2, 0x400448c9, &(0x7f0000000080)="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") r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0xfffffffffffffcb2) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="011b0402c9205a95def9d4f6952816f58edc1d88e2b1acb2adfcbcd31aff3dcdf8eb72375b4908576b5ec0d19b2928e26a8b08663d029e311d375aed65a1bde8f10c5d83fc59162854d29020ef844d98f1ba384c2bd6f4b372d5bd48c9e4e0742b1be6b02c1c067010c5c4a10f65916efda3875b8e9ded4de8c62853156a40df3630b0be669845fa5fc31683635e16cca1d0e3466212459790c57d3b15302cb6f49f0a1a8049ac5dfeb815598ff1dc15060166d9b972c3"], 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket(0x27, 0x4, 0x4) (async) write$bt_hci(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="012109000000fbcdbf23e2d1a325eb4de70964ea200a1593833cb3392f949d1cbd37fe5e9f98fcd4011a7ecb681d710f216a45cbcfc0fe236fb9eb82daf1160efc0c71472f7ac0aaba4e6f50324284a1728e54bd3d0046d839ed8f068b6070d94acfabd4e1724073fb17a22d976c5411664ff9f8e8148debf87742656cc681c58a8fa46b35cd5a60e75706aac922e2"], 0x7) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) (async) ioctl$sock_bt_hci(r2, 0x400448c9, &(0x7f0000000080)="c548f1a38c0a9ea4371e5f547dec5c525ad01d3a99a81a2eb463c2c1dbf382114d786801d3557c18146f9fd0339216a4de9b8c55b65506ddad7da684c89ed6ba9b851d3b2f117f5b2893d43edc9ff100528657dc2a2c3edd72f9b11f7d2f029df6f0517b5edccf1f77278c6810816b05fb53e999f3df37a9baec83803474d28c5fbc2f631dfc034cdad0de017b74be4f1fbd8da7fbc15129128e8ab7b8038c092499348ec25a827dba7a45f42b753eb19134f60a98eb0d817085d5b08a754beae4916dea3891efb0620c81cff8a7eb68f982defcc0701b18aea4aca4817cd79bc59045489e5b24f2095d43b52a5e46f5ee04b41bec557c6948b27025cb9572f6ed1ed40765887ae7b92bf23098fee030aa46e694da2cbf802ba89b1edf6ed74d69bb0eaf76cc5e2b3dc28882ed756e7208dca642e7817eed13c0354d9047cbe6ed6c464d965cd62751e5b13417d372f658bf7194820a7786226a374596bf9b06428c718e9fe7b6f33dbfa742a26d16fd0191dc483e8dc69b10855014863975c301966296a6275b1f1ada85407f0a04bf8d2767c5b2538e53ad000988d50c8c3d9814548e30c9ab81a62134d6e339") (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0xfffffffffffffcb2) (async) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="011b0402c9205a95def9d4f6952816f58edc1d88e2b1acb2adfcbcd31aff3dcdf8eb72375b4908576b5ec0d19b2928e26a8b08663d029e311d375aed65a1bde8f10c5d83fc59162854d29020ef844d98f1ba384c2bd6f4b372d5bd48c9e4e0742b1be6b02c1c067010c5c4a10f65916efda3875b8e9ded4de8c62853156a40df3630b0be669845fa5fc31683635e16cca1d0e3466212459790c57d3b15302cb6f49f0a1a8049ac5dfeb815598ff1dc15060166d9b972c3"], 0x6) (async) [ 2222.785291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.790936] ieee802154 phy1 wpan1: encryption failed: -22 06:31:25 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x5d3, 0x2) 06:31:25 executing program 1: r0 = socket(0x1a, 0xa8af4d407bd54cb7, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket(0x1a, 0xa8af4d407bd54cb7, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) 06:31:25 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000080)={0x9, 0x100, "3529a62f52197a5abe5f35840b0d4cfe71e28ab7596128e29119034c5e218d02", 0x40, 0xf39, 0x7, 0x913, 0x10}) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:31:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) r1 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x1, @pix={0x5, 0x8, 0x4745504a, 0x5, 0xff, 0x6, 0x3, 0xffffffff, 0x1, 0x6, 0x0, 0x4}}) 06:31:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x0, 0x2) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000480)) (async) syz_open_dev$vim2m(&(0x7f0000000280), 0x200, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @vbi={0x1, 0xf, 0x663, 0x42303159, [0x6d, 0x5], [0x3, 0x7], 0x1}}}) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000300)={0xa, 0xfffffffd, 0x3}) (async, rerun: 64) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000240), 0x4) (rerun: 64) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000440)=@ccm_128={{0x303}, "18ed57a77770a96e", "8ba15c1c80d81b23c6e6340bd74aef70", "d70f2077", "8dc3f387c8ff5426"}, 0x28) (async) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) (async) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f00000003c0)={0xf, 0x4, {0x54, 0x1, 0x8, {0x1000}, {0x6, 0x6}, @period={0x5c, 0xfff8, 0x8ea, 0xffff, 0x2, {0x101, 0x3, 0x4e, 0x7}, 0x4, &(0x7f0000000340)=[0x7f, 0x4, 0x2bbf, 0xd374]}}, {0x55, 0x7, 0xc6da, {0x3, 0x5}, {0x5, 0xff}, @period={0x5c, 0xf600, 0x9, 0x1ff, 0x8, {0x7fff, 0x101, 0x3, 0x39}, 0x8, &(0x7f0000000380)=[0x100, 0x9, 0x3dd, 0x6, 0x1, 0x101, 0x6, 0x4]}}}) (async) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008084}, 0x4081) 06:31:25 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:31:25 executing program 1: r0 = socket(0x1a, 0xa8af4d407bd54cb7, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket(0x1a, 0xa8af4d407bd54cb7, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) 06:31:25 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x5d3, 0x2) 06:31:25 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) r1 = socket$igmp6(0xa, 0x3, 0x2) socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e20, 0x7fffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, {0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0xffffffffffffffff, {[0x401, 0x5e75, 0x0, 0xde1b, 0x7, 0x80000000, 0x0, 0xffffffff]}}, 0x5c) 06:31:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) r1 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x1, @pix={0x5, 0x8, 0x4745504a, 0x5, 0xff, 0x6, 0x3, 0xffffffff, 0x1, 0x6, 0x0, 0x4}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) (async) syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) (async) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000700)) (async) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x1, @pix={0x5, 0x8, 0x4745504a, 0x5, 0xff, 0x6, 0x3, 0xffffffff, 0x1, 0x6, 0x0, 0x4}}) (async) 06:31:25 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@any, 0x1}, 0x1, 0x1, 0x8ab400, 0x20000004}) r1 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) gettid() 06:31:25 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@any, 0x1}, 0x1, 0x1, 0x8ab400, 0x20000004}) r1 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) gettid() 06:31:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) r1 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x1, @pix={0x5, 0x8, 0x4745504a, 0x5, 0xff, 0x6, 0x3, 0xffffffff, 0x1, 0x6, 0x0, 0x4}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) (async) syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) (async) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000700)) (async) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x1, @pix={0x5, 0x8, 0x4745504a, 0x5, 0xff, 0x6, 0x3, 0xffffffff, 0x1, 0x6, 0x0, 0x4}}) (async) 06:31:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x2c, 0xa, 0x1000) r2 = socket(0x25, 0x6, 0xf028) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000040)='syz1\x00') ioctl$sock_bt_hci(r1, 0x800448c2, &(0x7f0000000000)="b21290111afc90bfc64babf9d0821f7efe58ca643fa92e4ea9a0d5477847977c") sendmsg$can_raw(r2, &(0x7f0000000140)={&(0x7f0000000080), 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x0, 0x0, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "515c5328ef8d5817"}, 0x10}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000001) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 06:31:26 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000080)={0x9, 0x100, "3529a62f52197a5abe5f35840b0d4cfe71e28ab7596128e29119034c5e218d02", 0x40, 0xf39, 0x7, 0x913, 0x10}) (async) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:31:26 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@any, 0x1}, 0x1, 0x1, 0x8ab400, 0x20000004}) r1 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) gettid() openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@any, 0x1}, 0x1, 0x1, 0x8ab400, 0x20000004}) (async) socket(0x11, 0x3, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) gettid() (async) 06:31:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) (async, rerun: 64) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) r1 = socket(0x2c, 0xa, 0x1000) r2 = socket(0x25, 0x6, 0xf028) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000040)='syz1\x00') (async) ioctl$sock_bt_hci(r1, 0x800448c2, &(0x7f0000000000)="b21290111afc90bfc64babf9d0821f7efe58ca643fa92e4ea9a0d5477847977c") (async) sendmsg$can_raw(r2, &(0x7f0000000140)={&(0x7f0000000080), 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x0, 0x0, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "515c5328ef8d5817"}, 0x10}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000001) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 2226.786572] Bluetooth: hci1: command 0x0c1a tx timeout 06:31:29 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000040)=0x4) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) 06:31:29 executing program 1: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/20, 0x14, 0x0, &(0x7f0000000040)=""/54, 0x36}, &(0x7f00000000c0)=0x40) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) 06:31:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x2c, 0xa, 0x1000) r2 = socket(0x25, 0x6, 0xf028) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000040)='syz1\x00') ioctl$sock_bt_hci(r1, 0x800448c2, &(0x7f0000000000)="b21290111afc90bfc64babf9d0821f7efe58ca643fa92e4ea9a0d5477847977c") sendmsg$can_raw(r2, &(0x7f0000000140)={&(0x7f0000000080), 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x0, 0x0, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "515c5328ef8d5817"}, 0x10}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000001) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket(0x2c, 0xa, 0x1000) (async) socket(0x25, 0x6, 0xf028) (async) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000040)='syz1\x00') (async) ioctl$sock_bt_hci(r1, 0x800448c2, &(0x7f0000000000)="b21290111afc90bfc64babf9d0821f7efe58ca643fa92e4ea9a0d5477847977c") (async) sendmsg$can_raw(r2, &(0x7f0000000140)={&(0x7f0000000080), 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x0, 0x0, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "515c5328ef8d5817"}, 0x10}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000001) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) 06:31:29 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000080)={0x9, 0x100, "3529a62f52197a5abe5f35840b0d4cfe71e28ab7596128e29119034c5e218d02", 0x40, 0xf39, 0x7, 0x913, 0x10}) (async) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:31:29 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x5d3, 0x2) 06:31:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) r1 = socket$igmp6(0xa, 0x3, 0x2) socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e20, 0x7fffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, {0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0xffffffffffffffff, {[0x401, 0x5e75, 0x0, 0xde1b, 0x7, 0x80000000, 0x0, 0xffffffff]}}, 0x5c) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e20, 0x7fffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, {0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0xffffffffffffffff, {[0x401, 0x5e75, 0x0, 0xde1b, 0x7, 0x80000000, 0x0, 0xffffffff]}}, 0x5c) (async) 06:31:29 executing program 1: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/20, 0x14, 0x0, &(0x7f0000000040)=""/54, 0x36}, &(0x7f00000000c0)=0x40) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) inotify_rm_watch(0xffffffffffffffff, 0x0) 06:31:29 executing program 3: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80000000}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x4, 0x4) 06:31:29 executing program 1: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/20, 0x14, 0x0, &(0x7f0000000040)=""/54, 0x36}, &(0x7f00000000c0)=0x40) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) socket(0x11, 0x3, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/20, 0x14, 0x0, &(0x7f0000000040)=""/54, 0x36}, &(0x7f00000000c0)=0x40) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) (async) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) inotify_rm_watch(0xffffffffffffffff, 0x0) (async) 06:31:29 executing program 3: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80000000}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x4, 0x4) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80000000}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x4, 0x4) (async) 06:31:29 executing program 1: r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000840)={&(0x7f0000000000), 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_AF={0x6}]}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x10c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffc0}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffc1}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa72}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x18}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x48004}, 0xc800) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f00000000c0)) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x1) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:31:29 executing program 1: r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000840)={&(0x7f0000000000), 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_AF={0x6}]}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x10c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffc0}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffc1}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa72}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x18}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x48004}, 0xc800) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f00000000c0)) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x1) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket(0x11, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000840)={&(0x7f0000000000), 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_AF={0x6}]}]}, 0x2c}}, 0x0) (async) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x10c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffc0}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffc1}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa72}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x18}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x48004}, 0xc800) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f00000000c0)) (async) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x1) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) [ 2228.859617] Bluetooth: hci1: command 0x0c1a tx timeout 06:31:30 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000040)=0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:31:30 executing program 3: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80000000}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x4, 0x4) 06:31:30 executing program 1: r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000840)={&(0x7f0000000000), 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_AF={0x6}]}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x10c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffc0}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffc1}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa72}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x18}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x48004}, 0xc800) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f00000000c0)) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x1) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket(0x11, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000840)={&(0x7f0000000000), 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_AF={0x6}]}]}, 0x2c}}, 0x0) (async) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x10c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffc0}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffc1}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa72}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x18}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x48004}, 0xc800) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f00000000c0)) (async) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x1) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) 06:31:30 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000700)) syz_open_dev$cec(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000040)={0x0, "ac6787089f6b8a1221baf45ba4a6f66013f63f6c0c332ca4eb54f99ee7b8798f", 0x0, 0x1}) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f00000000c0)={0x5, {0x401, 0xfffffff7, 0x636, 0x5}, {0x0, 0x4, 0x3, 0x80000000}, {0x3ff, 0x1}}) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:31:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x4, 0xffffff0e, 0x1, 0x2, 0x401, 0x81, 0x0, 0x101, 0x8, 0x9, 0xffffff80, 0x3f, 0x0, 0xa2a, 0xc, 0x10, {0x7, 0x40}, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) [ 2230.939565] Bluetooth: hci1: command 0x0c1a tx timeout 06:31:32 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) r1 = socket$igmp6(0xa, 0x3, 0x2) socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e20, 0x7fffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, {0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0xffffffffffffffff, {[0x401, 0x5e75, 0x0, 0xde1b, 0x7, 0x80000000, 0x0, 0xffffffff]}}, 0x5c) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e20, 0x7fffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, {0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0xffffffffffffffff, {[0x401, 0x5e75, 0x0, 0xde1b, 0x7, 0x80000000, 0x0, 0xffffffff]}}, 0x5c) (async) 06:31:32 executing program 3: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000000)) 06:31:32 executing program 1: socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4) 06:31:32 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000700)) syz_open_dev$cec(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000040)={0x0, "ac6787089f6b8a1221baf45ba4a6f66013f63f6c0c332ca4eb54f99ee7b8798f", 0x0, 0x1}) (async) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f00000000c0)={0x5, {0x401, 0xfffffff7, 0x636, 0x5}, {0x0, 0x4, 0x3, 0x80000000}, {0x3ff, 0x1}}) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:31:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r1 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000700)) (async) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x4, 0xffffff0e, 0x1, 0x2, 0x401, 0x81, 0x0, 0x101, 0x8, 0x9, 0xffffff80, 0x3f, 0x0, 0xa2a, 0xc, 0x10, {0x7, 0x40}, 0x4, 0x2}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:31:32 executing program 3: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000000)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000000)) (async) 06:31:32 executing program 1: socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4) 06:31:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r1 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x4, 0xffffff0e, 0x1, 0x2, 0x401, 0x81, 0x0, 0x101, 0x8, 0x9, 0xffffff80, 0x3f, 0x0, 0xa2a, 0xc, 0x10, {0x7, 0x40}, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:31:32 executing program 3: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000000)) 06:31:32 executing program 1: socket(0x11, 0x3, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4) 06:31:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000000)) 06:31:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000380)={&(0x7f0000000280)=[r4, 0x0, r1, 0x0, r2, 0x0, r3], &(0x7f00000002c0)=[0x8, 0x1, 0x6, 0x0], 0x7, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000340)) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) [ 2233.020769] Bluetooth: hci1: command 0x0c1a tx timeout 06:31:35 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000340)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:31:35 executing program 1: r0 = socket(0x29, 0x6, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) socket$igmp6(0xa, 0x3, 0x2) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x3f, 0x4) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 06:31:35 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000000)) (async) 06:31:35 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r1 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) (rerun: 64) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000700)) syz_open_dev$cec(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000040)={0x0, "ac6787089f6b8a1221baf45ba4a6f66013f63f6c0c332ca4eb54f99ee7b8798f", 0x0, 0x1}) (async) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f00000000c0)={0x5, {0x401, 0xfffffff7, 0x636, 0x5}, {0x0, 0x4, 0x3, 0x80000000}, {0x3ff, 0x1}}) (async) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:31:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000200)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000380)={&(0x7f0000000280)=[r4, 0x0, r1, 0x0, r2, 0x0, r3], &(0x7f00000002c0)=[0x8, 0x1, 0x6, 0x0], 0x7, 0x1}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000340)) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:31:35 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000001c0)={0x80000000, 0x8, 0x4, {0x1, @sliced={0x3, [0x5, 0x3, 0x6, 0x842, 0x80, 0x2, 0x401, 0x20, 0x1f, 0x400, 0x1a, 0x0, 0x85d7, 0x8, 0x80, 0x4, 0x4b, 0xe7, 0x7, 0xb92, 0x5, 0x4, 0xe33f, 0x8000, 0x1f, 0x9, 0x23, 0x7fff, 0x0, 0x9, 0x9, 0x1ff, 0x7, 0xb6, 0x5, 0x5, 0xfffe, 0x4, 0xfffc, 0xba2, 0x1ff, 0x8, 0x8, 0x1, 0x2ae, 0x5, 0xff79, 0xfffd]}}, 0x4}) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:31:35 executing program 1: r0 = socket(0x29, 0x6, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) socket$igmp6(0xa, 0x3, 0x2) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x3f, 0x4) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket(0x29, 0x6, 0x3) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x3f, 0x4) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) 06:31:35 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000000)) 06:31:35 executing program 1: r0 = socket(0x29, 0x6, 0x3) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x3f, 0x4) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 06:31:35 executing program 3: getpgid(0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x53, 0x8) 06:31:35 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0x4, 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000100)=0x4) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448dd, &(0x7f0000000000)) 06:31:35 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f00000002c0)={0x81, "42a54162c264366fd2f2f2d95d300c0894ba5869fdaf628d9689a344be8e3c58", 0xda15d962838ec03a, 0x1, 0xc8e, 0x10, 0x1}) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000180)={0x0, 0x10007, "8a84a031b11c807b49e1ea5e7b836cd9a3cdb023f69a6d06", {0x9, 0xb6b}, 0x6}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000200)={0x0, @reserved}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0xffffffe7, 0x1, 0x3001, 0x0, 0x8, 0x8, 0x1, 0x7}}) socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x20044801) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x300088c0) [ 2235.099104] Bluetooth: hci1: command 0x0c1a tx timeout [ 2237.178918] Bluetooth: hci1: command 0x0c1a tx timeout 06:31:38 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x1) (async) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000340)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) (async, rerun: 64) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (rerun: 64) 06:31:38 executing program 3: getpgid(0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x53, 0x8) getpgid(0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x53, 0x8) (async) 06:31:38 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) (async) r1 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000700)) (async) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f00000002c0)={0x81, "42a54162c264366fd2f2f2d95d300c0894ba5869fdaf628d9689a344be8e3c58", 0xda15d962838ec03a, 0x1, 0xc8e, 0x10, 0x1}) (async) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000180)={0x0, 0x10007, "8a84a031b11c807b49e1ea5e7b836cd9a3cdb023f69a6d06", {0x9, 0xb6b}, 0x6}) (async) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000200)={0x0, @reserved}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0xffffffe7, 0x1, 0x3001, 0x0, 0x8, 0x8, 0x1, 0x7}}) (async) socket(0x11, 0x3, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x20044801) (async) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x300088c0) 06:31:38 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0x4, 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) (async) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000100)=0x4) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448dd, &(0x7f0000000000)) 06:31:38 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000001c0)={0x80000000, 0x8, 0x4, {0x1, @sliced={0x3, [0x5, 0x3, 0x6, 0x842, 0x80, 0x2, 0x401, 0x20, 0x1f, 0x400, 0x1a, 0x0, 0x85d7, 0x8, 0x80, 0x4, 0x4b, 0xe7, 0x7, 0xb92, 0x5, 0x4, 0xe33f, 0x8000, 0x1f, 0x9, 0x23, 0x7fff, 0x0, 0x9, 0x9, 0x1ff, 0x7, 0xb6, 0x5, 0x5, 0xfffe, 0x4, 0xfffc, 0xba2, 0x1ff, 0x8, 0x8, 0x1, 0x2ae, 0x5, 0xff79, 0xfffd]}}, 0x4}) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:31:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000380)={&(0x7f0000000280)=[r4, 0x0, r1, 0x0, r2, 0x0, r3], &(0x7f00000002c0)=[0x8, 0x1, 0x6, 0x0], 0x7, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000340)) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000380)={&(0x7f0000000280)=[r4, 0x0, r1, 0x0, r2, 0x0, r3], &(0x7f00000002c0)=[0x8, 0x1, 0x6, 0x0], 0x7, 0x1}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000340)) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) 06:31:38 executing program 3: getpgid(0x0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x53, 0x8) 06:31:38 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f00000002c0)={0x81, "42a54162c264366fd2f2f2d95d300c0894ba5869fdaf628d9689a344be8e3c58", 0xda15d962838ec03a, 0x1, 0xc8e, 0x10, 0x1}) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000180)={0x0, 0x10007, "8a84a031b11c807b49e1ea5e7b836cd9a3cdb023f69a6d06", {0x9, 0xb6b}, 0x6}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000200)={0x0, @reserved}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0xffffffe7, 0x1, 0x3001, 0x0, 0x8, 0x8, 0x1, 0x7}}) socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x20044801) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x300088c0) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) (async) syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) (async) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000700)) (async) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f00000002c0)={0x81, "42a54162c264366fd2f2f2d95d300c0894ba5869fdaf628d9689a344be8e3c58", 0xda15d962838ec03a, 0x1, 0xc8e, 0x10, 0x1}) (async) syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2) (async) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000180)={0x0, 0x10007, "8a84a031b11c807b49e1ea5e7b836cd9a3cdb023f69a6d06", {0x9, 0xb6b}, 0x6}) (async) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000200)={0x0, @reserved}) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0xffffffe7, 0x1, 0x3001, 0x0, 0x8, 0x8, 0x1, 0x7}}) (async) socket(0x11, 0x3, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x20044801) (async) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x300088c0) (async) 06:31:39 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, &(0x7f0000000000)) r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x5) 06:31:39 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, &(0x7f0000000000)) (async, rerun: 32) r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x5) 06:31:39 executing program 1: r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000840)={&(0x7f0000000000), 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_AF={0x6}]}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x10c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffc0}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffc1}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa72}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x18}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x48004}, 0xc800) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f00000000c0)) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x1) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:31:39 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000)=0x200000, 0x34) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) [ 2240.058854] kworker/dying (8864) used greatest stack depth: 23072 bytes left [ 2240.138670] Bluetooth: hci1: command 0x0c1a tx timeout [ 2240.378688] Bluetooth: hci0: command 0x0c1a tx timeout 06:31:42 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000340)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:31:42 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, &(0x7f0000000000)) r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, &(0x7f0000000000)) (async) syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) (async) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000700)) (async) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x5) (async) 06:31:42 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000), 0x4) (async) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0x4, 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) (async, rerun: 32) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000100)=0x4) (async, rerun: 32) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448dd, &(0x7f0000000000)) 06:31:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000000)={0x216, 0x3132564e, 0x4, 0xa4, 0x1, @discrete={0x101, 0x14}}) r1 = socket(0x1a, 0x1, 0x7ff00000) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x20, 0x4) 06:31:42 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:31:42 executing program 0: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000001c0)={0x80000000, 0x8, 0x4, {0x1, @sliced={0x3, [0x5, 0x3, 0x6, 0x842, 0x80, 0x2, 0x401, 0x20, 0x1f, 0x400, 0x1a, 0x0, 0x85d7, 0x8, 0x80, 0x4, 0x4b, 0xe7, 0x7, 0xb92, 0x5, 0x4, 0xe33f, 0x8000, 0x1f, 0x9, 0x23, 0x7fff, 0x0, 0x9, 0x9, 0x1ff, 0x7, 0xb6, 0x5, 0x5, 0xfffe, 0x4, 0xfffc, 0xba2, 0x1ff, 0x8, 0x8, 0x1, 0x2ae, 0x5, 0xff79, 0xfffd]}}, 0x4}) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000001c0)={0x80000000, 0x8, 0x4, {0x1, @sliced={0x3, [0x5, 0x3, 0x6, 0x842, 0x80, 0x2, 0x401, 0x20, 0x1f, 0x400, 0x1a, 0x0, 0x85d7, 0x8, 0x80, 0x4, 0x4b, 0xe7, 0x7, 0xb92, 0x5, 0x4, 0xe33f, 0x8000, 0x1f, 0x9, 0x23, 0x7fff, 0x0, 0x9, 0x9, 0x1ff, 0x7, 0xb6, 0x5, 0x5, 0xfffe, 0x4, 0xfffc, 0xba2, 0x1ff, 0x8, 0x8, 0x1, 0x2ae, 0x5, 0xff79, 0xfffd]}}, 0x4}) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) 06:31:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x5) 06:31:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0xc0000032, &(0x7f0000000000)="a2165bb8743f7788faaa9af0e9a254566b6af45e54cc9fb4af9ec37b5ef870e079e40c871a64845a526fbf0c403a56aead03ecadb61850634b422a464e08a102113e50978298068fa26eabdbbf4312b838841c6ef640d8bf74e06c4be36843b80e1b4d8cbb0414b358045c33ad9336ac9b2477262ea36754e6a169cec722b781791c5960a60c02") 06:31:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x5) 06:31:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0xc0000032, &(0x7f0000000000)="a2165bb8743f7788faaa9af0e9a254566b6af45e54cc9fb4af9ec37b5ef870e079e40c871a64845a526fbf0c403a56aead03ecadb61850634b422a464e08a102113e50978298068fa26eabdbbf4312b838841c6ef640d8bf74e06c4be36843b80e1b4d8cbb0414b358045c33ad9336ac9b2477262ea36754e6a169cec722b781791c5960a60c02") 06:31:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x5) 06:31:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0xc0000032, &(0x7f0000000000)="a2165bb8743f7788faaa9af0e9a254566b6af45e54cc9fb4af9ec37b5ef870e079e40c871a64845a526fbf0c403a56aead03ecadb61850634b422a464e08a102113e50978298068fa26eabdbbf4312b838841c6ef640d8bf74e06c4be36843b80e1b4d8cbb0414b358045c33ad9336ac9b2477262ea36754e6a169cec722b781791c5960a60c02") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0xc0000032, &(0x7f0000000000)="a2165bb8743f7788faaa9af0e9a254566b6af45e54cc9fb4af9ec37b5ef870e079e40c871a64845a526fbf0c403a56aead03ecadb61850634b422a464e08a102113e50978298068fa26eabdbbf4312b838841c6ef640d8bf74e06c4be36843b80e1b4d8cbb0414b358045c33ad9336ac9b2477262ea36754e6a169cec722b781791c5960a60c02") (async) 06:31:44 executing program 4: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x7fffffff, 0x1, {0x0, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb0100000099fba89d148877c768da02000000e18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0xff}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x2, @vbi}}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x2b) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x11, 0x100, 0x2, {0x5, @pix={0x7ff, 0x80000001, 0x50323234, 0x6, 0x4, 0x42c2, 0x1, 0x6, 0x1, 0x2, 0x1, 0x7}}, 0x1f}) 06:31:44 executing program 3: r0 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket(0xa, 0x6, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, r3, 0x8b460bac824a210f, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x254, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x13e}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}]}, 0x254}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) 06:31:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) 06:31:44 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x71, 0xffff, 0x2021, 0x1, 0x8, 0x8, 0x0, 0x5}}) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000100)={0x4, 0x41, @value=0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)="83f25bb352c26c6bab140100010000000000f0de9d55d85f7b1d4b3014d0fee202291a24ed77f2fc7b027c7cdd7a4522b6") [ 2243.259701] Bluetooth: hci1: command 0x0c1a tx timeout 06:31:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async, rerun: 32) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (rerun: 32) 06:31:45 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) 06:31:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) 06:31:45 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x71, 0xffff, 0x2021, 0x1, 0x8, 0x8, 0x0, 0x5}}) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000100)={0x4, 0x41, @value=0x10001}) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)="83f25bb352c26c6bab140100010000000000f0de9d55d85f7b1d4b3014d0fee202291a24ed77f2fc7b027c7cdd7a4522b6") 06:31:45 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000000)) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000040)={'\x00', 0xfffffffc, 0x3, 0x1}) 06:31:45 executing program 4: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x7fffffff, 0x1, {0x0, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb0100000099fba89d148877c768da02000000e18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0xff}) (async, rerun: 64) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x2, @vbi}}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x2b) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x11, 0x100, 0x2, {0x5, @pix={0x7ff, 0x80000001, 0x50323234, 0x6, 0x4, 0x42c2, 0x1, 0x6, 0x1, 0x2, 0x1, 0x7}}, 0x1f}) 06:31:45 executing program 3: r0 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x20044801) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x20044801) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, r5, 0x8b460bac824a210f, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x100, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x4}}, {{0x8, 0x1, r7}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x44, 0x3f, 0x0, 0x2}, {0x1, 0x0, 0x20, 0x20}, {0xd46, 0x3f, 0x4, 0x3}]}}}]}}, {{0x8, 0x1, r4}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20004400}, 0x4000045) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="190000000bb856dfe8648a4d336509dbcc9a5e79c9ca63fca32fc36cdbab94fdfbbde1", @ANYRES16=r2, @ANYBLOB="8305000000000000df250600000000020500950100000800040000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000850}, 0x44000) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000000)={0x1, 0x1, @raw_data=[0xffff, 0x8, 0x3, 0x0, 0x3, 0xff, 0x36c, 0x1, 0x3, 0x4, 0xffffffff, 0x0, 0x2, 0x5, 0x1ff, 0x5]}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r8, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f0000000180)={0x8cf3, {0x101, 0xfffffff9, 0x101, 0xfffffffe, 0x4, 0x401}}) 06:31:45 executing program 1: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000000)) 06:31:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x20044801) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000d80)={@in6={{0xa, 0x4e22, 0x7, @private0, 0x101}}, 0x0, 0x0, 0x38, 0x0, "7cd55256cbd6b6cf0b9f671c3de7dcc47c766fc078e5aaad9dc4c900768576d8de5b486038fc2043ad6f4a16e747571ad049ceedc4404f7cd7a504bde6c8c2fae68adcc4c9d25428dee808dadb7fd3e0"}, 0xd8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000300)={0x9d8, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x188, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffba7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r2}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xffff, 0xff, 0xf9, 0x7fffffff}, {0x401, 0x80, 0x7, 0x1}, {0x1, 0x20, 0xed}, {0x6, 0xff, 0x7, 0xf4b}, {0x81, 0x7a, 0x1f, 0x1f}, {0x7, 0x79, 0x1, 0x7}]}}}]}}, {{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xff10, 0x0, 0x7, 0x10000}, {0x101, 0x40, 0x7f, 0x1000}, {0x8, 0x0, 0x8, 0x96}, {0xfff7, 0x2, 0xc0, 0x200}, {0x4, 0x3, 0x6, 0x7}, {0x1f, 0x5, 0x1f, 0x9}, {0x1, 0x81, 0x5, 0xc0}, {0x4, 0x1, 0x5, 0x3}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x37}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r4}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x4, 0x81, 0x7}, {0x20, 0x40, 0xff}]}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}]}, 0x9d8}, 0x1, 0x0, 0x0, 0x4010}, 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @pix={0x6, 0x7, 0x20343059, 0x9, 0x95d, 0xe0, 0x8, 0x3, 0x1, 0x2, 0x1, 0x4}}}) 06:31:45 executing program 1: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000000)) 06:31:45 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x71, 0xffff, 0x2021, 0x1, 0x8, 0x8, 0x0, 0x5}}) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000100)={0x4, 0x41, @value=0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)="83f25bb352c26c6bab140100010000000000f0de9d55d85f7b1d4b3014d0fee202291a24ed77f2fc7b027c7cdd7a4522b6") setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x71, 0xffff, 0x2021, 0x1, 0x8, 0x8, 0x0, 0x5}}) (async) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000100)={0x4, 0x41, @value=0x10001}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)="83f25bb352c26c6bab140100010000000000f0de9d55d85f7b1d4b3014d0fee202291a24ed77f2fc7b027c7cdd7a4522b6") (async) 06:31:45 executing program 1: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000000)) 06:31:48 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:31:48 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) (async) 06:31:48 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x5, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) r1 = socket(0x9, 0x3, 0x2e) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f00000000c0)="00000000000000ff000000") r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x19, @empty}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000}, @in6={0xa, 0x4e24, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1f}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x1, @local, 0xff}], 0xb0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000040)=0x5, 0x4) 06:31:48 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000000)) 06:31:48 executing program 4: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x7fffffff, 0x1, {0x0, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb0100000099fba89d148877c768da02000000e18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0xff}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x2, @vbi}}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x2b) (async, rerun: 64) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x11, 0x100, 0x2, {0x5, @pix={0x7ff, 0x80000001, 0x50323234, 0x6, 0x4, 0x42c2, 0x1, 0x6, 0x1, 0x2, 0x1, 0x7}}, 0x1f}) (rerun: 64) 06:31:48 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 06:31:48 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000000)) 06:31:48 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x5, 0x4) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) (async) r1 = socket(0x9, 0x3, 0x2e) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f00000000c0)="00000000000000ff000000") (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) (async) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x19, @empty}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000}, @in6={0xa, 0x4e24, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1f}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x1, @local, 0xff}], 0xb0) (rerun: 32) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000040)=0x5, 0x4) 06:31:48 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000000)) 06:31:49 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x5, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) (async) r1 = socket(0x9, 0x3, 0x2e) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f00000000c0)="00000000000000ff000000") r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) (async) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x19, @empty}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000}, @in6={0xa, 0x4e24, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1f}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x1, @local, 0xff}], 0xb0) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000040)=0x5, 0x4) 06:31:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)) 06:31:49 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 2250.297839] Bluetooth: hci1: command 0x0c1a tx timeout 06:31:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x3, {0x4, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10, 0x4482446781f3dbc4) 06:31:54 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) (async) 06:31:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)) 06:31:54 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 06:31:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x400, 0x2) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:31:54 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000000)="dcd0688fd2626a8753ebe21a513e3445063a66c1d3f231123eafa700a8fd6924a70ca707bcced76afe631704baa40943023f86f0db2b044821dee8d90b21913c9f0691e84cbac72e913b2038ddf1fdc431ce211cf17702ac3e8c2a2bb5") recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000100)=""/138, 0x8a}, {&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)}], 0x5, &(0x7f0000001380)=""/23, 0x17}, 0x80000000) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) 06:31:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x3, {0x4, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async) accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10, 0x4482446781f3dbc4) 06:31:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x3, {0x4, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0x1}) (async, rerun: 64) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) (async, rerun: 64) accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10, 0x4482446781f3dbc4) (rerun: 64) 06:31:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)) 06:31:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x400, 0x2) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x400, 0x2) (async) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) 06:31:55 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000000)="dcd0688fd2626a8753ebe21a513e3445063a66c1d3f231123eafa700a8fd6924a70ca707bcced76afe631704baa40943023f86f0db2b044821dee8d90b21913c9f0691e84cbac72e913b2038ddf1fdc431ce211cf17702ac3e8c2a2bb5") recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000100)=""/138, 0x8a}, {&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)}], 0x5, &(0x7f0000001380)=""/23, 0x17}, 0x80000000) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) 06:31:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, 0x0) 06:31:55 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x400, 0x2) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) [ 2256.137481] Bluetooth: hci1: command 0x0c1a tx timeout [ 2258.217402] Bluetooth: hci1: command 0x0c1a tx timeout 06:32:00 executing program 4: ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x7, 0xd4d, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x3, @vbi={0xfffffffd, 0x8001, 0x3bc, 0x38416761, [0x1, 0x8], [0x10001, 0x14a063da], 0x1}}) 06:32:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000000), 0x4) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, {0xa, 0x4e23, 0x3ff, @local, 0xd81}, 0xffffffffffffffff, {[0x9, 0x3f, 0x4, 0x3, 0x3, 0x0, 0x2, 0x9]}}, 0x5c) 06:32:00 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 06:32:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, 0x0) 06:32:00 executing program 4: ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x7, 0xd4d, 0x1}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x3, @vbi={0xfffffffd, 0x8001, 0x3bc, 0x38416761, [0x1, 0x8], [0x10001, 0x14a063da], 0x1}}) 06:32:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000000)="dcd0688fd2626a8753ebe21a513e3445063a66c1d3f231123eafa700a8fd6924a70ca707bcced76afe631704baa40943023f86f0db2b044821dee8d90b21913c9f0691e84cbac72e913b2038ddf1fdc431ce211cf17702ac3e8c2a2bb5") recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000100)=""/138, 0x8a}, {&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)}], 0x5, &(0x7f0000001380)=""/23, 0x17}, 0x80000000) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) 06:32:00 executing program 0: ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @sliced={0x6, [0xffff, 0x7, 0x80, 0x3, 0x8, 0xf802, 0x0, 0xff7f, 0x0, 0x2, 0x8001, 0xec, 0xfa5, 0x3492, 0x1, 0x0, 0x0, 0x4, 0x5, 0x4, 0x6, 0x200, 0x5, 0x80b1, 0x13, 0x3, 0x72, 0x57, 0x1, 0x1, 0x6, 0x9, 0x0, 0x5, 0x8, 0x204, 0x0, 0x100, 0x7ff, 0x81, 0xc, 0x2, 0x0, 0x690f, 0x40, 0xe57, 0x0, 0x5], 0x7}}}) 06:32:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, 0x0) 06:32:00 executing program 4: ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x7, 0xd4d, 0x1}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x3, @vbi={0xfffffffd, 0x8001, 0x3bc, 0x38416761, [0x1, 0x8], [0x10001, 0x14a063da], 0x1}}) 06:32:00 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000000)="dcd0688fd2626a8753ebe21a513e3445063a66c1d3f231123eafa700a8fd6924a70ca707bcced76afe631704baa40943023f86f0db2b044821dee8d90b21913c9f0691e84cbac72e913b2038ddf1fdc431ce211cf17702ac3e8c2a2bb5") recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000100)=""/138, 0x8a}, {&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)}], 0x5, &(0x7f0000001380)=""/23, 0x17}, 0x80000000) 06:32:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, 0x0) 06:32:00 executing program 4: socket(0x15, 0x800, 0xffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000001c0)={0x0, @reserved}) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 06:32:00 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000100)=""/138, 0x8a}, {&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)}], 0x5, &(0x7f0000001380)=""/23, 0x17}, 0x80000000) [ 2261.976991] Bluetooth: hci1: command 0x0c1a tx timeout 06:32:03 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000000), 0x4) (async) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, {0xa, 0x4e23, 0x3ff, @local, 0xd81}, 0xffffffffffffffff, {[0x9, 0x3f, 0x4, 0x3, 0x3, 0x0, 0x2, 0x9]}}, 0x5c) 06:32:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)) 06:32:03 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000100)=""/138, 0x8a}, {&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)}], 0x5, &(0x7f0000001380)=""/23, 0x17}, 0x80000000) 06:32:03 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000040)={0x2, 0x20, 0x7}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) 06:32:03 executing program 0: ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @sliced={0x6, [0xffff, 0x7, 0x80, 0x3, 0x8, 0xf802, 0x0, 0xff7f, 0x0, 0x2, 0x8001, 0xec, 0xfa5, 0x3492, 0x1, 0x0, 0x0, 0x4, 0x5, 0x4, 0x6, 0x200, 0x5, 0x80b1, 0x13, 0x3, 0x72, 0x57, 0x1, 0x1, 0x6, 0x9, 0x0, 0x5, 0x8, 0x204, 0x0, 0x100, 0x7ff, 0x81, 0xc, 0x2, 0x0, 0x690f, 0x40, 0xe57, 0x0, 0x5], 0x7}}}) 06:32:03 executing program 4: socket(0x15, 0x800, 0xffffffff) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000001c0)={0x0, @reserved}) (async) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 06:32:03 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000100)=""/138, 0x8a}, {&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)}], 0x5, &(0x7f0000001380)=""/23, 0x17}, 0x80000000) 06:32:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:04 executing program 3: recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000100)=""/138, 0x8a}, {&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)}], 0x5, &(0x7f0000001380)=""/23, 0x17}, 0x80000000) 06:32:04 executing program 3: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x80000000) 06:32:04 executing program 3: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 06:32:04 executing program 3: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 06:32:05 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000000), 0x4) (async) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, {0xa, 0x4e23, 0x3ff, @local, 0xd81}, 0xffffffffffffffff, {[0x9, 0x3f, 0x4, 0x3, 0x3, 0x0, 0x2, 0x9]}}, 0x5c) 06:32:05 executing program 3: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 06:32:05 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000040)={0x2, 0x20, 0x7}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) 06:32:05 executing program 4: socket(0x15, 0x800, 0xffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000001c0)={0x0, @reserved}) (async) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) [ 2265.096702] Bluetooth: hci1: command 0x0c1a tx timeout 06:32:07 executing program 0: ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) (async, rerun: 32) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @sliced={0x6, [0xffff, 0x7, 0x80, 0x3, 0x8, 0xf802, 0x0, 0xff7f, 0x0, 0x2, 0x8001, 0xec, 0xfa5, 0x3492, 0x1, 0x0, 0x0, 0x4, 0x5, 0x4, 0x6, 0x200, 0x5, 0x80b1, 0x13, 0x3, 0x72, 0x57, 0x1, 0x1, 0x6, 0x9, 0x0, 0x5, 0x8, 0x204, 0x0, 0x100, 0x7ff, 0x81, 0xc, 0x2, 0x0, 0x690f, 0x40, 0xe57, 0x0, 0x5], 0x7}}}) 06:32:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f00000000c0)) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x1) 06:32:07 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0x1, 0x7, 0xe6, 0x7}, 0x2, [0xff, 0x4, 0x0, 0xffff7fff, 0x3343, 0x4, 0x7, 0x4, 0x0, 0x8000, 0x40, 0x74d5be, 0x9, 0x993, 0x1ff, 0x1, 0xdd, 0x31f7, 0x6043, 0x9, 0xffff0000, 0x2, 0x80000000, 0x2, 0xffff8000, 0x20, 0x39, 0xfffffffe, 0x2, 0x800, 0x0, 0x3, 0x491, 0x2, 0x80000001, 0x987, 0x8d, 0x7f, 0x7, 0x9, 0xffffffff, 0xffff, 0x5, 0x7, 0x9, 0x300, 0x1, 0xbd, 0x3, 0x6, 0x664, 0xffffffff, 0x4, 0x8f3, 0x20, 0x5, 0x1, 0x9, 0xea2, 0x1, 0xfffffbff, 0x40, 0x3f, 0xff], [0x5, 0x74441e3e, 0x7, 0xff, 0xc58, 0x36, 0x800, 0x2, 0xffffffff, 0x0, 0x4, 0x6d80000, 0x3f, 0xffffffff, 0x99dd, 0x1, 0x1, 0x4, 0x100, 0x9, 0x3, 0x3, 0x4, 0x1, 0x158, 0x1, 0x6, 0xb1f3, 0xfffffff7, 0x1, 0x3, 0xfffffffb, 0x2a, 0x2, 0x1, 0x9, 0x10000, 0xe6, 0x7f8, 0xfffffffc, 0x91, 0x7ff, 0x1ff, 0x742, 0x8000, 0x751, 0x3, 0x2000, 0x1, 0x9, 0x67, 0x4, 0x8, 0x4, 0x0, 0x4, 0x0, 0x8, 0x7ff8, 0x5, 0x8000, 0x11, 0x1], [0x1f, 0x7fffffff, 0x7, 0xb7, 0x2ce, 0x7, 0x48, 0xffff, 0x64b, 0x4, 0x9, 0x10001, 0x5, 0x2, 0xfffffffa, 0x0, 0xfff, 0x80, 0x8, 0x40, 0xfffffffd, 0x2, 0xfffffffd, 0x8, 0x5, 0x7, 0x9, 0x3, 0x9, 0x10000, 0x7, 0x1, 0x5, 0x101, 0x79a, 0x8, 0x4, 0x1ff, 0x9a3, 0x4, 0x20de, 0x1, 0x8001, 0x40, 0x10000, 0x0, 0x100, 0x0, 0xf02, 0xff8d, 0x7, 0x4, 0x800, 0x101, 0x4, 0xb6, 0x7fff, 0x2, 0x6, 0x0, 0x3, 0x5, 0x8, 0x4], [0x6, 0x2, 0x0, 0xff, 0xd2ce, 0x5, 0xdf, 0x6, 0x9, 0xffff, 0xba3, 0x1f, 0x9, 0x7fff, 0xfffffaac, 0x9, 0x59, 0x6, 0x4, 0x400, 0x8e, 0x8, 0xfffffffd, 0x5, 0x7, 0xa64, 0x5db, 0x7ff, 0xb2, 0x40, 0xfff, 0x0, 0xffffffff, 0xffff8001, 0x2, 0x10000, 0x7, 0x101, 0x7, 0x2, 0xf9d, 0x1, 0x3e9, 0xd005, 0xff, 0xbc, 0x401, 0x9, 0x4, 0x7fffffff, 0xfffffbd5, 0x5, 0x3ff, 0x401, 0x101, 0x9, 0x44, 0x0, 0x6, 0x1, 0xffffffff, 0x0, 0x5, 0xfffffffa]}, 0x45c) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000000)={0x4, 0x1ff, {0x52, 0xbb, 0x4, {0x200, 0x1}, {0x5, 0x1}, @cond=[{0xff, 0x7fff, 0x6, 0x9, 0x6, 0x2}, {0x4f, 0x8a9b, 0x8001, 0x9, 0x8, 0x800}]}, {0x55, 0x0, 0x7, {0xfff, 0x7f}, {0x7ff, 0x6baa}, @cond=[{0x0, 0x92d, 0x2, 0x0, 0x56c, 0xff}, {0x5, 0x48af, 0xcc9b, 0xedd1, 0x81, 0x8}]}}) ioctl$UI_DEV_DESTROY(r1, 0x5502) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) 06:32:07 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000040)={0x2, 0x20, 0x7}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) (async) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000040)={0x2, 0x20, 0x7}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) (async) 06:32:07 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x10000) 06:32:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:07 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0x5000000}) 06:32:07 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0xf803, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:07 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000), 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f0000000000)) [ 2267.186629] Bluetooth: hci1: command 0x0c1a tx timeout 06:32:08 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000), 0x4) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f0000000000)) 06:32:09 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000), 0x4) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f0000000000)) [ 2268.536465] Bluetooth: hci0: command 0x0c1a tx timeout 06:32:09 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@any, 0xff}, @hyper, 0x2, 0x4159, 0xfffffffffffff663, 0xf3, 0x6, 0x6, 0x9}) [ 2269.266435] Bluetooth: hci1: command 0x0c1a tx timeout 06:32:10 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x1, 0x800081, 0x2, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8f36845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca63240dd63c405982733bde758cb87014504e4689c724cab"}, 0x1009}) 06:32:10 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x10000) 06:32:10 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x10000) 06:32:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) 06:32:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:10 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) (async, rerun: 32) r1 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 32) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000080)=0x1, 0x4) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@any, 0xff}, @hyper, 0x2, 0x4159, 0xfffffffffffff663, 0xf3, 0x6, 0x6, 0x9}) [ 2270.616263] Bluetooth: hci0: command 0x0c1a tx timeout 06:32:11 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 64) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@any, 0xff}, @hyper, 0x2, 0x4159, 0xfffffffffffff663, 0xf3, 0x6, 0x6, 0x9}) 06:32:11 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x9c3, 0x1}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) [ 2271.336192] Bluetooth: hci1: command 0x0c1a tx timeout 06:32:12 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x10000) 06:32:12 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x9c3, 0x1}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:32:13 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x9c3, 0x1}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x9c3, 0x1}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) (async) [ 2272.696250] Bluetooth: hci0: command 0x0c1a tx timeout 06:32:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) 06:32:13 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x1, 0x800081, 0x2, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8f36845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca63240dd63c405982733bde758cb87014504e4689c724cab"}, 0x1009}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x1, 0x800081, 0x2, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8f36845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca63240dd63c405982733bde758cb87014504e4689c724cab"}, 0x1009}) (async) 06:32:13 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0x2000}) 06:32:13 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000000)="004af92be985ba597f39ea992d29af7bba96b22473dbbf9aec39f840f7d89e30ba95c3029ca33f49265450a3e6ce6d3d58f0fca36ef42f65c38cadd91012d7e51c5eb1459208b8e3ef679b073f8b52d62f7883660ce27cfcd90b67483f71ee8e910363918835050a86deba60f122dc59eb04537ab224af8d163a3faeb98e38d6e6af7c59fa15adc09d6f67fa01910fc57a1e0fd7fd5f21171dfc812e2a783ea733e20bd5d0fff10e292c1819b85a6bcbb1cd9117103d1c5301d2da2174247c20b477e576d5ef3feef55d1d58bae1e097093a22") 06:32:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000080), 0x4) 06:32:13 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0x5}) [ 2273.416052] Bluetooth: hci1: command 0x0c1a tx timeout 06:32:14 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xbab1, 0x4) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:32:15 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xbab1, 0x4) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:32:16 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xbab1, 0x4) (async) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) [ 2275.495974] Bluetooth: hci1: command 0x0c1a tx timeout 06:32:17 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:32:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x9, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:17 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697fecaedfed5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) [ 2277.585805] Bluetooth: hci1: command 0x0c1a tx timeout 06:32:20 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) 06:32:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x1, 0x800081, 0x2, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8f36845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca63240dd63c405982733bde758cb87014504e4689c724cab"}, 0x1009}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x1, 0x800081, 0x2, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8f36845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca63240dd63c405982733bde758cb87014504e4689c724cab"}, 0x1009}) (async) 06:32:20 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000080), 0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000080), 0x4) (async) 06:32:20 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 32) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:32:20 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000400)={0x1c, 0x5, 0x9}) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0x0, @win={{0x7, 0x0, 0xc918, 0x2ee}, 0x8, 0x8, &(0x7f0000000200)={{0x2, 0x40, 0xfffffff8, 0x1000}, &(0x7f00000001c0)={{0x200, 0x800, 0x9, 0xcc}, &(0x7f0000000080)={{0x10000, 0x6, 0x1000, 0x1}}}}, 0xfffff000, &(0x7f0000000240)="cec7fc942023593c15d1ec5b5ddc3fdba28d726e1a09bbaf0605991114110e07a46ad6a66a55f513caaa4ffd3c2d08769dc04f82ddcd467197c65ba1d438f958c9446d7e66c9cd1bda7195ded5f81889057a1be4033d3f06548a3f2cb89e58a5a0e93a508a6b429bdcc1f4c0f2a2bfbd3bebe8ace96ece6204f7fe37bae79d7d165842253277b72f52e4179d62e1696db300e0eafdf8bc4257a7f82f39ce4ca960f068cd1325", 0x40}}) 06:32:20 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x3f8, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) [ 2279.655608] Bluetooth: hci1: command 0x0c1a tx timeout 06:32:20 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:32:21 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000140)={0x2, [0x5, 0xfffe]}, &(0x7f0000000180)=0x8) write$bt_hci(r1, &(0x7f0000000040)={0x1, @write_eir={{0xc52, 0xf1}, {0x80, "59ca82fe7731b4b5879ad7e5417384d0740544e4315a9d592d920584aa10676caf84622ea1936c7e54db8cc3e4f4410bf972ccaf5b5a94e65d89025c8ec1be20eb893c6dacc4ea4e7071f0ad21fb7a5a3b81e8ad505e3d08159f41b00d43fa5e28dac4540e3b1b1d81bb5e9b2a37bf3146cd73250340d3fd0e82511ec3d261d72a78f7d95e65ecb2392c478b230992315ac0e532022b20b23599fdb091ff84e254ec0c002d0705be1eba49c701ada8ca2184b619b66ae6d7d34468cda1b20a91b49e66ee5d086bee139a487e4a9b3942a5f8a66499b2f8991643e1a997d5643972aa7d3816267ab2a5029af1aa98fc7a"}}}, 0xf5) [ 2281.735397] Bluetooth: hci1: command 0x0c1a tx timeout 06:32:22 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000140)={0x2, [0x5, 0xfffe]}, &(0x7f0000000180)=0x8) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @write_eir={{0xc52, 0xf1}, {0x80, "59ca82fe7731b4b5879ad7e5417384d0740544e4315a9d592d920584aa10676caf84622ea1936c7e54db8cc3e4f4410bf972ccaf5b5a94e65d89025c8ec1be20eb893c6dacc4ea4e7071f0ad21fb7a5a3b81e8ad505e3d08159f41b00d43fa5e28dac4540e3b1b1d81bb5e9b2a37bf3146cd73250340d3fd0e82511ec3d261d72a78f7d95e65ecb2392c478b230992315ac0e532022b20b23599fdb091ff84e254ec0c002d0705be1eba49c701ada8ca2184b619b66ae6d7d34468cda1b20a91b49e66ee5d086bee139a487e4a9b3942a5f8a66499b2f8991643e1a997d5643972aa7d3816267ab2a5029af1aa98fc7a"}}}, 0xf5) 06:32:23 executing program 1: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000140)={0x2, [0x5, 0xfffe]}, &(0x7f0000000180)=0x8) write$bt_hci(r1, &(0x7f0000000040)={0x1, @write_eir={{0xc52, 0xf1}, {0x80, "59ca82fe7731b4b5879ad7e5417384d0740544e4315a9d592d920584aa10676caf84622ea1936c7e54db8cc3e4f4410bf972ccaf5b5a94e65d89025c8ec1be20eb893c6dacc4ea4e7071f0ad21fb7a5a3b81e8ad505e3d08159f41b00d43fa5e28dac4540e3b1b1d81bb5e9b2a37bf3146cd73250340d3fd0e82511ec3d261d72a78f7d95e65ecb2392c478b230992315ac0e532022b20b23599fdb091ff84e254ec0c002d0705be1eba49c701ada8ca2184b619b66ae6d7d34468cda1b20a91b49e66ee5d086bee139a487e4a9b3942a5f8a66499b2f8991643e1a997d5643972aa7d3816267ab2a5029af1aa98fc7a"}}}, 0xf5) 06:32:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) 06:32:23 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000080), 0x4) 06:32:23 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0xd, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:23 executing program 0: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x6275, 0x2, 0xc}) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:23 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000140)={0x2, [0x5, 0xfffe]}, &(0x7f0000000180)=0x8) write$bt_hci(r1, &(0x7f0000000040)={0x1, @write_eir={{0xc52, 0xf1}, {0x80, "59ca82fe7731b4b5879ad7e5417384d0740544e4315a9d592d920584aa10676caf84622ea1936c7e54db8cc3e4f4410bf972ccaf5b5a94e65d89025c8ec1be20eb893c6dacc4ea4e7071f0ad21fb7a5a3b81e8ad505e3d08159f41b00d43fa5e28dac4540e3b1b1d81bb5e9b2a37bf3146cd73250340d3fd0e82511ec3d261d72a78f7d95e65ecb2392c478b230992315ac0e532022b20b23599fdb091ff84e254ec0c002d0705be1eba49c701ada8ca2184b619b66ae6d7d34468cda1b20a91b49e66ee5d086bee139a487e4a9b3942a5f8a66499b2f8991643e1a997d5643972aa7d3816267ab2a5029af1aa98fc7a"}}}, 0xf5) 06:32:24 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0xc, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:24 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x6, 0x4, 0x6) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)="af16a747ed518b3ca03af5d915fda86e19a5f32a7129279dec5dd8b81eb047585237d8268af9892718b604e919977ec957dce3ced44de9ebe0519e5f393de32907423848743acc024a06590661afb6de574da1b5ece5e40ad1f65bd58f0f23c6a5561c6246394cbe31b3ac12588814bc9529a2ca1a663ff0a0f48237ab8e424008ad6cde53217510b48f710cdfba220257d972ffa9167467aa1fa89fb292a294cb04bf16fef2882986") r2 = syz_open_dev$cec(&(0x7f0000000180), 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f00000001c0)={0x61, "2972fbd8fee2121d8d70d2f8481051cb225cd019155f696a280ac43d2b6af18d", 0x1, 0x40, 0x1, 0x8, 0x4, 0x3, 0x36, 0xe86}) 06:32:24 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 32) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r1 = socket(0x6, 0x4, 0x6) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)="af16a747ed518b3ca03af5d915fda86e19a5f32a7129279dec5dd8b81eb047585237d8268af9892718b604e919977ec957dce3ced44de9ebe0519e5f393de32907423848743acc024a06590661afb6de574da1b5ece5e40ad1f65bd58f0f23c6a5561c6246394cbe31b3ac12588814bc9529a2ca1a663ff0a0f48237ab8e424008ad6cde53217510b48f710cdfba220257d972ffa9167467aa1fa89fb292a294cb04bf16fef2882986") (async) r2 = syz_open_dev$cec(&(0x7f0000000180), 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f00000001c0)={0x61, "2972fbd8fee2121d8d70d2f8481051cb225cd019155f696a280ac43d2b6af18d", 0x1, 0x40, 0x1, 0x8, 0x4, 0x3, 0x36, 0xe86}) 06:32:24 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x6, 0x4, 0x6) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)="af16a747ed518b3ca03af5d915fda86e19a5f32a7129279dec5dd8b81eb047585237d8268af9892718b604e919977ec957dce3ced44de9ebe0519e5f393de32907423848743acc024a06590661afb6de574da1b5ece5e40ad1f65bd58f0f23c6a5561c6246394cbe31b3ac12588814bc9529a2ca1a663ff0a0f48237ab8e424008ad6cde53217510b48f710cdfba220257d972ffa9167467aa1fa89fb292a294cb04bf16fef2882986") r2 = syz_open_dev$cec(&(0x7f0000000180), 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f00000001c0)={0x61, "2972fbd8fee2121d8d70d2f8481051cb225cd019155f696a280ac43d2b6af18d", 0x1, 0x40, 0x1, 0x8, 0x4, 0x3, 0x36, 0xe86}) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket(0x6, 0x4, 0x6) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)="af16a747ed518b3ca03af5d915fda86e19a5f32a7129279dec5dd8b81eb047585237d8268af9892718b604e919977ec957dce3ced44de9ebe0519e5f393de32907423848743acc024a06590661afb6de574da1b5ece5e40ad1f65bd58f0f23c6a5561c6246394cbe31b3ac12588814bc9529a2ca1a663ff0a0f48237ab8e424008ad6cde53217510b48f710cdfba220257d972ffa9167467aa1fa89fb292a294cb04bf16fef2882986") (async) syz_open_dev$cec(&(0x7f0000000180), 0x2, 0x2) (async) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f00000001c0)={0x61, "2972fbd8fee2121d8d70d2f8481051cb225cd019155f696a280ac43d2b6af18d", 0x1, 0x40, 0x1, 0x8, 0x4, 0x3, 0x36, 0xe86}) (async) 06:32:24 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000480)={&(0x7f0000000040)={{@host, 0x57f}, {@host, 0x1000dd8b}, 0x400, "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"}, 0xffffff71, 0x9}) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) [ 2283.825289] Bluetooth: hci1: command 0x0c1a tx timeout [ 2284.217471] ieee802154 phy0 wpan0: encryption failed: -22 [ 2284.223118] ieee802154 phy1 wpan1: encryption failed: -22 06:32:25 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0xa, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:25 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000480)={&(0x7f0000000040)={{@host, 0x57f}, {@host, 0x1000dd8b}, 0x400, "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"}, 0xffffff71, 0x9}) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000480)={&(0x7f0000000040)={{@host, 0x57f}, {@host, 0x1000dd8b}, 0x400, "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"}, 0xffffff71, 0x9}) (async) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) (async) 06:32:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) 06:32:26 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x0, 0x1, 0x1, {0x0, @sliced={0x0, [0xf58, 0x1f, 0x7, 0x6, 0x1, 0x3ff, 0x9, 0xfee0, 0x8000, 0x101, 0xff, 0x7ff, 0x8, 0x4, 0x5, 0x3, 0x100, 0x635, 0x8, 0xf5ce, 0x0, 0x7ff, 0x7, 0x6, 0x1, 0x843, 0x3, 0x9, 0x0, 0x8000, 0x9, 0x3f, 0x6, 0x6, 0x9, 0x0, 0x71, 0x0, 0x401, 0x6, 0x0, 0x1, 0x800, 0x4, 0x80, 0x698d, 0x7], 0x7}}, 0x5}) 06:32:26 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000480)={&(0x7f0000000040)={{@host, 0x57f}, {@host, 0x1000dd8b}, 0x400, "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"}, 0xffffff71, 0x9}) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000480)={&(0x7f0000000040)={{@host, 0x57f}, {@host, 0x1000dd8b}, 0x400, "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"}, 0xffffff71, 0x9}) (async) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) (async) 06:32:26 executing program 0: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x6275, 0x2, 0xc}) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:26 executing program 3: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x6275, 0x2, 0xc}) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:26 executing program 1: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000480)={&(0x7f0000000040)={{@host, 0x57f}, {@host, 0x1000dd8b}, 0x400, "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"}, 0xffffff71, 0x9}) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) [ 2285.895094] Bluetooth: hci1: command 0x0c1a tx timeout 06:32:27 executing program 1: clock_gettime(0x5, &(0x7f0000000080)) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "e09960cc2f497d5b", "d1c46c8e3bcac20ec158216073178db02f03df4b5c20ac65961f6e83317abcd2", "750916df", "f070053d7313c2f8"}, 0x38) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "f1c5ac29e3af89ee", "8a5d791cded7bcde6ad720d4e0f4c0ed", "098ed2b1", "9a180c20b0d26226"}, 0x28) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:27 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x20) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 06:32:27 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x20) (async) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 06:32:27 executing program 1: clock_gettime(0x5, &(0x7f0000000080)) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "e09960cc2f497d5b", "d1c46c8e3bcac20ec158216073178db02f03df4b5c20ac65961f6e83317abcd2", "750916df", "f070053d7313c2f8"}, 0x38) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "f1c5ac29e3af89ee", "8a5d791cded7bcde6ad720d4e0f4c0ed", "098ed2b1", "9a180c20b0d26226"}, 0x28) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:27 executing program 1: clock_gettime(0x5, &(0x7f0000000080)) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "e09960cc2f497d5b", "d1c46c8e3bcac20ec158216073178db02f03df4b5c20ac65961f6e83317abcd2", "750916df", "f070053d7313c2f8"}, 0x38) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "f1c5ac29e3af89ee", "8a5d791cded7bcde6ad720d4e0f4c0ed", "098ed2b1", "9a180c20b0d26226"}, 0x28) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:27 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x20) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x20) (async) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) (async) 06:32:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x0, 0x1, 0x1, {0x3, @pix_mp={0xbe, 0x16b2, 0x32314d4e, 0x7, 0x8, [{0x1, 0x8000}, {0x0, 0x5}, {0x800, 0xf01}, {0x0, 0x6}, {0x3, 0x5}, {0x50e, 0x783c}, {0x80}, {0xffff8001, 0x9daa}], 0x7, 0x6, 0x6, 0x1}}}) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xa05f4acee685f0b6}, 0x800) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9a8}) 06:32:28 executing program 1: clock_gettime(0x5, &(0x7f0000000080)) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "e09960cc2f497d5b", "d1c46c8e3bcac20ec158216073178db02f03df4b5c20ac65961f6e83317abcd2", "750916df", "f070053d7313c2f8"}, 0x38) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "f1c5ac29e3af89ee", "8a5d791cded7bcde6ad720d4e0f4c0ed", "098ed2b1", "9a180c20b0d26226"}, 0x28) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:28 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2c, 0x3, 0x0) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) [ 2287.974932] Bluetooth: hci1: command 0x0c1a tx timeout 06:32:30 executing program 0: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x6275, 0x2, 0xc}) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:30 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x0, 0x1, 0x1, {0x0, @sliced={0x0, [0xf58, 0x1f, 0x7, 0x6, 0x1, 0x3ff, 0x9, 0xfee0, 0x8000, 0x101, 0xff, 0x7ff, 0x8, 0x4, 0x5, 0x3, 0x100, 0x635, 0x8, 0xf5ce, 0x0, 0x7ff, 0x7, 0x6, 0x1, 0x843, 0x3, 0x9, 0x0, 0x8000, 0x9, 0x3f, 0x6, 0x6, 0x9, 0x0, 0x71, 0x0, 0x401, 0x6, 0x0, 0x1, 0x800, 0x4, 0x80, 0x698d, 0x7], 0x7}}, 0x5}) 06:32:30 executing program 1: clock_gettime(0x5, &(0x7f0000000080)) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "e09960cc2f497d5b", "d1c46c8e3bcac20ec158216073178db02f03df4b5c20ac65961f6e83317abcd2", "750916df", "f070053d7313c2f8"}, 0x38) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:30 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2c, 0x3, 0x0) (async) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:32:30 executing program 3: clock_gettime(0x5, &(0x7f0000000080)) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "e09960cc2f497d5b", "d1c46c8e3bcac20ec158216073178db02f03df4b5c20ac65961f6e83317abcd2", "750916df", "f070053d7313c2f8"}, 0x38) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "f1c5ac29e3af89ee", "8a5d791cded7bcde6ad720d4e0f4c0ed", "098ed2b1", "9a180c20b0d26226"}, 0x28) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:30 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x0, 0x1, 0x1, {0x3, @pix_mp={0xbe, 0x16b2, 0x32314d4e, 0x7, 0x8, [{0x1, 0x8000}, {0x0, 0x5}, {0x800, 0xf01}, {0x0, 0x6}, {0x3, 0x5}, {0x50e, 0x783c}, {0x80}, {0xffff8001, 0x9daa}], 0x7, 0x6, 0x6, 0x1}}}) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xa05f4acee685f0b6}, 0x800) (async) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9a8}) 06:32:30 executing program 1: clock_gettime(0x5, &(0x7f0000000080)) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "e09960cc2f497d5b", "d1c46c8e3bcac20ec158216073178db02f03df4b5c20ac65961f6e83317abcd2", "750916df", "f070053d7313c2f8"}, 0x38) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:30 executing program 3: clock_gettime(0x5, &(0x7f0000000080)) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "e09960cc2f497d5b", "d1c46c8e3bcac20ec158216073178db02f03df4b5c20ac65961f6e83317abcd2", "750916df", "f070053d7313c2f8"}, 0x38) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "f1c5ac29e3af89ee", "8a5d791cded7bcde6ad720d4e0f4c0ed", "098ed2b1", "9a180c20b0d26226"}, 0x28) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:30 executing program 1: clock_gettime(0x5, &(0x7f0000000080)) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "e09960cc2f497d5b", "d1c46c8e3bcac20ec158216073178db02f03df4b5c20ac65961f6e83317abcd2", "750916df", "f070053d7313c2f8"}, 0x38) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:30 executing program 3: clock_gettime(0x5, &(0x7f0000000080)) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "e09960cc2f497d5b", "d1c46c8e3bcac20ec158216073178db02f03df4b5c20ac65961f6e83317abcd2", "750916df", "f070053d7313c2f8"}, 0x38) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "f1c5ac29e3af89ee", "8a5d791cded7bcde6ad720d4e0f4c0ed", "098ed2b1", "9a180c20b0d26226"}, 0x28) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:30 executing program 1: clock_gettime(0x5, &(0x7f0000000080)) r0 = socket(0x11, 0x3, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:30 executing program 3: clock_gettime(0x5, &(0x7f0000000080)) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "e09960cc2f497d5b", "d1c46c8e3bcac20ec158216073178db02f03df4b5c20ac65961f6e83317abcd2", "750916df", "f070053d7313c2f8"}, 0x38) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "f1c5ac29e3af89ee", "8a5d791cded7bcde6ad720d4e0f4c0ed", "098ed2b1", "9a180c20b0d26226"}, 0x28) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) [ 2290.054895] Bluetooth: hci1: command 0x0c1a tx timeout [ 2292.144685] Bluetooth: hci1: command 0x0c1a tx timeout 06:32:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:33 executing program 1: clock_gettime(0x5, &(0x7f0000000080)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:33 executing program 3: clock_gettime(0x5, &(0x7f0000000080)) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "e09960cc2f497d5b", "d1c46c8e3bcac20ec158216073178db02f03df4b5c20ac65961f6e83317abcd2", "750916df", "f070053d7313c2f8"}, 0x38) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "f1c5ac29e3af89ee", "8a5d791cded7bcde6ad720d4e0f4c0ed", "098ed2b1", "9a180c20b0d26226"}, 0x28) 06:32:33 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2c, 0x3, 0x0) (async) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:32:33 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x0, 0x1, 0x1, {0x3, @pix_mp={0xbe, 0x16b2, 0x32314d4e, 0x7, 0x8, [{0x1, 0x8000}, {0x0, 0x5}, {0x800, 0xf01}, {0x0, 0x6}, {0x3, 0x5}, {0x50e, 0x783c}, {0x80}, {0xffff8001, 0x9daa}], 0x7, 0x6, 0x6, 0x1}}}) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xa05f4acee685f0b6}, 0x800) (async, rerun: 64) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9a8}) (rerun: 64) 06:32:33 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x0, 0x1, 0x1, {0x0, @sliced={0x0, [0xf58, 0x1f, 0x7, 0x6, 0x1, 0x3ff, 0x9, 0xfee0, 0x8000, 0x101, 0xff, 0x7ff, 0x8, 0x4, 0x5, 0x3, 0x100, 0x635, 0x8, 0xf5ce, 0x0, 0x7ff, 0x7, 0x6, 0x1, 0x843, 0x3, 0x9, 0x0, 0x8000, 0x9, 0x3f, 0x6, 0x6, 0x9, 0x0, 0x71, 0x0, 0x401, 0x6, 0x0, 0x1, 0x800, 0x4, 0x80, 0x698d, 0x7], 0x7}}, 0x5}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x0, 0x1, 0x1, {0x0, @sliced={0x0, [0xf58, 0x1f, 0x7, 0x6, 0x1, 0x3ff, 0x9, 0xfee0, 0x8000, 0x101, 0xff, 0x7ff, 0x8, 0x4, 0x5, 0x3, 0x100, 0x635, 0x8, 0xf5ce, 0x0, 0x7ff, 0x7, 0x6, 0x1, 0x843, 0x3, 0x9, 0x0, 0x8000, 0x9, 0x3f, 0x6, 0x6, 0x9, 0x0, 0x71, 0x0, 0x401, 0x6, 0x0, 0x1, 0x800, 0x4, 0x80, 0x698d, 0x7], 0x7}}, 0x5}) (async) 06:32:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) 06:32:33 executing program 1: clock_gettime(0x5, &(0x7f0000000080)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:33 executing program 3: clock_gettime(0x5, &(0x7f0000000080)) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "e09960cc2f497d5b", "d1c46c8e3bcac20ec158216073178db02f03df4b5c20ac65961f6e83317abcd2", "750916df", "f070053d7313c2f8"}, 0x38) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 06:32:33 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x5, 0x1, 0x3, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:33 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x1, 0x2) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000440), 0x1, 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000480)={0xfffffffd, 0x2d492467, 0x100, 0x2abf, 0x2, @discrete={0x7ff, 0x2}}) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x3) r4 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000240)={0x8, @win={{0x0, 0x3e, 0x0, 0x4}, 0x1, 0x9, &(0x7f00000001c0)={{0x4, 0xefa, 0x1, 0x7f}}, 0x7, &(0x7f0000000200)="bba518ff8ce6", 0x9f}}) r5 = syz_open_dev$cec(&(0x7f0000000340), 0x1, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, &(0x7f0000000380)={0xb7d, "402eb3dbef9bc5f1ab4914b91e9bc105e0ef5dfdace1e1c39c9c8ba02041a682", 0x1}) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000080)={0xa, {0x4, 0x7, 0x3f, 0x80}, {0x7, 0xffff65aa, 0x80000000, 0xd83}, {0x9, 0x4c}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 06:32:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:33 executing program 3: clock_gettime(0x5, &(0x7f0000000080)) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "e09960cc2f497d5b", "d1c46c8e3bcac20ec158216073178db02f03df4b5c20ac65961f6e83317abcd2", "750916df", "f070053d7313c2f8"}, 0x38) socket$inet_smc(0x2b, 0x1, 0x0) 06:32:33 executing program 1: clock_gettime(0x5, &(0x7f0000000080)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:33 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x5, 0x1, 0x3, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:34 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)) 06:32:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0x2}) 06:32:34 executing program 3: clock_gettime(0x5, &(0x7f0000000080)) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "e09960cc2f497d5b", "d1c46c8e3bcac20ec158216073178db02f03df4b5c20ac65961f6e83317abcd2", "750916df", "f070053d7313c2f8"}, 0x38) 06:32:34 executing program 1: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:34 executing program 3: clock_gettime(0x5, &(0x7f0000000080)) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "e09960cc2f497d5b", "d1c46c8e3bcac20ec158216073178db02f03df4b5c20ac65961f6e83317abcd2", "750916df", "f070053d7313c2f8"}, 0x38) 06:32:34 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)) 06:32:34 executing program 1: r0 = socket(0x0, 0x3, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) [ 2294.214446] Bluetooth: hci1: command 0x0c1a tx timeout 06:32:36 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x1, 0x2) (async) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) (async) r3 = syz_open_dev$radio(&(0x7f0000000440), 0x1, 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000480)={0xfffffffd, 0x2d492467, 0x100, 0x2abf, 0x2, @discrete={0x7ff, 0x2}}) (async) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000700)) (async) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x3) (async) r4 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000240)={0x8, @win={{0x0, 0x3e, 0x0, 0x4}, 0x1, 0x9, &(0x7f00000001c0)={{0x4, 0xefa, 0x1, 0x7f}}, 0x7, &(0x7f0000000200)="bba518ff8ce6", 0x9f}}) r5 = syz_open_dev$cec(&(0x7f0000000340), 0x1, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, &(0x7f0000000380)={0xb7d, "402eb3dbef9bc5f1ab4914b91e9bc105e0ef5dfdace1e1c39c9c8ba02041a682", 0x1}) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000080)={0xa, {0x4, 0x7, 0x3f, 0x80}, {0x7, 0xffff65aa, 0x80000000, 0xd83}, {0x9, 0x4c}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 06:32:36 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)) 06:32:36 executing program 1: r0 = socket(0x0, 0x3, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:36 executing program 3: clock_gettime(0x5, &(0x7f0000000080)) socket(0x11, 0x3, 0x0) 06:32:36 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x5, 0x1, 0x3, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:36 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0x2}) 06:32:36 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$IOCTL_VMCI_SET_NOTIFY(0xffffffffffffffff, 0x7cb, &(0x7f0000000080)={0x0, 0x3, 0x3}) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ce}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x801}, 0x1) 06:32:36 executing program 3: clock_gettime(0x5, &(0x7f0000000080)) 06:32:36 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x4, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:32:36 executing program 1: r0 = socket(0x0, 0x3, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:36 executing program 3: clock_gettime(0x0, &(0x7f0000000080)) 06:32:36 executing program 1: r0 = socket(0x11, 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) [ 2296.294280] Bluetooth: hci1: command 0x0c1a tx timeout [ 2297.894189] Bluetooth: hci4: command 0x0c1a tx timeout [ 2298.374133] Bluetooth: hci1: command 0x0c1a tx timeout 06:32:39 executing program 1: r0 = socket(0x11, 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:39 executing program 3: clock_gettime(0x0, &(0x7f0000000080)) 06:32:39 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x1, 0x2) (async, rerun: 64) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) (async, rerun: 64) r3 = syz_open_dev$radio(&(0x7f0000000440), 0x1, 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000480)={0xfffffffd, 0x2d492467, 0x100, 0x2abf, 0x2, @discrete={0x7ff, 0x2}}) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000700)) (async) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x3) (async, rerun: 64) r4 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) (rerun: 64) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000700)) (async) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000240)={0x8, @win={{0x0, 0x3e, 0x0, 0x4}, 0x1, 0x9, &(0x7f00000001c0)={{0x4, 0xefa, 0x1, 0x7f}}, 0x7, &(0x7f0000000200)="bba518ff8ce6", 0x9f}}) r5 = syz_open_dev$cec(&(0x7f0000000340), 0x1, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, &(0x7f0000000380)={0xb7d, "402eb3dbef9bc5f1ab4914b91e9bc105e0ef5dfdace1e1c39c9c8ba02041a682", 0x1}) (async, rerun: 64) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000080)={0xa, {0x4, 0x7, 0x3f, 0x80}, {0x7, 0xffff65aa, 0x80000000, 0xd83}, {0x9, 0x4c}}) (rerun: 64) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 06:32:39 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:32:39 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0x2}) 06:32:39 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$IOCTL_VMCI_SET_NOTIFY(0xffffffffffffffff, 0x7cb, &(0x7f0000000080)={0x0, 0x3, 0x3}) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ce}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x801}, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) ioctl$IOCTL_VMCI_SET_NOTIFY(0xffffffffffffffff, 0x7cb, &(0x7f0000000080)={0x0, 0x3, 0x3}) (async) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ce}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x801}, 0x1) (async) 06:32:39 executing program 1: r0 = socket(0x11, 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:39 executing program 3: clock_gettime(0x0, &(0x7f0000000080)) 06:32:39 executing program 3: clock_gettime(0x5, 0x0) 06:32:39 executing program 1: socket(0x11, 0x3, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:39 executing program 3: clock_gettime(0x5, 0x0) 06:32:39 executing program 1: socket(0x11, 0x3, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:39 executing program 1: socket(0x11, 0x3, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) [ 2300.454040] Bluetooth: hci1: command 0x0c1a tx timeout [ 2300.854011] Bluetooth: hci4: command 0x0c1a tx timeout 06:32:43 executing program 3: clock_gettime(0x5, 0x0) 06:32:43 executing program 1: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000040)=""/58, &(0x7f0000000100)=0x3a) 06:32:43 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x4, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) (async) [ 2302.533838] Bluetooth: hci1: command 0x0c1a tx timeout [ 2304.373712] Bluetooth: hci4: command 0x0c1a tx timeout [ 2304.623721] Bluetooth: hci1: command 0x0c1a tx timeout 06:32:45 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) arch_prctl$ARCH_GET_CPUID(0x1011) 06:32:45 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$IOCTL_VMCI_SET_NOTIFY(0xffffffffffffffff, 0x7cb, &(0x7f0000000080)={0x0, 0x3, 0x3}) (async) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ce}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x801}, 0x1) 06:32:45 executing program 3: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x4, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:32:45 executing program 1: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, &(0x7f0000000100)) 06:32:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x14, r2, 0x10, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4810) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x204, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) r7 = socket(0x0, 0x80000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001480)={&(0x7f0000000840)={0xc08, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x248, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5b48}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffe025}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc0000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x19, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x7ff, 0x67, 0x2d, 0x4}, {0x165f, 0x8, 0x1, 0x9}, {0x101, 0xe5, 0x6, 0x1}, {0x1e94, 0x81, 0x2, 0x401}, {0xc54, 0x4, 0x8, 0x4}, {0xdac, 0x80, 0x3, 0x3af19230}, {0x4, 0x9, 0x3, 0x4}, {0x3, 0xec, 0x40, 0xcc1}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r12}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7cb3}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x65}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r4}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x81, 0x81, 0x8, 0x7}, {0x5, 0x81, 0x8, 0x8}, {0x9, 0x8, 0xfc, 0x2}, {0x8, 0x9, 0x4, 0x6}, {0x1, 0x4, 0x5, 0x5}, {0x200, 0x1, 0x1}, {0x81, 0x4, 0x3, 0x6}, {0x9, 0x7, 0x7f, 0x8}]}}}]}}, {{0x8, 0x1, r6}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6d6}}}]}}]}, 0xc08}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000004) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) 06:32:45 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f00000000c0)) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000040)={0x5}) 06:32:45 executing program 1: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 06:32:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x1, 0x2) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000440), 0x1, 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000480)={0xfffffffd, 0x2d492467, 0x100, 0x2abf, 0x2, @discrete={0x7ff, 0x2}}) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x3) r4 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000240)={0x8, @win={{0x0, 0x3e, 0x0, 0x4}, 0x1, 0x9, &(0x7f00000001c0)={{0x4, 0xefa, 0x1, 0x7f}}, 0x7, &(0x7f0000000200)="bba518ff8ce6", 0x9f}}) r5 = syz_open_dev$cec(&(0x7f0000000340), 0x1, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, &(0x7f0000000380)={0xb7d, "402eb3dbef9bc5f1ab4914b91e9bc105e0ef5dfdace1e1c39c9c8ba02041a682", 0x1}) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000080)={0xa, {0x4, 0x7, 0x3f, 0x80}, {0x7, 0xffff65aa, 0x80000000, 0xd83}, {0x9, 0x4c}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 06:32:46 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:46 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f00000000c0)) (async) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000040)={0x5}) 06:32:46 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:46 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) [ 2306.453521] Bluetooth: hci4: command 0x0c1a tx timeout [ 2306.693499] Bluetooth: hci1: command 0x0c1a tx timeout 06:32:48 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async, rerun: 64) arch_prctl$ARCH_GET_CPUID(0x1011) (rerun: 64) 06:32:48 executing program 3: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:48 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f00000000c0)) (async) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000040)={0x5}) 06:32:48 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000040)={{@my=0x1, 0x8}, 0x6, 0x7ff, 0x40, 0x9, 0x2, 0x6, 0xffff, 0x20}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:48 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x14, r2, 0x10, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4810) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x204, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) r7 = socket(0x0, 0x80000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001480)={&(0x7f0000000840)={0xc08, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x248, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5b48}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffe025}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc0000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x19, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x7ff, 0x67, 0x2d, 0x4}, {0x165f, 0x8, 0x1, 0x9}, {0x101, 0xe5, 0x6, 0x1}, {0x1e94, 0x81, 0x2, 0x401}, {0xc54, 0x4, 0x8, 0x4}, {0xdac, 0x80, 0x3, 0x3af19230}, {0x4, 0x9, 0x3, 0x4}, {0x3, 0xec, 0x40, 0xcc1}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r12}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7cb3}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x65}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r4}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x81, 0x81, 0x8, 0x7}, {0x5, 0x81, 0x8, 0x8}, {0x9, 0x8, 0xfc, 0x2}, {0x8, 0x9, 0x4, 0x6}, {0x1, 0x4, 0x5, 0x5}, {0x200, 0x1, 0x1}, {0x81, 0x4, 0x3, 0x6}, {0x9, 0x7, 0x7f, 0x8}]}}}]}}, {{0x8, 0x1, r6}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6d6}}}]}}]}, 0xc08}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000004) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x14, r2, 0x10, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4810) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x204, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) socket(0x0, 0x80000, 0x0) (async) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000006c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000700)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000740)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000800)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001480)={&(0x7f0000000840)={0xc08, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x248, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5b48}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffe025}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc0000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x19, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x7ff, 0x67, 0x2d, 0x4}, {0x165f, 0x8, 0x1, 0x9}, {0x101, 0xe5, 0x6, 0x1}, {0x1e94, 0x81, 0x2, 0x401}, {0xc54, 0x4, 0x8, 0x4}, {0xdac, 0x80, 0x3, 0x3af19230}, {0x4, 0x9, 0x3, 0x4}, {0x3, 0xec, 0x40, 0xcc1}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r12}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7cb3}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x65}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r4}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x81, 0x81, 0x8, 0x7}, {0x5, 0x81, 0x8, 0x8}, {0x9, 0x8, 0xfc, 0x2}, {0x8, 0x9, 0x4, 0x6}, {0x1, 0x4, 0x5, 0x5}, {0x200, 0x1, 0x1}, {0x81, 0x4, 0x3, 0x6}, {0x9, 0x7, 0x7f, 0x8}]}}}]}}, {{0x8, 0x1, r6}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6d6}}}]}}]}, 0xc08}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000004) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) (async) 06:32:48 executing program 1: clock_gettime(0x5, &(0x7f0000000080)) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "e09960cc2f497d5b", "d1c46c8e3bcac20ec158216073178db02f03df4b5c20ac65961f6e83317abcd2", "750916df", "f070053d7313c2f8"}, 0x38) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "f1c5ac29e3af89ee", "8a5d791cded7bcde6ad720d4e0f4c0ed", "098ed2b1", "9a180c20b0d26226"}, 0x28) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) 06:32:48 executing program 3: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:48 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x7, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:49 executing program 3: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:49 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:49 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:49 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) [ 2308.533372] Bluetooth: hci4: command 0x0c1a tx timeout [ 2308.783348] Bluetooth: hci1: command 0x0c1a tx timeout [ 2310.853216] Bluetooth: hci1: command 0x0c1a tx timeout 06:32:52 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) arch_prctl$ARCH_GET_CPUID(0x1011) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) arch_prctl$ARCH_GET_CPUID(0x1011) (async) 06:32:52 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:52 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) socket$can_raw(0x1d, 0x3, 0x1) 06:32:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x14, r2, 0x10, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4810) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x204, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async, rerun: 64) r7 = socket(0x0, 0x80000, 0x0) (rerun: 64) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001480)={&(0x7f0000000840)={0xc08, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x248, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5b48}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffe025}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc0000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x19, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x7ff, 0x67, 0x2d, 0x4}, {0x165f, 0x8, 0x1, 0x9}, {0x101, 0xe5, 0x6, 0x1}, {0x1e94, 0x81, 0x2, 0x401}, {0xc54, 0x4, 0x8, 0x4}, {0xdac, 0x80, 0x3, 0x3af19230}, {0x4, 0x9, 0x3, 0x4}, {0x3, 0xec, 0x40, 0xcc1}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r12}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7cb3}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x65}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r4}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x81, 0x81, 0x8, 0x7}, {0x5, 0x81, 0x8, 0x8}, {0x9, 0x8, 0xfc, 0x2}, {0x8, 0x9, 0x4, 0x6}, {0x1, 0x4, 0x5, 0x5}, {0x200, 0x1, 0x1}, {0x81, 0x4, 0x3, 0x6}, {0x9, 0x7, 0x7f, 0x8}]}}}]}}, {{0x8, 0x1, r6}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6d6}}}]}}]}, 0xc08}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000004) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) 06:32:52 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000040)={{@my=0x1, 0x8}, 0x6, 0x7ff, 0x40, 0x9, 0x2, 0x6, 0xffff, 0x20}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x4, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:52 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000040)={{@my=0x1, 0x8}, 0x6, 0x7ff, 0x40, 0x9, 0x2, 0x6, 0xffff, 0x20}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:52 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) socket$can_raw(0x1d, 0x3, 0x1) 06:32:53 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) (async) socket$can_raw(0x1d, 0x3, 0x1) [ 2312.943067] Bluetooth: hci1: command 0x0c1a tx timeout 06:32:54 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f00000001c0)={@hyper, 0x6}) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000), 0x4) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000200), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000240)={@hyper, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[r2], &(0x7f0000000140)=[0x4, 0x7], 0x1}) 06:32:55 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f00000001c0)={@hyper, 0x6}) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000), 0x4) (async) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000200), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000240)={@hyper, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[r2], &(0x7f0000000140)=[0x4, 0x7], 0x1}) 06:32:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000002c0)={0xa, @win={{0x4, 0x6, 0x7c00000, 0xfffff8c6}, 0x5, 0x101, &(0x7f0000000040)={{0xffffffff, 0x10, 0x6, 0xffff}}, 0x7, &(0x7f00000001c0)="34c7795166ea4f4306e336f0ad27d591892fa766481fe652382bb84f75a99c30b3a7a3e24d9d35c1481e1cfe7c9aaf0c050ee842a6aee66510b05915b7e20f284ab819037960faef2b1bcfc266bbb133a2dc15dbcc7ab4d1dc6a4f414593981811b45f74e5849a8cfd33210ef1260df67e5f60febf581e1abafdcc7d34846dfd9f1391a93c16e0656419e6338321a48432d1ff47b63c9f9d72170bc09e1729738c18f3bb29c4eac6cd6a95b21c697681dfaf5c3a40af7675f2cddc1ca9825b24cac17f9a"}}) r1 = syz_open_dev$cec(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000400)={0x0, @reserved}) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) [ 2315.012869] Bluetooth: hci1: command 0x0c1a tx timeout [ 2315.893056] Bluetooth: hci0: command 0x0c1a tx timeout [ 2317.092727] Bluetooth: hci1: command 0x0c1a tx timeout 06:32:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x7ee5b, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:58 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:32:58 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x4, {0x4, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) 06:32:58 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f00000001c0)={@hyper, 0x6}) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000), 0x4) (async) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000200), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) (async) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000240)={@hyper, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[r2], &(0x7f0000000140)=[0x4, 0x7], 0x1}) 06:32:58 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000080), &(0x7f00000001c0)=0x4) 06:32:58 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) r3 = socket(0x2, 0x800, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='vegas\x00', 0x6) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000340)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r4, 0xc02064c3, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, r5, 0x0], 0x0, 0x4, 0x1}) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{}, "743e47f1d0d29602", "e91730749b937fe9d85dd5ab42fcb3a2d97abcbf1cf0eacd07c1442fc8bf4444", "a726e26a", "c318ef9e12d7a48d"}, 0x38) 06:32:58 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x4, {0x4, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0x1}) (async) socket$nl_generic(0x10, 0x3, 0x10) [ 2317.972895] Bluetooth: hci0: command 0x0c1a tx timeout 06:32:59 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000140)={0x7fffffff, 0x0, '\x00', {0x0, @bt={0x0, 0x80000000, 0x0, 0x5, 0xb45, 0x80000001, 0x1, 0x7f, 0xa362, 0x7, 0x0, 0x8, 0x3ff, 0xffffff00, 0x4, 0x10, {0xaec790a7, 0x7}, 0x2c, 0xff}}}) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000340)=0x1, 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000040)=0xfffffffd, 0xfffffffffffffe3b) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448dd, &(0x7f0000000200)="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") 06:32:59 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) (async) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000140)={0x7fffffff, 0x0, '\x00', {0x0, @bt={0x0, 0x80000000, 0x0, 0x5, 0xb45, 0x80000001, 0x1, 0x7f, 0xa362, 0x7, 0x0, 0x8, 0x3ff, 0xffffff00, 0x4, 0x10, {0xaec790a7, 0x7}, 0x2c, 0xff}}}) (async) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000340)=0x1, 0x4) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000040)=0xfffffffd, 0xfffffffffffffe3b) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448dd, &(0x7f0000000200)="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") 06:32:59 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000700)) (async) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000140)={0x7fffffff, 0x0, '\x00', {0x0, @bt={0x0, 0x80000000, 0x0, 0x5, 0xb45, 0x80000001, 0x1, 0x7f, 0xa362, 0x7, 0x0, 0x8, 0x3ff, 0xffffff00, 0x4, 0x10, {0xaec790a7, 0x7}, 0x2c, 0xff}}}) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000340)=0x1, 0x4) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000040)=0xfffffffd, 0xfffffffffffffe3b) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448dd, &(0x7f0000000200)="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") 06:32:59 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 2319.172564] Bluetooth: hci1: command 0x0c1a tx timeout 06:33:00 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) [ 2320.052743] Bluetooth: hci0: command 0x0c1a tx timeout [ 2321.252489] Bluetooth: hci1: command 0x0c1a tx timeout [ 2322.132543] Bluetooth: hci0: command 0x0c1a tx timeout [ 2322.724614] oom_reaper: reaped process 17059 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:12kB [ 2322.741517] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2322.758598] systemd-journal cpuset=/ mems_allowed=0-1 [ 2322.763867] CPU: 1 PID: 14987 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2322.771831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2322.781183] Call Trace: [ 2322.783783] dump_stack+0x1fc/0x2ef [ 2322.787413] dump_header+0x15d/0xc3f [ 2322.791130] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2322.796227] ? ___ratelimit+0x319/0x590 [ 2322.800207] oom_kill_process.cold+0x10/0x692 [ 2322.804708] ? check_preemption_disabled+0x41/0x280 [ 2322.809725] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2322.815007] out_of_memory+0x1072/0x1390 [ 2322.819073] ? oom_killer_disable+0x270/0x270 [ 2322.823567] ? mutex_trylock+0x15f/0x1a0 [ 2322.827629] __alloc_pages_nodemask+0x23a2/0x2890 [ 2322.832478] ? find_get_entry+0x4cd/0x8a0 [ 2322.836658] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2322.841522] alloc_pages_current+0x193/0x2a0 [ 2322.845931] filemap_fault+0x146e/0x2180 [ 2322.850022] ext4_filemap_fault+0x84/0xb0 [ 2322.854173] __do_fault+0x10b/0x4b0 [ 2322.857798] __handle_mm_fault+0x273b/0x41c0 [ 2322.862191] ? vm_insert_page+0x9c0/0x9c0 [ 2322.866336] ? check_preemption_disabled+0x41/0x280 [ 2322.871350] handle_mm_fault+0x436/0xb10 [ 2322.875394] __do_page_fault+0x68e/0xd60 [ 2322.879455] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2322.884453] ? spurious_fault+0x840/0x840 [ 2322.888595] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2322.893425] ? page_fault+0x8/0x30 [ 2322.896945] page_fault+0x1e/0x30 [ 2322.900380] RIP: 0033:0x7ff4ad42d21d [ 2322.904077] Code: Bad RIP value. [ 2322.907420] RSP: 002b:00007ffda2d6bc60 EFLAGS: 00010207 [ 2322.912761] RAX: 0000000000000001 RBX: 000055f072ccc1e0 RCX: 00007ff4aca522e3 [ 2322.920013] RDX: 0000000000000013 RSI: 00007ffda2d6bc60 RDI: 000000000000000c [ 2322.927262] RBP: 00007ffda2d6be50 R08: 431bde82d7b634db R09: 00000253a2bbae4c [ 2322.934511] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda2d6bc60 [ 2322.941759] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005e578a35b184c [ 2322.951251] Mem-Info: [ 2322.957849] syz-executor.1: vmalloc: allocation failure, allocated 1698336768 of 2128986112 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2322.971064] active_anon:17109 inactive_anon:30467 isolated_anon:0 [ 2322.971064] active_file:10 inactive_file:11 isolated_file:0 [ 2322.971064] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2322.971064] slab_reclaimable:14109 slab_unreclaimable:125975 [ 2322.971064] mapped:22241 shmem:31897 pagetables:621 bounce:0 [ 2322.971064] free:14024 free_pcp:164 free_cma:0 [ 2322.971693] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 2323.011533] Node 0 active_anon:66368kB inactive_anon:78536kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:75692kB dirty:0kB writeback:0kB shmem:84000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2323.016765] CPU: 0 PID: 17059 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 2323.046988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2323.047701] Node 1 active_anon:2068kB inactive_anon:43332kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13272kB dirty:0kB writeback:0kB shmem:43588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2323.056332] Call Trace: [ 2323.056353] dump_stack+0x1fc/0x2ef [ 2323.056371] warn_alloc.cold+0x7b/0x18f [ 2323.056389] ? zone_watermark_ok_safe+0x260/0x260 [ 2323.056405] ? retint_kernel+0x2d/0x2d [ 2323.056436] __vmalloc_area_node+0x4fd/0x780 [ 2323.091042] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:1852kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2323.093721] ? __vmalloc_node_range+0x180/0x180 [ 2323.093737] ? _raw_spin_unlock+0x29/0x40 [ 2323.093750] ? __get_vm_area_node+0x2e2/0x3a0 [ 2323.093769] __vmalloc_node_range+0xed/0x180 [ 2323.093789] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2323.098643] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2323.102525] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2323.102538] vmalloc_user+0x70/0xe0 [ 2323.102551] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2323.102565] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2323.102581] __vb2_queue_alloc+0x472/0xe60 [ 2323.102607] vb2_core_create_bufs+0x273/0x7e0 [ 2323.102620] ? __vb2_queue_free+0x870/0x870 [ 2323.102637] ? mutex_trylock+0x1a0/0x1a0 [ 2323.115165] Node 0 DMA32 free:18044kB min:35996kB low:44992kB high:53988kB active_anon:66308kB inactive_anon:76684kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:2200kB bounce:0kB free_pcp:404kB local_pcp:4kB free_cma:0kB [ 2323.133465] ? __video_do_ioctl+0x632/0xcd0 [ 2323.133486] vb2_create_bufs+0x332/0x620 [ 2323.133503] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2323.133517] ? __video_do_ioctl+0x632/0xcd0 [ 2323.133530] ? mutex_trylock+0x1a0/0x1a0 [ 2323.133545] ? mark_held_locks+0xf0/0xf0 [ 2323.133564] vb2_ioctl_create_bufs+0x20d/0x360 [ 2323.145691] lowmem_reserve[]: 0 0 1 1 1 [ 2323.146821] ? memset+0x20/0x40 [ 2323.152895] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2323.155521] v4l_create_bufs+0xb2/0x160 [ 2323.160503] lowmem_reserve[]: 0 0 0 0 0 [ 2323.165856] __video_do_ioctl+0x49a/0xcd0 [ 2323.165877] ? v4l_querycap+0x340/0x340 [ 2323.165896] ? __might_fault+0x192/0x1d0 [ 2323.165913] ? v4l_querycap+0x340/0x340 [ 2323.165931] video_usercopy+0x13f/0xfa0 [ 2323.178228] Node 1 Normal free:27168kB min:53876kB low:67344kB high:80812kB active_anon:2068kB inactive_anon:43332kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:284kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 2323.182211] ? v4l_enumstd+0x60/0x60 [ 2323.182226] ? do_futex+0x171/0x1880 [ 2323.182241] ? mark_held_locks+0xf0/0xf0 [ 2323.182258] ? debug_check_no_obj_freed+0x201/0x490 [ 2323.186727] lowmem_reserve[]: 0 0 0 0 0 [ 2323.191047] ? video_usercopy+0xfa0/0xfa0 [ 2323.202035] Node 0 DMA: 1*4kB (E) 3*8kB (ME) 2*16kB (M) 2*32kB (ME) 2*64kB (ME) 3*128kB (UE) 4*256kB (UE) 4*512kB (UE) 3*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10876kB [ 2323.223775] v4l2_ioctl+0x147/0x1a0 [ 2323.223789] ? video_devdata+0xa0/0xa0 [ 2323.223804] do_vfs_ioctl+0xcdb/0x12e0 [ 2323.223820] ? lock_downgrade+0x720/0x720 [ 2323.223837] ? check_preemption_disabled+0x41/0x280 [ 2323.223851] ? ioctl_preallocate+0x200/0x200 [ 2323.223868] ? __fget+0x356/0x510 [ 2323.223883] ? do_dup2+0x450/0x450 [ 2323.236403] Node 0 DMA32: 359*4kB (ME) 411*8kB (UME) 237*16kB (UME) 96*32kB (UME) 31*64kB (ME) 17*128kB (M) 7*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18052kB [ 2323.237412] ? __se_sys_futex+0x298/0x3b0 [ 2323.241705] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2323.245761] ksys_ioctl+0x9b/0xc0 [ 2323.245778] __x64_sys_ioctl+0x6f/0xb0 [ 2323.245794] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2323.245810] do_syscall_64+0xf9/0x620 [ 2323.258898] Node 1 Normal: 254*4kB (ME) 199*8kB (UME) 149*16kB (UME) 77*32kB (ME) 16*64kB (UM) 10*128kB (UME) 10*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 3*2048kB (UM) 1*4096kB (M) = 27168kB [ 2323.261638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2323.296699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2323.299496] RIP: 0033:0x7f5cc94ec209 [ 2323.306550] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2323.307509] Code: Bad RIP value. [ 2323.311459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2323.315403] RSP: 002b:00007f5cc7e61168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2323.315417] RAX: ffffffffffffffda RBX: 00007f5cc95fef60 RCX: 00007f5cc94ec209 [ 2323.315425] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 2323.315433] RBP: 00007f5cc9546161 R08: 0000000000000000 R09: 0000000000000000 [ 2323.315440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2323.315448] R13: 00007ffc8b0c2a8f R14: 00007f5cc7e61300 R15: 0000000000022000 [ 2323.326691] Mem-Info: [ 2323.359801] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2323.360451] Bluetooth: hci1: command 0x0c1a tx timeout [ 2323.370527] 31918 total pagecache pages [ 2323.387933] active_anon:17109 inactive_anon:30467 isolated_anon:0 [ 2323.387933] active_file:10 inactive_file:11 isolated_file:0 [ 2323.387933] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2323.387933] slab_reclaimable:14109 slab_unreclaimable:125975 [ 2323.387933] mapped:22241 shmem:31897 pagetables:621 bounce:0 [ 2323.387933] free:14024 free_pcp:164 free_cma:0 [ 2323.400278] 0 pages in swap cache [ 2323.404642] Node 0 active_anon:66368kB inactive_anon:78536kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:75692kB dirty:0kB writeback:0kB shmem:84000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2323.421319] Swap cache stats: add 0, delete 0, find 0/0 [ 2323.431158] Node 1 active_anon:2068kB inactive_anon:43332kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13272kB dirty:0kB writeback:0kB shmem:43588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2323.431167] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:1852kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2323.452551] Free swap = 0kB [ 2323.453706] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2323.460454] Total swap = 0kB [ 2323.462045] Node 0 DMA32 free:18044kB min:35996kB low:44992kB high:53988kB active_anon:66308kB inactive_anon:76684kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:2200kB bounce:0kB free_pcp:404kB local_pcp:400kB free_cma:0kB [ 2323.488237] 2097051 pages RAM [ 2323.498714] lowmem_reserve[]: 0 0 1 1 1 [ 2323.514741] 0 pages HighMem/MovableOnly [ 2323.522009] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2323.531383] 369649 pages reserved [ 2323.537376] lowmem_reserve[]: 0 0 0 0 0 [ 2323.541861] 0 pages cma reserved [ 2323.547172] Node 1 Normal free:27168kB min:53876kB low:67344kB high:80812kB active_anon:2068kB inactive_anon:43332kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:284kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 2323.547205] lowmem_reserve[]: 0 0 0 0 0 [ 2323.563384] Unreclaimable slab info: [ 2323.569197] Node 0 DMA: 1*4kB (E) 3*8kB (ME) 2*16kB (M) 2*32kB (ME) 2*64kB (ME) 3*128kB (UE) 4*256kB (UE) 4*512kB (UE) 3*1024kB (ME) 2*2048kB (ME) 0*4096kB = 10876kB [ 2323.577279] Name Used Total [ 2323.578189] Node 0 DMA32: 359*4kB (ME) 411*8kB (UME) 237*16kB (UME) 96*32kB (UME) 31*64kB (ME) 17*128kB (M) 7*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18052kB [ 2323.582107] pid_2 71KB 100KB [ 2323.619772] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2323.649633] batadv_tl_cache 4KB 12KB [ 2323.662512] Node 1 Normal: 254*4kB (ME) 199*8kB (UME) 149*16kB (UME) 77*32kB (ME) 16*64kB (UM) 10*128kB (UME) 10*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 3*2048kB (UM) 1*4096kB (M) = 27168kB [ 2323.683835] SMC 9KB 13KB [ 2323.713848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2323.713861] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2323.723077] TIPC 10KB 22KB [ 2323.751994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2323.760828] SCTPv6 14KB 18KB [ 2323.789114] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2323.800247] SCTP 19KB 23KB [ 2323.835076] 31918 total pagecache pages [ 2323.854257] DCCPv6 17KB 37KB [ 2323.878842] 0 pages in swap cache [ 2323.891072] DCCP 16KB 28KB [ 2323.891113] RXRPC 11KB 19KB [ 2323.918635] Swap cache stats: add 0, delete 0, find 0/0 [ 2323.929074] rxrpc_call_jar 78KB 94KB [ 2323.930971] Free swap = 0kB [ 2323.936354] bridge_fdb_cache 9KB 23KB [ 2323.936370] fib6_nodes 156KB 252KB [ 2323.936383] ip6_dst_cache 80KB 423KB [ 2323.955705] Total swap = 0kB [ 2323.962374] RAWv6 77KB 87KB [ 2323.976603] 2097051 pages RAM [ 2323.979114] UDPv6 26KB 41KB [ 2323.987577] 0 pages HighMem/MovableOnly [ 2323.996279] TCPv6 30KB 42KB [ 2324.002144] 369649 pages reserved [ 2324.004814] nf_conntrack 5KB 11KB [ 2324.008916] 0 pages cma reserved [ 2324.018715] AF_VSOCK 3KB 45KB [ 2324.073543] t10_alua_lu_gp_cache 0KB 3KB [ 2324.079230] sd_ext_cdb 0KB 7KB [ 2324.087858] scsi_sense_cache 1056KB 1060KB [ 2324.098329] virtio_scsi_cmd 16KB 16KB [ 2324.107070] sgpool-128 8KB 8KB [ 2324.117542] sgpool-64 4KB 12KB [ 2324.126194] sgpool-32 2KB 15KB [ 2324.131558] sgpool-16 1KB 7KB [ 2324.142035] sgpool-8 0KB 7KB [ 2324.150685] mqueue_inode_cache 10KB 22KB [ 2324.161222] bio_post_read_ctx 14KB 15KB [ 2324.169929] bio-2 14KB 15KB [ 2324.181318] jfs_mp 7KB 7KB [ 2324.186858] cifs_small_rq 15KB 16KB [ 2324.195832] cifs_request 67KB 67KB [ 2324.201201] cifs_mpx_ids 0KB 7KB [ 2324.206814] nfs_commit_data 3KB 14KB [ 2324.215958] nfs_write_data 34KB 44KB [ 2324.221364] ext4_system_zone 1KB 7KB [ 2324.222435] Bluetooth: hci0: command 0x0c1a tx timeout [ 2324.226822] bio-1 1KB 7KB [ 2324.240816] pid_namespace 2KB 11KB [ 2324.246248] rpc_buffers 17KB 25KB [ 2324.251614] rpc_tasks 2KB 7KB [ 2324.260386] UNIX 159KB 176KB [ 2324.265809] tcp_bind_bucket 1KB 4KB [ 2324.271177] ip_fib_trie 23KB 47KB [ 2324.281539] ip_fib_alias 111KB 181KB [ 2324.286996] ip_dst_cache 4KB 20KB [ 2324.295951] RAW 42KB 60KB [ 2324.301317] UDP 30KB 47KB [ 2324.306784] TCP 11KB 22KB [ 2324.315635] hugetlbfs_inode_cache 3KB 15KB [ 2324.321348] fscache_cookie_jar 1KB 7KB [ 2324.326861] eventpoll_pwq 37KB 51KB [ 2324.335818] eventpoll_epi 63KB 74KB [ 2324.341182] inotify_inode_mark 41KB 43KB [ 2324.346685] request_queue 199KB 199KB [ 2324.352044] blkdev_requests 1KB 3KB [ 2324.360844] blkdev_ioc 10KB 30KB [ 2324.366264] bio-0 162KB 191KB [ 2324.371629] biovec-max 1311KB 1419KB [ 2324.382040] biovec-64 115KB 157KB [ 2324.387495] biovec-16 43KB 45KB [ 2324.396521] bio_integrity_payload 1KB 8KB [ 2324.402338] khugepaged_mm_slot 17KB 34KB [ 2324.407792] uid_cache 0KB 4KB [ 2324.416667] dmaengine-unmap-2 0KB 3KB [ 2324.422031] skbuff_fclone_cache 103KB 123KB [ 2324.427664] skbuff_head_cache 4817KB 6093KB [ 2324.436574] configfs_dir_cache 3KB 7KB [ 2324.442033] file_lock_cache 191KB 202KB [ 2324.447595] file_lock_ctx 9KB 11KB [ 2324.456551] fsnotify_mark_connector 19KB 27KB [ 2324.462490] net_namespace 52KB 52KB [ 2324.467847] shmem_inode_cache 8563KB 8586KB [ 2324.476662] task_delay_info 208KB 415KB [ 2324.483839] taskstats 95KB 99KB [ 2324.489211] proc_dir_entry 695KB 840KB [ 2324.498003] pde_opener 16KB 69KB [ 2324.503433] seq_file 312KB 460KB [ 2324.508799] sigqueue 77KB 82KB [ 2324.517782] kernfs_node_cache 18298KB 18321KB [ 2324.523219] mnt_cache 173KB 196KB [ 2324.528577] filp 5494KB 7312KB [ 2324.537453] names_cache 154636KB 154695KB [ 2324.542869] iint_cache 21KB 39KB [ 2324.548226] key_jar 4KB 7KB [ 2324.557015] uts_namespace 2KB 7KB [ 2324.562439] nsproxy 36KB 75KB [ 2324.567798] vm_area_struct 4579KB 4663KB [ 2324.576710] mm_struct 663KB 676KB [ 2324.583817] fs_cache 154KB 304KB [ 2324.589186] files_cache 547KB 746KB [ 2324.598018] signal_cache 1214KB 1660KB [ 2324.607482] sighand_cache 578KB 652KB [ 2324.620347] task_struct 6767KB 6855KB [ 2324.630183] cred_jar 1103KB 2504KB [ 2324.640078] anon_vma_chain 1712KB 1736KB [ 2324.649470] anon_vma 164KB 323KB [ 2324.655664] pid 79KB 252KB [ 2324.661025] Acpi-Operand 156KB 194KB [ 2324.670345] Acpi-ParseExt 9KB 11KB [ 2324.676575] Acpi-Parse 41KB 47KB [ 2324.681977] Acpi-State 52KB 63KB [ 2324.695655] Acpi-Namespace 20KB 27KB [ 2324.701027] numa_policy 0KB 3KB [ 2324.708852] debug_objects_cache 1425KB 2143KB [ 2324.716803] trace_event_file 297KB 298KB [ 2324.725164] ftrace_event_field 398KB 401KB [ 2324.730619] pool_workqueue 121KB 152KB [ 2324.738400] page->ptl 689KB 766KB [ 2324.746287] kmalloc-2097152 2050KB 2050KB [ 2324.751718] kmalloc-524288 2056KB 2056KB [ 2324.759551] kmalloc-262144 1290KB 1290KB [ 2324.767396] kmalloc-131072 650KB 650KB [ 2324.775316] kmalloc-65536 1848KB 1914KB [ 2324.780738] kmalloc-32768 1650KB 1650KB [ 2324.791440] kmalloc-16384 940KB 990KB [ 2324.799318] kmalloc-8192 3984KB 3984KB [ 2324.807176] kmalloc-4096 21398KB 21454KB [ 2324.815036] kmalloc-2048 11298KB 13986KB [ 2324.820459] kmalloc-1024 5819KB 11387KB [ 2324.828328] kmalloc-512 12112KB 13680KB [ 2324.836484] kmalloc-256 3898KB 5940KB [ 2324.841896] kmalloc-128 939KB 1578KB [ 2324.850033] kmalloc-96 2994KB 4292KB [ 2324.857947] kmalloc-64 2374KB 3432KB [ 2324.865924] kmalloc-32 1813KB 2460KB [ 2324.871289] kmalloc-192 1510KB 2824KB [ 2324.879029] kmem_cache 177KB 183KB [ 2324.886806] Out of memory (oom_kill_allocating_task): Kill process 14987 (systemd-journal) score 0 or sacrifice child [ 2324.901652] Killed process 14987 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:1540kB [ 2324.917992] oom_reaper: reaped process 14987 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1656kB [ 2325.100591] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2325.109791] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2325.127847] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2325.134793] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2325.144250] systemd[1]: Stopped Journal Service. [ 2325.161184] systemd[1]: Starting Journal Service... [ 2325.368039] systemd-journald[17109]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2325.412173] Bluetooth: hci1: command 0x0c1a tx timeout [ 2325.970090] systemd[1]: Started Journal Service. [ 2326.292218] Bluetooth: hci0: command 0x0c1a tx timeout [ 2327.491976] Bluetooth: hci1: command 0x0c1a tx timeout 06:33:09 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:33:09 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) (async) r3 = socket(0x2, 0x800, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='vegas\x00', 0x6) (async, rerun: 64) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) (async, rerun: 64) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000340)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r4, 0xc02064c3, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, r5, 0x0], 0x0, 0x4, 0x1}) (async) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{}, "743e47f1d0d29602", "e91730749b937fe9d85dd5ab42fcb3a2d97abcbf1cf0eacd07c1442fc8bf4444", "a726e26a", "c318ef9e12d7a48d"}, 0x38) 06:33:09 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000140)={0x7fffffff, 0x0, '\x00', {0x0, @bt={0x0, 0x80000000, 0x0, 0x5, 0xb45, 0x80000001, 0x1, 0x7f, 0xa362, 0x7, 0x0, 0x8, 0x3ff, 0xffffff00, 0x4, 0x10, {0xaec790a7, 0x7}, 0x2c, 0xff}}}) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000340)=0x1, 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000040)=0xfffffffd, 0xfffffffffffffe3b) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448dd, &(0x7f0000000200)="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") 06:33:09 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) 06:33:09 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000080), &(0x7f00000001c0)=0x4) 06:33:09 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x4, {0x4, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000040)) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x4, {0x4, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0x1}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 06:33:09 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000140)={0x7fffffff, 0x0, '\x00', {0x0, @bt={0x0, 0x80000000, 0x0, 0x5, 0xb45, 0x80000001, 0x1, 0x7f, 0xa362, 0x7, 0x0, 0x8, 0x3ff, 0xffffff00, 0x4, 0x10, {0xaec790a7, 0x7}, 0x2c, 0xff}}}) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000340)=0x1, 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000040)=0xfffffffd, 0xfffffffffffffe3b) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448dd, &(0x7f0000000200)="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") 06:33:09 executing program 1: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={r0, 0x80000}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000000)={{@my=0x0, 0x69da900f}, 0x2, 0xffffffff}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000300)=0x4) r1 = socket(0x1, 0x5, 0x0) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000002c0)={0xfffffe01, 0xb}) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x20, 0x7ffffffe, '\x00', &(0x7f0000000040)=0xbe}) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) r3 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, '\x00', @raw_data=[0x0, 0x3, 0x8, 0x3, 0x9, 0x8, 0x80000000, 0x5, 0x4, 0x7, 0x40, 0xfffffff7, 0xe8de, 0x8, 0x4, 0x80000000, 0x5, 0x800, 0x1f, 0x2, 0xab2a, 0xc4a6, 0x7, 0x3, 0x8, 0x37ee, 0x8001, 0x3, 0x9, 0x7eb111d3, 0x9]}) 06:33:09 executing program 1: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={r0, 0x80000}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000000)={{@my=0x0, 0x69da900f}, 0x2, 0xffffffff}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000300)=0x4) r1 = socket(0x1, 0x5, 0x0) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000002c0)={0xfffffe01, 0xb}) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x20, 0x7ffffffe, '\x00', &(0x7f0000000040)=0xbe}) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) r3 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, '\x00', @raw_data=[0x0, 0x3, 0x8, 0x3, 0x9, 0x8, 0x80000000, 0x5, 0x4, 0x7, 0x40, 0xfffffff7, 0xe8de, 0x8, 0x4, 0x80000000, 0x5, 0x800, 0x1f, 0x2, 0xab2a, 0xc4a6, 0x7, 0x3, 0x8, 0x37ee, 0x8001, 0x3, 0x9, 0x7eb111d3, 0x9]}) 06:33:09 executing program 1: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={r0, 0x80000}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000000)={{@my=0x0, 0x69da900f}, 0x2, 0xffffffff}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000300)=0x4) r1 = socket(0x1, 0x5, 0x0) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000002c0)={0xfffffe01, 0xb}) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x20, 0x7ffffffe, '\x00', &(0x7f0000000040)=0xbe}) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) r3 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000700)) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, '\x00', @raw_data=[0x0, 0x3, 0x8, 0x3, 0x9, 0x8, 0x80000000, 0x5, 0x4, 0x7, 0x40, 0xfffffff7, 0xe8de, 0x8, 0x4, 0x80000000, 0x5, 0x800, 0x1f, 0x2, 0xab2a, 0xc4a6, 0x7, 0x3, 0x8, 0x37ee, 0x8001, 0x3, 0x9, 0x7eb111d3, 0x9]}) 06:33:09 executing program 1: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={r0, 0x80000}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000000)={{@my=0x0, 0x69da900f}, 0x2, 0xffffffff}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000300)=0x4) r1 = socket(0x1, 0x5, 0x0) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000002c0)={0xfffffe01, 0xb}) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x20, 0x7ffffffe, '\x00', &(0x7f0000000040)=0xbe}) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) r3 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000700)) 06:33:09 executing program 1: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={r0, 0x80000}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000000)={{@my=0x0, 0x69da900f}, 0x2, 0xffffffff}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000300)=0x4) r1 = socket(0x1, 0x5, 0x0) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000002c0)={0xfffffe01, 0xb}) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x20, 0x7ffffffe, '\x00', &(0x7f0000000040)=0xbe}) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) [ 2329.571847] Bluetooth: hci1: command 0x0c1a tx timeout [ 2330.381746] Bluetooth: hci0: command 0x0c1a tx timeout [ 2331.661703] Bluetooth: hci1: command 0x0c1a tx timeout [ 2333.248712] oom_reaper: reaped process 17127 (syz-executor.3), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 2333.309450] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2333.326546] systemd-journal cpuset=/ mems_allowed=0-1 [ 2333.331848] CPU: 1 PID: 17109 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2333.339795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2333.341553] syz-executor.3: vmalloc: allocation failure, allocated 1692008448 of 2128986112 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2333.349132] Call Trace: [ 2333.362971] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2333.365497] dump_stack+0x1fc/0x2ef [ 2333.374197] dump_header+0x15d/0xc3f [ 2333.377905] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2333.382995] ? ___ratelimit+0x319/0x590 [ 2333.386963] oom_kill_process.cold+0x10/0x692 [ 2333.391454] ? check_preemption_disabled+0x41/0x280 [ 2333.396467] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2333.401735] out_of_memory+0x1072/0x1390 [ 2333.405807] ? oom_killer_disable+0x270/0x270 [ 2333.410296] ? mutex_trylock+0x15f/0x1a0 [ 2333.414356] __alloc_pages_nodemask+0x23a2/0x2890 [ 2333.419198] ? find_get_entry+0x4cd/0x8a0 [ 2333.423345] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2333.428214] alloc_pages_current+0x193/0x2a0 [ 2333.432615] filemap_fault+0x146e/0x2180 [ 2333.436679] ext4_filemap_fault+0x84/0xb0 [ 2333.440817] __do_fault+0x10b/0x4b0 [ 2333.444440] __handle_mm_fault+0x273b/0x41c0 [ 2333.448840] ? vm_insert_page+0x9c0/0x9c0 [ 2333.452989] ? check_preemption_disabled+0x41/0x280 [ 2333.458003] handle_mm_fault+0x436/0xb10 [ 2333.462058] __do_page_fault+0x68e/0xd60 [ 2333.466130] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2333.471143] ? spurious_fault+0x840/0x840 [ 2333.475289] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2333.480130] ? page_fault+0x8/0x30 [ 2333.483660] page_fault+0x1e/0x30 [ 2333.487205] RIP: 0033:0x7f436e9272e3 [ 2333.490914] Code: Bad RIP value. [ 2333.494272] RSP: 002b:00007ffe681945c8 EFLAGS: 00010246 [ 2333.499623] RAX: 0000000000000001 RBX: 00005595108c31e0 RCX: 00007f436e9272e3 [ 2333.506878] RDX: 0000000000000013 RSI: 00007ffe681945d0 RDI: 000000000000000c [ 2333.514133] RBP: 00007ffe681947c0 R08: 00007ffe681c9000 R09: 0000025628e262d0 [ 2333.521393] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe681945d0 [ 2333.528654] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005e578a3f1791a [ 2333.536019] CPU: 0 PID: 17127 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2333.539585] Mem-Info: [ 2333.543897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2333.543903] Call Trace: [ 2333.543923] dump_stack+0x1fc/0x2ef [ 2333.543942] warn_alloc.cold+0x7b/0x18f [ 2333.546346] active_anon:17115 inactive_anon:32499 isolated_anon:0 [ 2333.546346] active_file:33 inactive_file:15 isolated_file:0 [ 2333.546346] unevictable:0 dirty:40 writeback:7 unstable:0 [ 2333.546346] slab_reclaimable:14059 slab_unreclaimable:125794 [ 2333.546346] mapped:22183 shmem:33945 pagetables:606 bounce:0 [ 2333.546346] free:13835 free_pcp:145 free_cma:0 [ 2333.555671] ? zone_watermark_ok_safe+0x260/0x260 [ 2333.555687] ? retint_kernel+0x2d/0x2d [ 2333.555719] __vmalloc_area_node+0x4fd/0x780 [ 2333.558283] Node 0 active_anon:66612kB inactive_anon:79548kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:75124kB dirty:68kB writeback:4kB shmem:85076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2333.561883] ? __vmalloc_node_range+0x180/0x180 [ 2333.561903] ? _raw_spin_unlock+0x29/0x40 [ 2333.565884] Node 1 active_anon:1848kB inactive_anon:50448kB active_file:20kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13608kB dirty:92kB writeback:24kB shmem:50704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2333.599161] ? __get_vm_area_node+0x2e2/0x3a0 [ 2333.599180] __vmalloc_node_range+0xed/0x180 [ 2333.599197] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2333.604036] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:2924kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2333.607910] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2333.612305] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2333.639947] vmalloc_user+0x70/0xe0 [ 2333.639961] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2333.639976] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2333.644640] Node 0 DMA32 free:17632kB min:35996kB low:44992kB high:53988kB active_anon:66552kB inactive_anon:76624kB active_file:52kB inactive_file:44kB unevictable:0kB writepending:172kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:2132kB bounce:0kB free_pcp:328kB local_pcp:0kB free_cma:0kB [ 2333.648758] __vb2_queue_alloc+0x472/0xe60 [ 2333.676070] lowmem_reserve[]: 0 0 1 1 1 [ 2333.680561] vb2_core_create_bufs+0x273/0x7e0 [ 2333.684952] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2333.689240] ? __vb2_queue_free+0x870/0x870 [ 2333.715684] lowmem_reserve[]: 0 0 0 0 0 [ 2333.721017] ? mutex_trylock+0x1a0/0x1a0 [ 2333.726025] Node 1 Normal free:26820kB min:53876kB low:67344kB high:80812kB active_anon:1848kB inactive_anon:50448kB active_file:48kB inactive_file:108kB unevictable:0kB writepending:116kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:292kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 2333.729623] ? __video_do_ioctl+0x632/0xcd0 [ 2333.733927] lowmem_reserve[]: 0 0 0 0 0 [ 2333.738050] vb2_create_bufs+0x332/0x620 [ 2333.766935] Node 0 DMA: 2*4kB (UE) 3*8kB (ME) 4*16kB (UM) 7*32kB (UME) 11*64kB (UME) 7*128kB (UME) 5*256kB (UME) 5*512kB (UME) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 10880kB [ 2333.771135] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2333.775104] Node 0 DMA32: 432*4kB (UME) 446*8kB (ME) 271*16kB (ME) 98*32kB (UME) 26*64kB (UME) 7*128kB (UM) 7*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17632kB [ 2333.779566] ? __video_do_ioctl+0x632/0xcd0 [ 2333.779583] ? mutex_trylock+0x1a0/0x1a0 [ 2333.805425] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2333.809736] ? mark_held_locks+0xf0/0xf0 [ 2333.813716] Node 1 Normal: 241*4kB (ME) 192*8kB (UME) 148*16kB (UME) 70*32kB (UME) 30*64kB (UM) 9*128kB (ME) 1*256kB (U) 0*512kB 2*1024kB (ME) 1*2048kB (U) 3*4096kB (UM) = 26820kB [ 2333.817751] vb2_ioctl_create_bufs+0x20d/0x360 [ 2333.846544] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2333.850848] ? memset+0x20/0x40 [ 2333.854815] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2333.858841] v4l_create_bufs+0xb2/0x160 [ 2333.874362] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2333.879425] __video_do_ioctl+0x49a/0xcd0 [ 2333.894586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2333.898878] ? v4l_querycap+0x340/0x340 [ 2333.902951] 34005 total pagecache pages [ 2333.913936] ? __might_fault+0x192/0x1d0 [ 2333.913959] ? v4l_querycap+0x340/0x340 [ 2333.918002] 0 pages in swap cache [ 2333.934124] video_usercopy+0x13f/0xfa0 [ 2333.934145] ? v4l_enumstd+0x60/0x60 [ 2333.934163] ? do_futex+0x171/0x1880 [ 2333.938733] Swap cache stats: add 0, delete 0, find 0/0 [ 2333.947558] ? mark_held_locks+0xf0/0xf0 [ 2333.947576] ? debug_check_no_obj_freed+0x201/0x490 [ 2333.947600] ? video_usercopy+0xfa0/0xfa0 [ 2333.950850] Free swap = 0kB [ 2333.959405] v4l2_ioctl+0x147/0x1a0 [ 2333.959420] ? video_devdata+0xa0/0xa0 [ 2333.959436] do_vfs_ioctl+0xcdb/0x12e0 [ 2333.963401] Total swap = 0kB [ 2333.972209] ? lock_downgrade+0x720/0x720 [ 2333.972224] ? check_preemption_disabled+0x41/0x280 [ 2333.972240] ? ioctl_preallocate+0x200/0x200 [ 2333.976360] 2097051 pages RAM [ 2333.984924] ? __fget+0x356/0x510 [ 2333.984940] ? do_dup2+0x450/0x450 [ 2333.984957] ? __se_sys_futex+0x298/0x3b0 [ 2333.988903] 0 pages HighMem/MovableOnly [ 2333.992877] ksys_ioctl+0x9b/0xc0 [ 2333.992898] __x64_sys_ioctl+0x6f/0xb0 [ 2333.996944] 369649 pages reserved [ 2334.000922] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2334.004369] 0 pages cma reserved [ 2334.008310] do_syscall_64+0xf9/0x620 [ 2334.012027] Unreclaimable slab info: [ 2334.015714] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2334.021046] Name Used Total [ 2334.025091] RIP: 0033:0x7f3666b91209 [ 2334.025106] Code: Bad RIP value. [ 2334.025117] RSP: 002b:00007f3665506168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2334.030113] pid_2 61KB 100KB [ 2334.034243] RAX: ffffffffffffffda RBX: 00007f3666ca3f60 RCX: 00007f3666b91209 [ 2334.034252] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 2334.034259] RBP: 00007f3666beb161 R08: 0000000000000000 R09: 0000000000000000 [ 2334.034266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2334.034273] R13: 00007fffd759f56f R14: 00007f3665506300 R15: 0000000000022000 [ 2334.051430] Bluetooth: hci1: command 0x0c1a tx timeout [ 2334.067868] batadv_tl_cache 4KB 12KB [ 2334.076239] Mem-Info: [ 2334.083440] SMC 2KB 6KB [ 2334.084370] active_anon:17095 inactive_anon:32499 isolated_anon:0 [ 2334.084370] active_file:14 inactive_file:14 isolated_file:0 [ 2334.084370] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2334.084370] slab_reclaimable:14060 slab_unreclaimable:125798 [ 2334.084370] mapped:22173 shmem:33945 pagetables:605 bounce:0 [ 2334.084370] free:13835 free_pcp:145 free_cma:0 [ 2334.087580] TIPC 10KB 22KB [ 2334.091584] Node 0 active_anon:66520kB inactive_anon:79548kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:75116kB dirty:0kB writeback:0kB shmem:85076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2334.109376] SCTPv6 14KB 18KB [ 2334.116915] Node 1 active_anon:1860kB inactive_anon:50448kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13576kB dirty:0kB writeback:0kB shmem:50704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2334.118293] SCTP 19KB 23KB [ 2334.123376] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:60kB inactive_anon:2924kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2334.123415] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2334.134248] DCCPv6 17KB 37KB [ 2334.138313] Node 0 DMA32 free:17632kB min:35996kB low:44992kB high:53988kB active_anon:66460kB inactive_anon:76624kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:2128kB bounce:0kB free_pcp:328kB local_pcp:328kB free_cma:0kB [ 2334.157524] DCCP 16KB 28KB [ 2334.158100] lowmem_reserve[]: 0 0 1 1 1 [ 2334.179137] RXRPC 11KB 19KB [ 2334.180114] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2334.189866] rxrpc_call_jar 78KB 94KB [ 2334.190789] lowmem_reserve[]: 0 0 0 0 0 [ 2334.202581] bridge_fdb_cache 9KB 23KB [ 2334.233611] Node 1 Normal free:26820kB min:53876kB low:67344kB high:80812kB active_anon:1860kB inactive_anon:50448kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:292kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 2334.250695] fib6_nodes 156KB 252KB [ 2334.264955] lowmem_reserve[]: 0 0 0 0 0 [ 2334.264991] Node 0 DMA: 2*4kB (UE) 3*8kB (ME) 4*16kB (UM) 7*32kB (UME) 11*64kB (UME) 7*128kB (UME) 5*256kB (UME) 5*512kB (UME) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 10880kB [ 2334.283974] ip6_dst_cache 75KB 420KB [ 2334.297736] Node 0 DMA32: 432*4kB (UME) 446*8kB (ME) 271*16kB (ME) 98*32kB (UME) 26*64kB (UME) 7*128kB (UM) 7*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17632kB [ 2334.316982] RAWv6 75KB 87KB [ 2334.331457] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2334.349029] UDPv6 26KB 41KB [ 2334.369047] Node 1 Normal: 241*4kB (ME) 192*8kB (UME) 148*16kB (UME) 70*32kB (UME) 30*64kB (UM) 9*128kB (ME) 1*256kB (U) 0*512kB 2*1024kB (ME) 1*2048kB (U) 3*4096kB (UM) = 26820kB [ 2334.383825] TCPv6 33KB 42KB [ 2334.409761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2334.409774] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2334.409785] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2334.409793] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2334.409804] 33973 total pagecache pages [ 2334.429586] nf_conntrack 4KB 11KB [ 2334.455013] 0 pages in swap cache [ 2334.455022] Swap cache stats: add 0, delete 0, find 0/0 [ 2334.455027] Free swap = 0kB [ 2334.455032] Total swap = 0kB [ 2334.455041] 2097051 pages RAM [ 2334.455045] 0 pages HighMem/MovableOnly [ 2334.459420] 369649 pages reserved [ 2334.470132] AF_VSOCK 0KB 15KB [ 2334.480232] 0 pages cma reserved [ 2334.629726] t10_alua_lu_gp_cache 0KB 3KB [ 2334.635415] sd_ext_cdb 0KB 7KB [ 2334.640775] scsi_sense_cache 1056KB 1060KB [ 2334.651006] virtio_scsi_cmd 16KB 16KB [ 2334.656459] sgpool-128 8KB 8KB [ 2334.667131] sgpool-64 4KB 12KB [ 2334.672551] sgpool-32 2KB 15KB [ 2334.677920] sgpool-16 1KB 7KB [ 2334.688268] sgpool-8 0KB 7KB [ 2334.695407] mqueue_inode_cache 10KB 22KB [ 2334.700869] bio_post_read_ctx 14KB 15KB [ 2334.711126] bio-2 14KB 15KB [ 2334.716559] jfs_mp 7KB 7KB [ 2334.727440] cifs_small_rq 15KB 16KB [ 2334.736440] cifs_request 67KB 67KB [ 2334.746716] cifs_mpx_ids 0KB 7KB [ 2334.755764] nfs_commit_data 3KB 14KB [ 2334.761151] nfs_write_data 34KB 44KB [ 2334.777150] ext4_system_zone 1KB 7KB [ 2334.786642] bio-1 1KB 7KB [ 2334.796492] pid_namespace 2KB 11KB [ 2334.805976] rpc_buffers 17KB 25KB [ 2334.815828] rpc_tasks 2KB 7KB [ 2334.821194] UNIX 195KB 195KB [ 2334.831217] tcp_bind_bucket 1KB 4KB [ 2334.841013] ip_fib_trie 23KB 47KB [ 2334.850764] ip_fib_alias 111KB 181KB [ 2334.860434] ip_dst_cache 4KB 20KB [ 2334.870192] RAW 42KB 60KB [ 2334.879925] UDP 30KB 47KB [ 2334.889321] TCP 25KB 28KB [ 2334.899081] hugetlbfs_inode_cache 3KB 15KB [ 2334.908822] fscache_cookie_jar 1KB 7KB [ 2334.918623] eventpoll_pwq 36KB 51KB [ 2334.928897] eventpoll_epi 69KB 74KB [ 2334.938658] inotify_inode_mark 39KB 43KB [ 2334.948170] request_queue 199KB 199KB [ 2334.957963] blkdev_requests 1KB 3KB [ 2334.967829] blkdev_ioc 15KB 30KB [ 2334.977615] bio-0 377KB 378KB [ 2334.987034] biovec-max 1353KB 1427KB [ 2334.996870] biovec-64 285KB 291KB [ 2335.006309] biovec-16 71KB 75KB [ 2335.016152] bio_integrity_payload 1KB 8KB [ 2335.025934] khugepaged_mm_slot 16KB 34KB [ 2335.036272] uid_cache 0KB 4KB [ 2335.045736] dmaengine-unmap-2 0KB 3KB [ 2335.051106] skbuff_fclone_cache 96KB 120KB [ 2335.061176] skbuff_head_cache 4850KB 6063KB [ 2335.070872] configfs_dir_cache 3KB 7KB [ 2335.080749] file_lock_cache 178KB 202KB [ 2335.090099] file_lock_ctx 9KB 11KB [ 2335.103483] fsnotify_mark_connector 19KB 27KB [ 2335.109378] net_namespace 52KB 52KB [ 2335.118963] shmem_inode_cache 8524KB 8586KB [ 2335.125199] task_delay_info 198KB 407KB [ 2335.131251] taskstats 91KB 99KB [ 2335.140886] proc_dir_entry 695KB 840KB [ 2335.147089] pde_opener 15KB 69KB [ 2335.156417] seq_file 323KB 460KB [ 2335.162827] sigqueue 71KB 82KB [ 2335.168197] kernfs_node_cache 18296KB 18321KB [ 2335.177586] mnt_cache 173KB 196KB [ 2335.183795] filp 5695KB 7312KB [ 2335.189157] names_cache 154870KB 154908KB [ 2335.198493] iint_cache 23KB 39KB [ 2335.204730] key_jar 4KB 7KB [ 2335.210093] uts_namespace 2KB 7KB [ 2335.219436] nsproxy 26KB 75KB [ 2335.225637] vm_area_struct 4407KB 4659KB [ 2335.231005] mm_struct 646KB 676KB [ 2335.240915] fs_cache 147KB 304KB [ 2335.247172] files_cache 535KB 746KB [ 2335.256510] signal_cache 1171KB 1660KB [ 2335.262815] sighand_cache 541KB 652KB [ 2335.268186] task_struct 6451KB 6539KB [ 2335.278140] cred_jar 1232KB 2504KB [ 2335.284375] anon_vma_chain 1621KB 1736KB [ 2335.289737] anon_vma 153KB 323KB [ 2335.299039] pid 78KB 252KB [ 2335.305242] Acpi-Operand 156KB 194KB [ 2335.310614] Acpi-ParseExt 9KB 11KB [ 2335.319947] Acpi-Parse 41KB 47KB [ 2335.326340] Acpi-State 52KB 63KB [ 2335.336111] Acpi-Namespace 20KB 27KB [ 2335.342383] numa_policy 0KB 3KB [ 2335.347747] debug_objects_cache 1424KB 2143KB [ 2335.357235] trace_event_file 297KB 298KB [ 2335.363477] ftrace_event_field 398KB 401KB [ 2335.368929] pool_workqueue 121KB 152KB [ 2335.378694] page->ptl 689KB 766KB [ 2335.384976] kmalloc-2097152 2050KB 2050KB [ 2335.390348] kmalloc-524288 2056KB 2056KB [ 2335.399657] kmalloc-262144 1290KB 1290KB [ 2335.405864] kmalloc-131072 650KB 650KB [ 2335.411230] kmalloc-65536 1848KB 1914KB [ 2335.420915] kmalloc-32768 1650KB 1650KB [ 2335.427161] kmalloc-16384 973KB 990KB [ 2335.436555] kmalloc-8192 3984KB 3984KB [ 2335.442381] kmalloc-4096 21041KB 21080KB [ 2335.447918] kmalloc-2048 11030KB 13744KB [ 2335.453546] kmalloc-1024 5814KB 11387KB [ 2335.459017] kmalloc-512 12196KB 13668KB [ 2335.464482] kmalloc-256 3903KB 5940KB [ 2335.469848] kmalloc-128 927KB 1578KB [ 2335.475284] kmalloc-96 3054KB 4292KB [ 2335.480645] kmalloc-64 2374KB 3432KB [ 2335.486106] kmalloc-32 1794KB 2460KB [ 2335.491611] kmalloc-192 1528KB 2824KB [ 2335.496971] kmem_cache 177KB 183KB [ 2335.502484] Out of memory (oom_kill_allocating_task): Kill process 17109 (systemd-journal) score 0 or sacrifice child [ 2335.513332] Killed process 17109 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1292kB [ 2335.524977] oom_reaper: reaped process 17109 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1292kB [ 2335.664289] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2335.680387] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2335.705378] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2335.718815] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2335.727734] systemd[1]: Stopped Journal Service. [ 2335.767919] systemd[1]: Starting Journal Service... [ 2335.900037] systemd-journald[17171]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 06:33:17 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000080), &(0x7f00000001c0)=0x4) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000080), &(0x7f00000001c0)=0x4) (async) 06:33:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async, rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) (async) r3 = socket(0x2, 0x800, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='vegas\x00', 0x6) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000340)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r4, 0xc02064c3, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, r5, 0x0], 0x0, 0x4, 0x1}) (async) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{}, "743e47f1d0d29602", "e91730749b937fe9d85dd5ab42fcb3a2d97abcbf1cf0eacd07c1442fc8bf4444", "a726e26a", "c318ef9e12d7a48d"}, 0x38) 06:33:17 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{{0x4, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) recvmsg$can_raw(r3, &(0x7f0000000340)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/10, 0xa}], 0x1, &(0x7f0000000240)=""/206, 0xce}, 0x2) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="540278dd06000000f7ff20003f00ff03"], &(0x7f0000000080)=0x10) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) [ 2336.449775] systemd[1]: Started Journal Service. [ 2338.531159] Bluetooth: hci1: command 0x0c1a tx timeout 06:33:19 executing program 3: syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:33:19 executing program 1: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={r0, 0x80000}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000000)={{@my=0x0, 0x69da900f}, 0x2, 0xffffffff}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000300)=0x4) r1 = socket(0x1, 0x5, 0x0) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000002c0)={0xfffffe01, 0xb}) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x20, 0x7ffffffe, '\x00', &(0x7f0000000040)=0xbe}) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) 06:33:19 executing program 4: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r0 = socket(0x1e, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) 06:33:19 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{{0x4, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x10) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) (async) recvmsg$can_raw(r3, &(0x7f0000000340)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/10, 0xa}], 0x1, &(0x7f0000000240)=""/206, 0xce}, 0x2) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="540278dd06000000f7ff20003f00ff03"], &(0x7f0000000080)=0x10) (async) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:33:19 executing program 1: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={r0, 0x80000}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000000)={{@my=0x0, 0x69da900f}, 0x2, 0xffffffff}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000300)=0x4) r1 = socket(0x1, 0x5, 0x0) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000002c0)={0xfffffe01, 0xb}) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) 06:33:19 executing program 3: syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:33:20 executing program 1: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={r0, 0x80000}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000000)={{@my=0x0, 0x69da900f}, 0x2, 0xffffffff}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000300)=0x4) r1 = socket(0x1, 0x5, 0x0) syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) 06:33:20 executing program 3: syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:33:20 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) [ 2341.090907] Bluetooth: hci1: command 0x0c1a tx timeout 06:33:22 executing program 4: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r0 = socket(0x1e, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) 06:33:22 executing program 1: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={r0, 0x80000}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000000)={{@my=0x0, 0x69da900f}, 0x2, 0xffffffff}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000300)=0x4) r1 = socket(0x1, 0x5, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) 06:33:22 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 06:33:22 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) 06:33:22 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r1 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 32) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) (async, rerun: 32) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{{0x4, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x10) (rerun: 32) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) recvmsg$can_raw(r3, &(0x7f0000000340)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/10, 0xa}], 0x1, &(0x7f0000000240)=""/206, 0xce}, 0x2) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="540278dd06000000f7ff20003f00ff03"], &(0x7f0000000080)=0x10) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:33:22 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f00000001c0)={@host, 0x6}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040)={0x7}, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8983, &(0x7f0000000040)) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) 06:33:22 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 06:33:22 executing program 1: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={r0, 0x80000}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000000)={{@my=0x0, 0x69da900f}, 0x2, 0xffffffff}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000300)=0x4) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) 06:33:22 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:33:23 executing program 1: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={r0, 0x80000}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000000)={{@my=0x0, 0x69da900f}, 0x2, 0xffffffff}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000300)=0x4) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) 06:33:23 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:33:23 executing program 1: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={r0, 0x80000}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000000)={{@my=0x0, 0x69da900f}, 0x2, 0xffffffff}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000300)=0x4) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) 06:33:24 executing program 4: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r0 = socket(0x1e, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) 06:33:24 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:33:24 executing program 1: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={r0, 0x80000}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000000)={{@my=0x0, 0x69da900f}, 0x2, 0xffffffff}) r1 = socket(0x1, 0x5, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) 06:33:24 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)="65df66412194647813498ad1a7fbbf49ed82b5de1c4e78f0b5ce7856dda9298834c4530f3ed25ff4f289dd182b56da6b5a35236ba81b24118a1b53df8a1c64f2b7dd192a66d7ed495d3fef8c05f602347004f67634d13be6a9e856c2934eab464846748c184b330435ac24021688f8b4e6b322ce56507483519900"/133) 06:33:26 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) (async) 06:33:26 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f00000001c0)={@host, 0x6}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async, rerun: 64) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040)={0x7}, 0x4) (async, rerun: 64) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8983, &(0x7f0000000040)) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) 06:33:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:33:26 executing program 1: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={r0, 0x80000}) r1 = socket(0x1, 0x5, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) 06:33:26 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)="65df66412194647813498ad1a7fbbf49ed82b5de1c4e78f0b5ce7856dda9298834c4530f3ed25ff4f289dd182b56da6b5a35236ba81b24118a1b53df8a1c64f2b7dd192a66d7ed495d3fef8c05f602347004f67634d13be6a9e856c2934eab464846748c184b330435ac24021688f8b4e6b322ce56507483519900"/133) 06:33:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:33:26 executing program 1: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)) r0 = socket(0x1, 0x5, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) 06:33:26 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)="65df66412194647813498ad1a7fbbf49ed82b5de1c4e78f0b5ce7856dda9298834c4530f3ed25ff4f289dd182b56da6b5a35236ba81b24118a1b53df8a1c64f2b7dd192a66d7ed495d3fef8c05f602347004f67634d13be6a9e856c2934eab464846748c184b330435ac24021688f8b4e6b322ce56507483519900"/133) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)="65df66412194647813498ad1a7fbbf49ed82b5de1c4e78f0b5ce7856dda9298834c4530f3ed25ff4f289dd182b56da6b5a35236ba81b24118a1b53df8a1c64f2b7dd192a66d7ed495d3fef8c05f602347004f67634d13be6a9e856c2934eab464846748c184b330435ac24021688f8b4e6b322ce56507483519900"/133) (async) 06:33:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x1, {0x0, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:33:26 executing program 1: r0 = socket(0x1, 0x5, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) 06:33:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x1, {0x0, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:33:26 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3}}, {{0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1}}], 0x30) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0), &(0x7f0000000100)=[0x3, 0x8]}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x6) [ 2345.652497] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.658108] ieee802154 phy1 wpan1: encryption failed: -22 [ 2347.410434] Bluetooth: hci1: command 0x0c1a tx timeout 06:33:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x1, {0x0, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:33:31 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) 06:33:31 executing program 1: r0 = socket(0x0, 0x5, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) 06:33:31 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) 06:33:31 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000180)=0x4) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) (async) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3}}, {{0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1}}], 0x30) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0), &(0x7f0000000100)=[0x3, 0x8]}) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x6) 06:33:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f00000001c0)={@host, 0x6}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040)={0x7}, 0x4) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8983, &(0x7f0000000040)) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) 06:33:31 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xffffffff, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:33:32 executing program 1: r0 = socket(0x0, 0x5, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) 06:33:32 executing program 1: r0 = socket(0x0, 0x5, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) 06:33:32 executing program 1: r0 = socket(0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) 06:33:32 executing program 1: r0 = socket(0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) 06:33:32 executing program 1: r0 = socket(0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) 06:33:32 executing program 1: socket(0x1, 0x5, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) [ 2353.090032] Bluetooth: hci1: command 0x0c1a tx timeout 06:33:35 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/194, 0xc2}, {&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000300)=""/190, 0x12}], 0x3, &(0x7f0000000400)=""/68, 0x44}, 0x0) 06:33:35 executing program 1: socket(0x1, 0x5, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) 06:33:35 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000180)=0x4) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3}}, {{0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{}, {0x2, 0x1, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1}}], 0x30) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0), &(0x7f0000000100)=[0x3, 0x8]}) (async, rerun: 32) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x6) 06:33:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000000) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$IOCTL_VMCI_SET_NOTIFY(0xffffffffffffffff, 0x7cb, &(0x7f0000000040)={0x7, 0x40, 0x5}) 06:33:35 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:33:35 executing program 3: r0 = socket(0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) 06:33:35 executing program 3: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{{0x4, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) recvmsg$can_raw(r3, &(0x7f0000000340)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/10, 0xa}], 0x1, &(0x7f0000000240)=""/206, 0xce}, 0x2) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="540278dd06000000f7ff20003f00ff03"], &(0x7f0000000080)=0x10) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:33:35 executing program 1: socket(0x1, 0x5, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24008810) 06:33:35 executing program 1: r0 = socket(0x1, 0x5, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, 0x0, 0x24008810) 06:33:35 executing program 1: r0 = socket(0x1, 0x5, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, 0x0, 0x24008810) 06:33:35 executing program 1: r0 = socket(0x1, 0x5, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, 0x0, 0x24008810) 06:33:35 executing program 1: r0 = socket(0x1, 0x5, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x24008810) [ 2356.209792] Bluetooth: hci1: command 0x0c1a tx timeout 06:33:38 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/194, 0xc2}, {&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000300)=""/190, 0x12}], 0x3, &(0x7f0000000400)=""/68, 0x44}, 0x0) 06:33:38 executing program 1: r0 = socket(0x1, 0x5, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x24008810) 06:33:38 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) 06:33:38 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) getsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x7fffffff, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a90ff0f0000000000005a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb553b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615139297440a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb689c724cab00"}, 0xac1}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000080)={0xd, 0x40, 0x9c9}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x5) 06:33:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000000) inotify_rm_watch(0xffffffffffffffff, r1) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$IOCTL_VMCI_SET_NOTIFY(0xffffffffffffffff, 0x7cb, &(0x7f0000000040)={0x7, 0x40, 0x5}) 06:33:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x7) ioctl$PTP_CLOCK_GETCAPS(r2, 0x80503d01, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000600)={r3, 0x0, 0x0, 0x6, 0x4}) ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, &(0x7f0000000540)={'\x00', 0x7, 0x2, 0x2}) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0x9, 0x6, 0xff}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$ptp(r2, &(0x7f0000000640)=""/4096, 0x1000) write$uinput_user_dev(r4, &(0x7f00000000c0)={'syz0\x00', {0x3, 0x2422, 0xffff, 0x7f}, 0x52, [0x7, 0x2, 0xd1, 0x9, 0x20, 0x1000, 0xa15, 0x80, 0x2, 0x6, 0x123, 0x4, 0x1, 0x7, 0x9, 0xc0, 0x0, 0x200, 0x0, 0xac000000, 0x6, 0x95, 0x67d26393, 0x7fff, 0x2, 0x1000, 0x8, 0xf4, 0x401, 0xbae, 0x5, 0x1, 0x8, 0x7, 0x1ff, 0x80000000, 0x81, 0xffff, 0x400, 0x2, 0x6, 0x8, 0x6, 0x2, 0x101, 0x3, 0x4, 0x3, 0x0, 0x10000, 0xe38, 0x8, 0x6, 0x1f, 0x3, 0x800, 0x2, 0x4, 0xf4cb, 0xfffffffc, 0x5, 0x6, 0x1f, 0x5], [0x652, 0x4, 0xf45b, 0xffffffff, 0xfff, 0x1000, 0x1, 0x80000, 0x1, 0x7f, 0x1000, 0x4f, 0x0, 0x4, 0x1000, 0x7, 0x6, 0x400, 0x1a3, 0x9, 0xffff, 0xeb1, 0x7, 0x50, 0x100, 0x2, 0x400, 0x80000001, 0xcc, 0x68, 0x10000, 0x1, 0x1ba, 0x1087, 0x9, 0x3, 0xe0, 0x2, 0x0, 0xfff, 0x40, 0x4, 0x8, 0x40fa, 0x7ff, 0x1b, 0x3, 0x4, 0x2, 0x101, 0x40000000, 0x5, 0x200, 0x0, 0x6, 0xe8c, 0xffff, 0x3, 0xc0d, 0x80, 0x3, 0x0, 0x54b4, 0x9], [0xffffffff, 0xfda8, 0x4d2, 0xfffffffa, 0x4, 0xff, 0xfff, 0x1ff, 0x8, 0x9, 0x4, 0x8, 0x5, 0x0, 0xc9, 0xab7c, 0x10001, 0x7, 0x8, 0x4, 0x560, 0x1000, 0xfffffff9, 0xf4, 0x0, 0x5, 0xffffffff, 0x1dfb, 0x8, 0xfff, 0x5, 0x6, 0x1, 0x3, 0xfffeffff, 0x8, 0x7f, 0x0, 0x7, 0x1, 0x1e1, 0x8b, 0x10000, 0xff, 0xffffffff, 0x3, 0x8, 0x1, 0x9, 0xffff, 0x1, 0x9, 0x8001, 0x1f, 0x4, 0xd34, 0x7, 0x0, 0x9, 0x7fff, 0x3, 0x200, 0x4, 0x401], [0x4b, 0x2, 0x2b95, 0x235fe903, 0xffff, 0x0, 0x3, 0x1000, 0x7, 0x9, 0xe4, 0x6, 0x3f, 0x5, 0x5, 0x47, 0x7, 0x4, 0x20, 0x401, 0x40, 0xfffffffb, 0x4, 0x2, 0x9, 0xffffffff, 0x6, 0xd9b6, 0x5, 0x27, 0x80000000, 0x1f, 0x8, 0x8, 0x3, 0x8, 0x0, 0x80, 0x2, 0x80, 0x0, 0x9, 0x0, 0x4, 0x6, 0xffff, 0x7f, 0xa8, 0x9, 0x9, 0x0, 0x5, 0x80, 0x0, 0x856, 0x9, 0x1, 0x400, 0x5, 0x5, 0x60fc, 0x5, 0x3, 0x6]}, 0x45c) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) 06:33:38 executing program 1: r0 = socket(0x1, 0x5, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x24008810) 06:33:38 executing program 1: r0 = socket(0x1, 0x5, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:33:38 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) getsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x7fffffff, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a90ff0f0000000000005a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb553b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615139297440a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb689c724cab00"}, 0xac1}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000080)={0xd, 0x40, 0x9c9}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x5) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x7fffffff, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a90ff0f0000000000005a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb553b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615139297440a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb689c724cab00"}, 0xac1}) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000080)={0xd, 0x40, 0x9c9}) (async) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) (async) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x5) (async) 06:33:39 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) socket$can_raw(0x1d, 0x3, 0x1) (async) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) (async) 06:33:39 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/194, 0xc2}, {&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000300)=""/190, 0x12}], 0x3, &(0x7f0000000400)=""/68, 0x44}, 0x0) [ 2358.289674] Bluetooth: hci1: command 0x0c1a tx timeout 06:33:40 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) socket$can_raw(0x1d, 0x3, 0x1) (async) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) (async) [ 2360.369519] Bluetooth: hci1: command 0x0c1a tx timeout 06:33:41 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/194, 0xc2}, {&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000300)=""/190, 0x12}], 0x3, &(0x7f0000000400)=""/68, 0x44}, 0x0) 06:33:41 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) getsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x7fffffff, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a90ff0f0000000000005a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb553b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615139297440a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb689c724cab00"}, 0xac1}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000080)={0xd, 0x40, 0x9c9}) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x5) 06:33:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x8) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x20044801) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r7, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, r4, 0x8b460bac824a210f, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200010}, 0xc, &(0x7f0000000500)={&(0x7f0000000140)={0x39c, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x9, 0x9, 0xfffffffd}, {0x101, 0x51, 0x5, 0x1000}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x4048148}, 0x41) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x2941, {0x400, 0xe3e, 0x81, 0x9, 0x3e0, 0x800}}) 06:33:41 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000000) inotify_rm_watch(0xffffffffffffffff, r1) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) ioctl$IOCTL_VMCI_SET_NOTIFY(0xffffffffffffffff, 0x7cb, &(0x7f0000000040)={0x7, 0x40, 0x5}) 06:33:41 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000)=0x3, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f0000000000)) 06:33:41 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x1, 0x1, 0x2, {0x3, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000040)='syz1\x00') 06:33:42 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000)=0x3, 0x4) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f0000000000)) 06:33:43 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000)=0x3, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f0000000000)) 06:33:43 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x6, 0x1, {0x3, @raw_data="b4daac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0x7551ca63}) 06:33:43 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x762d, 0x2) r1 = socket(0x25, 0xa, 0x20) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000600)={&(0x7f00000001c0)={{@local, 0x2}, {@any, 0x9}, 0x400, "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"}, 0x418, 0xe71}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) r3 = socket(0x2, 0x4, 0x4929) sendmsg$can_raw(r3, &(0x7f0000000700)={&(0x7f0000000640), 0x10, &(0x7f00000006c0)={&(0x7f0000000680)=@can={{0x0, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "a3e0b04bb3392154"}, 0x10}, 0x1, 0x0, 0x0, 0x4008890}, 0x40850) [ 2362.450970] Bluetooth: hci1: command 0x0c1a tx timeout [ 2362.689299] Bluetooth: hci3: command 0x0c1a tx timeout 06:33:44 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) 06:33:44 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040), 0x4) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) 06:33:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000001c0)={0x5, @vbi={0x1f, 0x5, 0x7, 0x32315559, [0x3, 0xffff020e], [0x2, 0x374e], 0x13a}}) 06:33:45 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 06:33:45 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x6, 0x1, {0x3, @raw_data="b4daac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0x7551ca63}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x6, 0x1, {0x3, @raw_data="b4daac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0x7551ca63}) (async) 06:33:45 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xd, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:33:45 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x6, 0x1, {0x3, @raw_data="b4daac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0x7551ca63}) [ 2364.529256] Bluetooth: hci1: command 0x0c1a tx timeout [ 2364.769155] Bluetooth: hci3: command 0x0c1a tx timeout 06:33:45 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) 06:33:46 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000140)={{@host, 0x9}, @local, 0xc, 0x9, 0x1, 0x0, 0xffffffff, 0xf91, 0x1}) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000700)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000740)={'syz0\x00', {0x8, 0x7, 0x8, 0x100}, 0x14, [0x6, 0x3, 0x4e9b, 0x9, 0x5, 0x7, 0x9, 0x8, 0x5, 0x80, 0xffffff81, 0x6, 0xff, 0x1, 0xffff, 0x401, 0x9, 0x7fffffff, 0x3, 0x3, 0x2, 0x7fffffff, 0x3ff, 0x10001, 0x7f, 0x40345536, 0x8, 0x0, 0x9, 0xc0000000, 0x0, 0x8, 0x9, 0x7ff, 0x40, 0x3, 0x8001, 0x9, 0x5, 0x8a04, 0xff, 0x3, 0x3, 0x9, 0x0, 0x2, 0x15, 0x2, 0x7ff, 0x26, 0x6, 0x5, 0x8001, 0x1f, 0xc535, 0x20, 0x8, 0x2, 0x6, 0xe2a, 0xffffbf68, 0x0, 0x0, 0x1], [0x0, 0x7, 0x7150, 0x20, 0x3, 0x10001, 0x0, 0x4, 0x11, 0x1, 0x4, 0x2, 0x4, 0x0, 0x7, 0x1, 0x0, 0x5, 0xffff, 0xff, 0x81, 0x1c20, 0x89, 0x2, 0x101, 0x6, 0x3, 0x3, 0x9, 0x4, 0xd7, 0x1, 0x2, 0x1, 0x100, 0x3, 0x6, 0x5, 0xb0b5, 0x7ff, 0x0, 0x9, 0x34b, 0x8, 0x80000001, 0x4, 0x7, 0x4, 0x800, 0x1, 0x7, 0x200, 0x7, 0x80000000, 0xbdc, 0x9, 0x8, 0xb8d1, 0xffff, 0x2, 0xecb2, 0x7, 0x2, 0x5], [0x4, 0x9, 0x7, 0x9e1, 0xbc9e, 0x3f, 0xffffff00, 0xa172, 0x780, 0x5, 0x5, 0x44, 0xc3a, 0x10001, 0xffff, 0x2, 0x7fff, 0x1, 0x7ef6, 0x7, 0x7f, 0x100, 0x6, 0x0, 0x5, 0x4, 0x0, 0x1, 0x8, 0x9, 0x9, 0x0, 0xffffffff, 0x7, 0x361fa072, 0x8, 0x9, 0x8, 0x3, 0xfffffe01, 0x0, 0x9, 0xfffffff7, 0x9, 0x4, 0x8001, 0x7fff, 0x7ff, 0x2, 0x7fffffff, 0x81, 0x101, 0x0, 0x6, 0xffffffff, 0x0, 0x7fff, 0x0, 0x1, 0x769, 0x6, 0x8001, 0xfffffff8, 0x4], [0x1, 0x2, 0x611, 0xd4, 0x8, 0x1, 0x2, 0x4, 0x3, 0x9, 0xff, 0x42, 0xe8b3, 0x9, 0x4, 0x8c55, 0x6, 0x1ff, 0x7ff, 0x80000000, 0x7abb, 0xffffffc0, 0xfff, 0x3, 0x3f, 0x4e5b, 0x4, 0x9, 0x8, 0x7, 0x8, 0x7, 0x0, 0xfff, 0x5, 0xfd, 0x1c00000, 0x1f, 0x2, 0x1b0, 0x6, 0x3, 0x9, 0xffffffe0, 0x0, 0x826, 0x0, 0x7d3, 0x1, 0x9, 0x80000001, 0x10000, 0x10000, 0x4, 0x17dd, 0xa75d, 0x3ff, 0x609, 0x1c00, 0x0, 0x80, 0xa1, 0x5, 0xfffffff9]}, 0x45c) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x6, @raw_data="baa7301b8beea8795eeac4f0c9ad3fc374285795c97dd58f193743e3b14682ce04efbc73cd14c69b6733ceb1f3aa88b4a04cd2c617f0042e8c0f31f0e262a0517e4def9bef48747dd8cbd4164d076b9c06974abbc0981345f12563196ed18763791628e0f8442db83ac0581ff4cf649ecd39927b13258df47a45e28bcefd26d79ea899ebe75104ac0ead14f4bf5f37eb0f4314ab7f89f00ae30dea70f14782d094126492f2d3b30dbe34eb12fde6219c2014d90a50ebe2195147aed4c0a87b4f76ae4b33f4c44ce8"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) 06:33:47 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000140)={{@host, 0x9}, @local, 0xc, 0x9, 0x1, 0x0, 0xffffffff, 0xf91, 0x1}) (async) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000700)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000740)={'syz0\x00', {0x8, 0x7, 0x8, 0x100}, 0x14, [0x6, 0x3, 0x4e9b, 0x9, 0x5, 0x7, 0x9, 0x8, 0x5, 0x80, 0xffffff81, 0x6, 0xff, 0x1, 0xffff, 0x401, 0x9, 0x7fffffff, 0x3, 0x3, 0x2, 0x7fffffff, 0x3ff, 0x10001, 0x7f, 0x40345536, 0x8, 0x0, 0x9, 0xc0000000, 0x0, 0x8, 0x9, 0x7ff, 0x40, 0x3, 0x8001, 0x9, 0x5, 0x8a04, 0xff, 0x3, 0x3, 0x9, 0x0, 0x2, 0x15, 0x2, 0x7ff, 0x26, 0x6, 0x5, 0x8001, 0x1f, 0xc535, 0x20, 0x8, 0x2, 0x6, 0xe2a, 0xffffbf68, 0x0, 0x0, 0x1], [0x0, 0x7, 0x7150, 0x20, 0x3, 0x10001, 0x0, 0x4, 0x11, 0x1, 0x4, 0x2, 0x4, 0x0, 0x7, 0x1, 0x0, 0x5, 0xffff, 0xff, 0x81, 0x1c20, 0x89, 0x2, 0x101, 0x6, 0x3, 0x3, 0x9, 0x4, 0xd7, 0x1, 0x2, 0x1, 0x100, 0x3, 0x6, 0x5, 0xb0b5, 0x7ff, 0x0, 0x9, 0x34b, 0x8, 0x80000001, 0x4, 0x7, 0x4, 0x800, 0x1, 0x7, 0x200, 0x7, 0x80000000, 0xbdc, 0x9, 0x8, 0xb8d1, 0xffff, 0x2, 0xecb2, 0x7, 0x2, 0x5], [0x4, 0x9, 0x7, 0x9e1, 0xbc9e, 0x3f, 0xffffff00, 0xa172, 0x780, 0x5, 0x5, 0x44, 0xc3a, 0x10001, 0xffff, 0x2, 0x7fff, 0x1, 0x7ef6, 0x7, 0x7f, 0x100, 0x6, 0x0, 0x5, 0x4, 0x0, 0x1, 0x8, 0x9, 0x9, 0x0, 0xffffffff, 0x7, 0x361fa072, 0x8, 0x9, 0x8, 0x3, 0xfffffe01, 0x0, 0x9, 0xfffffff7, 0x9, 0x4, 0x8001, 0x7fff, 0x7ff, 0x2, 0x7fffffff, 0x81, 0x101, 0x0, 0x6, 0xffffffff, 0x0, 0x7fff, 0x0, 0x1, 0x769, 0x6, 0x8001, 0xfffffff8, 0x4], [0x1, 0x2, 0x611, 0xd4, 0x8, 0x1, 0x2, 0x4, 0x3, 0x9, 0xff, 0x42, 0xe8b3, 0x9, 0x4, 0x8c55, 0x6, 0x1ff, 0x7ff, 0x80000000, 0x7abb, 0xffffffc0, 0xfff, 0x3, 0x3f, 0x4e5b, 0x4, 0x9, 0x8, 0x7, 0x8, 0x7, 0x0, 0xfff, 0x5, 0xfd, 0x1c00000, 0x1f, 0x2, 0x1b0, 0x6, 0x3, 0x9, 0xffffffe0, 0x0, 0x826, 0x0, 0x7d3, 0x1, 0x9, 0x80000001, 0x10000, 0x10000, 0x4, 0x17dd, 0xa75d, 0x3ff, 0x609, 0x1c00, 0x0, 0x80, 0xa1, 0x5, 0xfffffff9]}, 0x45c) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x6, @raw_data="baa7301b8beea8795eeac4f0c9ad3fc374285795c97dd58f193743e3b14682ce04efbc73cd14c69b6733ceb1f3aa88b4a04cd2c617f0042e8c0f31f0e262a0517e4def9bef48747dd8cbd4164d076b9c06974abbc0981345f12563196ed18763791628e0f8442db83ac0581ff4cf649ecd39927b13258df47a45e28bcefd26d79ea899ebe75104ac0ead14f4bf5f37eb0f4314ab7f89f00ae30dea70f14782d094126492f2d3b30dbe34eb12fde6219c2014d90a50ebe2195147aed4c0a87b4f76ae4b33f4c44ce8"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) [ 2366.609030] Bluetooth: hci1: command 0x0c1a tx timeout [ 2366.849024] Bluetooth: hci3: command 0x0c1a tx timeout 06:33:48 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000140)={{@host, 0x9}, @local, 0xc, 0x9, 0x1, 0x0, 0xffffffff, 0xf91, 0x1}) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000700)) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000740)={'syz0\x00', {0x8, 0x7, 0x8, 0x100}, 0x14, [0x6, 0x3, 0x4e9b, 0x9, 0x5, 0x7, 0x9, 0x8, 0x5, 0x80, 0xffffff81, 0x6, 0xff, 0x1, 0xffff, 0x401, 0x9, 0x7fffffff, 0x3, 0x3, 0x2, 0x7fffffff, 0x3ff, 0x10001, 0x7f, 0x40345536, 0x8, 0x0, 0x9, 0xc0000000, 0x0, 0x8, 0x9, 0x7ff, 0x40, 0x3, 0x8001, 0x9, 0x5, 0x8a04, 0xff, 0x3, 0x3, 0x9, 0x0, 0x2, 0x15, 0x2, 0x7ff, 0x26, 0x6, 0x5, 0x8001, 0x1f, 0xc535, 0x20, 0x8, 0x2, 0x6, 0xe2a, 0xffffbf68, 0x0, 0x0, 0x1], [0x0, 0x7, 0x7150, 0x20, 0x3, 0x10001, 0x0, 0x4, 0x11, 0x1, 0x4, 0x2, 0x4, 0x0, 0x7, 0x1, 0x0, 0x5, 0xffff, 0xff, 0x81, 0x1c20, 0x89, 0x2, 0x101, 0x6, 0x3, 0x3, 0x9, 0x4, 0xd7, 0x1, 0x2, 0x1, 0x100, 0x3, 0x6, 0x5, 0xb0b5, 0x7ff, 0x0, 0x9, 0x34b, 0x8, 0x80000001, 0x4, 0x7, 0x4, 0x800, 0x1, 0x7, 0x200, 0x7, 0x80000000, 0xbdc, 0x9, 0x8, 0xb8d1, 0xffff, 0x2, 0xecb2, 0x7, 0x2, 0x5], [0x4, 0x9, 0x7, 0x9e1, 0xbc9e, 0x3f, 0xffffff00, 0xa172, 0x780, 0x5, 0x5, 0x44, 0xc3a, 0x10001, 0xffff, 0x2, 0x7fff, 0x1, 0x7ef6, 0x7, 0x7f, 0x100, 0x6, 0x0, 0x5, 0x4, 0x0, 0x1, 0x8, 0x9, 0x9, 0x0, 0xffffffff, 0x7, 0x361fa072, 0x8, 0x9, 0x8, 0x3, 0xfffffe01, 0x0, 0x9, 0xfffffff7, 0x9, 0x4, 0x8001, 0x7fff, 0x7ff, 0x2, 0x7fffffff, 0x81, 0x101, 0x0, 0x6, 0xffffffff, 0x0, 0x7fff, 0x0, 0x1, 0x769, 0x6, 0x8001, 0xfffffff8, 0x4], [0x1, 0x2, 0x611, 0xd4, 0x8, 0x1, 0x2, 0x4, 0x3, 0x9, 0xff, 0x42, 0xe8b3, 0x9, 0x4, 0x8c55, 0x6, 0x1ff, 0x7ff, 0x80000000, 0x7abb, 0xffffffc0, 0xfff, 0x3, 0x3f, 0x4e5b, 0x4, 0x9, 0x8, 0x7, 0x8, 0x7, 0x0, 0xfff, 0x5, 0xfd, 0x1c00000, 0x1f, 0x2, 0x1b0, 0x6, 0x3, 0x9, 0xffffffe0, 0x0, 0x826, 0x0, 0x7d3, 0x1, 0x9, 0x80000001, 0x10000, 0x10000, 0x4, 0x17dd, 0xa75d, 0x3ff, 0x609, 0x1c00, 0x0, 0x80, 0xa1, 0x5, 0xfffffff9]}, 0x45c) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x6, @raw_data="baa7301b8beea8795eeac4f0c9ad3fc374285795c97dd58f193743e3b14682ce04efbc73cd14c69b6733ceb1f3aa88b4a04cd2c617f0042e8c0f31f0e262a0517e4def9bef48747dd8cbd4164d076b9c06974abbc0981345f12563196ed18763791628e0f8442db83ac0581ff4cf649ecd39927b13258df47a45e28bcefd26d79ea899ebe75104ac0ead14f4bf5f37eb0f4314ab7f89f00ae30dea70f14782d094126492f2d3b30dbe34eb12fde6219c2014d90a50ebe2195147aed4c0a87b4f76ae4b33f4c44ce8"}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000000)) [ 2368.205177] syz-executor.5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2368.232638] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2368.237780] CPU: 0 PID: 10121 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 2368.245657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2368.255007] Call Trace: [ 2368.257604] dump_stack+0x1fc/0x2ef [ 2368.261216] dump_header+0x15d/0xc3f [ 2368.264915] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2368.269999] ? ___ratelimit+0x319/0x590 [ 2368.273972] oom_kill_process.cold+0x10/0x692 [ 2368.278450] ? check_preemption_disabled+0x41/0x280 [ 2368.283456] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2368.288714] out_of_memory+0x1072/0x1390 [ 2368.292760] ? oom_killer_disable+0x270/0x270 [ 2368.297252] ? mutex_trylock+0x15f/0x1a0 [ 2368.301297] __alloc_pages_nodemask+0x23a2/0x2890 [ 2368.306129] ? find_get_entry+0x4cd/0x8a0 [ 2368.310266] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2368.315120] alloc_pages_current+0x193/0x2a0 [ 2368.319513] filemap_fault+0x146e/0x2180 [ 2368.323583] ext4_filemap_fault+0x84/0xb0 [ 2368.327711] __do_fault+0x10b/0x4b0 [ 2368.331325] __handle_mm_fault+0x273b/0x41c0 [ 2368.335717] ? debug_object_free+0x1cc/0x380 [ 2368.340106] ? vm_insert_page+0x9c0/0x9c0 [ 2368.344243] ? check_preemption_disabled+0x41/0x280 [ 2368.349244] handle_mm_fault+0x436/0xb10 [ 2368.353289] __do_page_fault+0x68e/0xd60 [ 2368.357332] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2368.362330] ? spurious_fault+0x840/0x840 [ 2368.366459] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2368.371288] ? page_fault+0x8/0x30 [ 2368.374814] page_fault+0x1e/0x30 [ 2368.378249] RIP: 0033:0x7f0c2c8b5783 [ 2368.381945] Code: Bad RIP value. [ 2368.385289] RSP: 002b:00007ffcda84a490 EFLAGS: 00010206 [ 2368.390638] RAX: 0000000000000000 RBX: 00000000000002ae RCX: 00007f0c2c8dbf31 [ 2368.397888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2368.405136] RBP: 00007ffcda84a52c R08: 0000000000000000 R09: 0000025f5e5ae159 [ 2368.412385] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000032 [ 2368.419634] R13: 00000000002420f2 R14: 0000000000000008 R15: 00007ffcda84a590 [ 2368.438933] Mem-Info: [ 2368.441404] active_anon:17118 inactive_anon:34531 isolated_anon:0 [ 2368.441404] active_file:16 inactive_file:10 isolated_file:0 [ 2368.441404] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2368.441404] slab_reclaimable:14021 slab_unreclaimable:125004 [ 2368.441404] mapped:22181 shmem:35993 pagetables:621 bounce:0 [ 2368.441404] free:25107 free_pcp:0 free_cma:0 [ 2368.507941] Node 0 active_anon:66452kB inactive_anon:79476kB active_file:60kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74068kB dirty:0kB writeback:0kB shmem:85068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2368.631255] Node 1 active_anon:2020kB inactive_anon:58648kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14656kB dirty:0kB writeback:0kB shmem:58904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2368.688879] Bluetooth: hci1: command 0x0c1a tx timeout [ 2368.788188] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:2860kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2368.870474] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2368.875529] Node 0 DMA32 free:35812kB min:35996kB low:44992kB high:53988kB active_anon:66328kB inactive_anon:76616kB active_file:36kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7360kB pagetables:2064kB bounce:0kB free_pcp:540kB local_pcp:248kB free_cma:0kB [ 2368.911879] lowmem_reserve[]: 0 0 1 1 1 [ 2368.915879] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2369.104425] lowmem_reserve[]: 0 0 0 0 0 [ 2369.108438] Node 1 Normal free:53856kB min:53876kB low:67344kB high:80812kB active_anon:2020kB inactive_anon:58648kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:420kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2369.234843] lowmem_reserve[]: 0 0 0 0 0 [ 2369.243781] Node 0 DMA: 1*4kB (E) 3*8kB (ME) 4*16kB (UM) 4*32kB (ME) 6*64kB (UME) 9*128kB (UME) 6*256kB (UME) 5*512kB (UME) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 10972kB [ 2369.286182] Node 0 DMA32: 511*4kB (UME) 504*8kB (UME) 326*16kB (UME) 145*32kB (ME) 65*64kB (UME) 11*128kB (M) 7*256kB (UM) 1*512kB (M) 12*1024kB (UM) 0*2048kB 0*4096kB = 36092kB [ 2369.373841] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2369.429195] Node 1 Normal: 252*4kB (UME) 215*8kB (ME) 153*16kB (ME) 81*32kB (ME) 24*64kB (UM) 10*128kB (UME) 1*256kB (U) 1*512kB (M) 2*1024kB (UE) 0*2048kB 10*4096kB (U) = 54360kB [ 2369.522510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2369.569244] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2369.577843] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2369.665248] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2369.704417] 36028 total pagecache pages [ 2369.708404] 0 pages in swap cache [ 2369.742995] Swap cache stats: add 0, delete 0, find 0/0 [ 2369.748373] Free swap = 0kB [ 2369.803623] Total swap = 0kB [ 2369.806657] 2097051 pages RAM [ 2369.838069] 0 pages HighMem/MovableOnly [ 2369.862425] 369649 pages reserved [ 2369.865888] 0 pages cma reserved [ 2369.898536] Unreclaimable slab info: [ 2369.902377] Name Used Total [ 2369.907899] pid_2 62KB 100KB [ 2369.925422] batadv_tl_cache 4KB 12KB [ 2369.933585] TIPC 15KB 30KB [ 2369.943042] SCTPv6 14KB 18KB [ 2369.948419] SCTP 9KB 11KB [ 2369.958097] DCCPv6 17KB 37KB [ 2369.965598] DCCP 16KB 28KB [ 2369.985087] RXRPC 11KB 19KB [ 2369.994231] rxrpc_call_jar 78KB 94KB [ 2370.003842] bridge_fdb_cache 9KB 23KB [ 2370.017183] fib6_nodes 156KB 252KB [ 2370.023814] ip6_dst_cache 69KB 420KB [ 2370.034750] RAWv6 75KB 87KB [ 2370.047404] UDPv6 26KB 41KB [ 2370.063517] TCPv6 30KB 42KB [ 2370.068945] nf_conntrack 1KB 7KB [ 2370.074327] t10_alua_lu_gp_cache 0KB 3KB [ 2370.082798] sd_ext_cdb 0KB 7KB [ 2370.088167] scsi_sense_cache 1056KB 1060KB [ 2370.104029] virtio_scsi_cmd 16KB 16KB [ 2370.113058] sgpool-128 8KB 8KB [ 2370.118419] sgpool-64 4KB 12KB [ 2370.137171] sgpool-32 2KB 15KB [ 2370.144444] sgpool-16 1KB 7KB [ 2370.158393] sgpool-8 0KB 7KB [ 2370.167774] mqueue_inode_cache 10KB 22KB [ 2370.175414] bio_post_read_ctx 14KB 15KB [ 2370.186245] bio-2 14KB 15KB [ 2370.195558] jfs_mp 7KB 7KB [ 2370.204539] cifs_small_rq 15KB 16KB [ 2370.216316] cifs_request 67KB 67KB [ 2370.228342] cifs_mpx_ids 0KB 7KB [ 2370.237245] nfs_commit_data 3KB 14KB [ 2370.245744] nfs_write_data 34KB 44KB [ 2370.265784] ext4_system_zone 1KB 7KB [ 2370.274795] bio-1 1KB 7KB [ 2370.294219] pid_namespace 2KB 11KB [ 2370.304555] rpc_buffers 17KB 25KB [ 2370.312237] rpc_tasks 2KB 7KB [ 2370.317598] UNIX 247KB 251KB [ 2370.327683] tcp_bind_bucket 1KB 4KB [ 2370.337303] ip_fib_trie 23KB 47KB [ 2370.347962] ip_fib_alias 111KB 181KB [ 2370.355060] ip_dst_cache 4KB 20KB [ 2370.371406] RAW 42KB 60KB [ 2370.376772] UDP 30KB 47KB [ 2370.382179] TCP 75KB 101KB [ 2370.387540] hugetlbfs_inode_cache 3KB 15KB [ 2370.398543] fscache_cookie_jar 1KB 7KB [ 2370.404049] eventpoll_pwq 35KB 51KB [ 2370.420267] eventpoll_epi 66KB 74KB [ 2370.425629] inotify_inode_mark 33KB 43KB [ 2370.431087] request_queue 199KB 199KB [ 2370.436428] blkdev_requests 1KB 3KB [ 2370.452676] blkdev_ioc 20KB 30KB [ 2370.460082] bio-0 560KB 562KB [ 2370.465450] biovec-max 1402KB 1476KB [ 2370.476109] biovec-64 525KB 527KB [ 2370.481523] biovec-16 86KB 90KB [ 2370.486875] bio_integrity_payload 1KB 8KB [ 2370.503386] khugepaged_mm_slot 18KB 34KB [ 2370.508950] uid_cache 0KB 4KB [ 2370.514308] dmaengine-unmap-2 0KB 3KB [ 2370.522521] skbuff_fclone_cache 99KB 120KB [ 2370.528062] skbuff_head_cache 5390KB 6041KB [ 2370.545781] configfs_dir_cache 3KB 7KB [ 2370.554515] file_lock_cache 158KB 202KB [ 2370.574419] file_lock_ctx 9KB 11KB [ 2370.582325] fsnotify_mark_connector 17KB 27KB [ 2370.588193] net_namespace 52KB 52KB [ 2370.604124] shmem_inode_cache 8476KB 8574KB [ 2370.616673] task_delay_info 197KB 407KB [ 2370.625680] taskstats 82KB 99KB [ 2370.634578] proc_dir_entry 695KB 840KB [ 2370.643626] pde_opener 14KB 69KB [ 2370.656174] seq_file 327KB 460KB [ 2370.663403] sigqueue 66KB 82KB [ 2370.676336] kernfs_node_cache 18294KB 18321KB [ 2370.684093] mnt_cache 173KB 196KB [ 2370.692261] filp 6002KB 7312KB [ 2370.697620] names_cache 153612KB 153612KB [ 2370.714061] iint_cache 26KB 39KB [ 2370.721469] key_jar 4KB 7KB [ 2370.726827] uts_namespace 2KB 7KB [ 2370.732256] nsproxy 21KB 67KB [ 2370.737608] vm_area_struct 4360KB 4640KB [ 2370.745401] mm_struct 641KB 676KB [ 2370.763150] fs_cache 139KB 304KB [ 2370.768526] files_cache 501KB 735KB [ 2370.773181] Bluetooth: hci1: command 0x0c1a tx timeout [ 2370.773963] signal_cache 1134KB 1653KB [ 2370.796834] sighand_cache 580KB 652KB [ 2370.808546] task_struct 6192KB 6262KB [ 2370.818117] cred_jar 1348KB 2500KB [ 2370.867467] anon_vma_chain 1557KB 1736KB [ 2370.913369] anon_vma 169KB 323KB [ 2370.944944] pid 71KB 252KB [ 2370.979019] Acpi-Operand 156KB 194KB [ 2370.984393] Acpi-ParseExt 9KB 11KB [ 2371.048211] Acpi-Parse 41KB 47KB [ 2371.079628] Acpi-State 52KB 63KB [ 2371.085011] Acpi-Namespace 20KB 27KB [ 2371.136520] numa_policy 0KB 3KB [ 2371.161064] debug_objects_cache 1423KB 2143KB [ 2371.166614] trace_event_file 297KB 298KB [ 2371.192802] ftrace_event_field 398KB 401KB [ 2371.198259] pool_workqueue 121KB 152KB [ 2371.203679] page->ptl 651KB 766KB [ 2371.228060] kmalloc-2097152 2050KB 2050KB [ 2371.271334] kmalloc-524288 2056KB 2056KB [ 2371.276808] kmalloc-262144 1290KB 1290KB [ 2371.327481] kmalloc-131072 650KB 650KB [ 2371.355921] kmalloc-65536 1848KB 1914KB [ 2371.385430] kmalloc-32768 1650KB 1650KB [ 2371.414319] kmalloc-16384 1006KB 1006KB [ 2371.442328] kmalloc-8192 3984KB 3984KB [ 2371.450592] kmalloc-4096 20544KB 20582KB [ 2371.455964] kmalloc-2048 10899KB 13623KB [ 2371.517957] kmalloc-1024 5713KB 11316KB [ 2371.536051] kmalloc-512 13276KB 13661KB [ 2371.562428] kmalloc-256 3925KB 5940KB [ 2371.567813] kmalloc-128 915KB 1575KB [ 2371.617235] kmalloc-96 3194KB 4292KB [ 2371.641878] kmalloc-64 2347KB 3428KB [ 2371.647248] kmalloc-32 1797KB 2460KB [ 2371.699452] kmalloc-192 1524KB 2820KB [ 2371.704834] kmem_cache 177KB 183KB [ 2371.744204] Out of memory (oom_kill_allocating_task): Kill process 10121 (syz-executor.5) score 0 or sacrifice child [ 2371.787089] Killed process 17598 (syz-executor.5) total-vm:57204kB, anon-rss:384kB, file-rss:13624kB, shmem-rss:0kB [ 2371.810405] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2371.822062] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2371.826823] CPU: 0 PID: 11813 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2371.834342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2371.843688] Call Trace: [ 2371.846456] dump_stack+0x1fc/0x2ef [ 2371.850085] dump_header+0x15d/0xc3f [ 2371.853798] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2371.858896] ? ___ratelimit+0x319/0x590 [ 2371.862957] oom_kill_process.cold+0x10/0x692 [ 2371.867445] ? check_preemption_disabled+0x41/0x280 [ 2371.872493] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2371.877752] out_of_memory+0x1072/0x1390 [ 2371.881799] ? oom_killer_disable+0x270/0x270 [ 2371.886276] ? mutex_trylock+0x15f/0x1a0 [ 2371.890437] __alloc_pages_nodemask+0x23a2/0x2890 [ 2371.895268] ? find_get_entry+0x4cd/0x8a0 [ 2371.899404] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2371.904249] alloc_pages_current+0x193/0x2a0 [ 2371.908650] filemap_fault+0x146e/0x2180 [ 2371.912706] ext4_filemap_fault+0x84/0xb0 [ 2371.916840] __do_fault+0x10b/0x4b0 [ 2371.920457] __handle_mm_fault+0x273b/0x41c0 [ 2371.924854] ? vm_insert_page+0x9c0/0x9c0 [ 2371.928987] ? __fget+0x356/0x510 [ 2371.932455] ? check_preemption_disabled+0x41/0x280 [ 2371.937461] handle_mm_fault+0x436/0xb10 [ 2371.941510] __do_page_fault+0x68e/0xd60 [ 2371.945559] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2371.950557] ? spurious_fault+0x840/0x840 [ 2371.954687] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2371.959513] ? page_fault+0x8/0x30 [ 2371.963035] page_fault+0x1e/0x30 [ 2371.966477] RIP: 0033:0x466440 [ 2371.969661] Code: Bad RIP value. [ 2371.973004] RSP: 002b:000000c006a03e48 EFLAGS: 00010246 [ 2371.978353] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 000002275d953313 [ 2371.985605] RDX: 000000000183e650 RSI: 000000c006a03840 RDI: 0000000000000003 [ 2371.992852] RBP: 000000c006a03f30 R08: 0000000000000000 R09: 000002275d953313 [ 2372.000099] R10: 00000000000001ba R11: 0000000000000246 R12: 000000c006a03870 [ 2372.007353] R13: 0000000000000000 R14: 000000c0009989c0 R15: 0000000000000000 [ 2372.016397] Mem-Info: [ 2372.018890] active_anon:17099 inactive_anon:34531 isolated_anon:0 [ 2372.018890] active_file:9 inactive_file:15 isolated_file:0 [ 2372.018890] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2372.018890] slab_reclaimable:14012 slab_unreclaimable:124244 [ 2372.018890] mapped:22175 shmem:35993 pagetables:605 bounce:0 [ 2372.018890] free:24992 free_pcp:186 free_cma:0 [ 2372.056131] Node 0 active_anon:66452kB inactive_anon:79476kB active_file:36kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74044kB dirty:0kB writeback:0kB shmem:85068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2372.116083] Node 1 active_anon:1944kB inactive_anon:58648kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14656kB dirty:0kB writeback:0kB shmem:58904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2372.150146] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:2860kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2372.273562] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2372.305444] Node 0 DMA32 free:35464kB min:35996kB low:44992kB high:53988kB active_anon:66328kB inactive_anon:76616kB active_file:36kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7360kB pagetables:2064kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2372.388110] lowmem_reserve[]: 0 0 1 1 1 [ 2372.392161] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2372.437245] lowmem_reserve[]: 0 0 0 0 0 [ 2372.467994] Node 1 Normal free:53876kB min:53876kB low:67344kB high:80812kB active_anon:1944kB inactive_anon:58648kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:356kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2372.620565] lowmem_reserve[]: 0 0 0 0 0 [ 2372.624571] Node 0 DMA: 1*4kB (E) 3*8kB (ME) 4*16kB (UM) 4*32kB (ME) 6*64kB (UME) 9*128kB (UME) 6*256kB (UME) 5*512kB (UME) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 10972kB [ 2372.706657] Node 0 DMA32: 516*4kB (ME) 503*8kB (UME) 326*16kB (UME) 146*32kB (UME) 64*64kB (ME) 11*128kB (M) 7*256kB (UM) 2*512kB (UM) 11*1024kB (UM) 0*2048kB 0*4096kB = 35560kB [ 2372.798537] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2372.848621] Bluetooth: hci1: command 0x0c1a tx timeout [ 2372.857372] Node 1 Normal: 252*4kB (ME) 213*8kB (UME) 155*16kB (ME) 83*32kB (ME) 24*64kB (UM) 10*128kB (UME) 0*256kB 2*512kB (UM) 1*1024kB (E) 0*2048kB 10*4096kB (U) = 53672kB [ 2372.875111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2372.895668] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2372.946030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2372.987777] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2373.033824] 36016 total pagecache pages [ 2373.037816] 0 pages in swap cache [ 2373.063831] Swap cache stats: add 0, delete 0, find 0/0 [ 2373.086828] Free swap = 0kB [ 2373.098290] Total swap = 0kB [ 2373.112286] 2097051 pages RAM [ 2373.115392] 0 pages HighMem/MovableOnly [ 2373.147324] 369649 pages reserved [ 2373.162173] 0 pages cma reserved [ 2373.165544] Unreclaimable slab info: [ 2373.181075] Name Used Total [ 2373.186621] pid_2 59KB 100KB [ 2373.198244] batadv_tl_cache 4KB 12KB [ 2373.230023] TIPC 15KB 30KB [ 2373.235408] SCTPv6 14KB 18KB [ 2373.263427] SCTP 9KB 11KB [ 2373.280915] DCCPv6 17KB 37KB [ 2373.286295] DCCP 16KB 28KB [ 2373.314328] RXRPC 11KB 19KB [ 2373.333340] rxrpc_call_jar 78KB 94KB [ 2373.354602] bridge_fdb_cache 9KB 23KB [ 2373.375165] fib6_nodes 156KB 252KB [ 2373.398983] ip6_dst_cache 69KB 420KB [ 2373.404361] RAWv6 75KB 87KB [ 2373.428315] UDPv6 26KB 41KB [ 2373.464361] TCPv6 24KB 36KB [ 2373.501615] nf_conntrack 1KB 7KB [ 2373.507049] t10_alua_lu_gp_cache 0KB 3KB [ 2373.555800] sd_ext_cdb 0KB 7KB [ 2373.582514] scsi_sense_cache 1056KB 1060KB [ 2373.587898] virtio_scsi_cmd 16KB 16KB [ 2373.634261] sgpool-128 8KB 8KB [ 2373.664353] sgpool-64 4KB 12KB [ 2373.686678] sgpool-32 2KB 15KB [ 2373.712720] sgpool-16 1KB 7KB [ 2373.718094] sgpool-8 0KB 7KB [ 2373.758554] mqueue_inode_cache 10KB 22KB [ 2373.764024] bio_post_read_ctx 14KB 15KB [ 2373.806090] bio-2 14KB 15KB [ 2373.824203] jfs_mp 7KB 7KB [ 2373.831445] cifs_small_rq 15KB 16KB [ 2373.838066] cifs_request 67KB 67KB [ 2373.849363] cifs_mpx_ids 0KB 7KB [ 2373.854758] nfs_commit_data 3KB 14KB [ 2373.866235] nfs_write_data 34KB 44KB [ 2373.877030] ext4_system_zone 1KB 7KB [ 2373.885656] bio-1 1KB 7KB [ 2373.892906] pid_namespace 2KB 11KB [ 2373.898262] rpc_buffers 17KB 25KB [ 2373.915038] rpc_tasks 2KB 7KB [ 2373.920455] UNIX 247KB 251KB [ 2373.925806] tcp_bind_bucket 1KB 4KB [ 2373.945486] ip_fib_trie 23KB 47KB [ 2373.950907] ip_fib_alias 111KB 181KB [ 2373.956259] ip_dst_cache 4KB 20KB [ 2373.967066] RAW 42KB 60KB [ 2373.972480] UDP 30KB 47KB [ 2373.977844] TCP 47KB 78KB [ 2373.986458] hugetlbfs_inode_cache 3KB 15KB [ 2373.994215] fscache_cookie_jar 1KB 7KB [ 2373.999810] eventpoll_pwq 32KB 51KB [ 2374.005167] eventpoll_epi 60KB 74KB [ 2374.012583] inotify_inode_mark 31KB 43KB [ 2374.018042] request_queue 199KB 199KB [ 2374.030988] blkdev_requests 1KB 3KB [ 2374.036353] blkdev_ioc 20KB 30KB [ 2374.045486] bio-0 564KB 566KB [ 2374.057391] biovec-max 1402KB 1476KB [ 2374.065154] biovec-64 525KB 527KB [ 2374.074169] biovec-16 86KB 90KB [ 2374.085950] bio_integrity_payload 1KB 8KB [ 2374.095390] khugepaged_mm_slot 16KB 34KB [ 2374.101855] uid_cache 0KB 4KB [ 2374.107239] dmaengine-unmap-2 0KB 3KB [ 2374.122730] skbuff_fclone_cache 90KB 120KB [ 2374.128269] skbuff_head_cache 5652KB 6041KB [ 2374.146804] configfs_dir_cache 3KB 7KB [ 2374.155927] file_lock_cache 154KB 202KB [ 2374.162205] file_lock_ctx 9KB 11KB [ 2374.167568] fsnotify_mark_connector 16KB 27KB [ 2374.185795] net_namespace 52KB 52KB [ 2374.192973] shmem_inode_cache 8455KB 8574KB [ 2374.198317] task_delay_info 189KB 407KB [ 2374.205484] taskstats 78KB 99KB [ 2374.213908] proc_dir_entry 695KB 840KB [ 2374.222240] pde_opener 12KB 69KB [ 2374.227598] seq_file 321KB 460KB [ 2374.234973] sigqueue 63KB 82KB [ 2374.244593] kernfs_node_cache 18294KB 18321KB [ 2374.253472] mnt_cache 173KB 196KB [ 2374.262223] filp 5932KB 7312KB [ 2374.267587] names_cache 152048KB 152077KB [ 2374.276544] iint_cache 26KB 39KB [ 2374.285812] key_jar 4KB 7KB [ 2374.298373] uts_namespace 2KB 7KB [ 2374.305624] nsproxy 17KB 67KB [ 2374.316499] vm_area_struct 4308KB 4640KB [ 2374.327535] mm_struct 625KB 676KB [ 2374.335128] fs_cache 132KB 304KB [ 2374.342362] files_cache 480KB 727KB [ 2374.347711] signal_cache 1119KB 1653KB [ 2374.364319] sighand_cache 557KB 652KB [ 2374.369759] task_struct 6167KB 6249KB [ 2374.375113] cred_jar 1336KB 2500KB [ 2374.385820] anon_vma_chain 1541KB 1736KB [ 2374.391236] anon_vma 152KB 323KB [ 2374.396592] pid 68KB 248KB [ 2374.406856] Acpi-Operand 156KB 194KB [ 2374.416184] Acpi-ParseExt 9KB 11KB [ 2374.421588] Acpi-Parse 41KB 47KB [ 2374.426929] Acpi-State 52KB 63KB [ 2374.437008] Acpi-Namespace 20KB 27KB [ 2374.446476] numa_policy 0KB 3KB [ 2374.452908] debug_objects_cache 1423KB 2143KB [ 2374.465753] trace_event_file 297KB 298KB [ 2374.472349] ftrace_event_field 398KB 401KB [ 2374.477801] pool_workqueue 121KB 152KB [ 2374.485971] page->ptl 638KB 766KB [ 2374.493988] kmalloc-2097152 2050KB 2050KB [ 2374.505960] kmalloc-524288 2056KB 2056KB [ 2374.514951] kmalloc-262144 1290KB 1290KB [ 2374.520361] kmalloc-131072 650KB 650KB [ 2374.525701] kmalloc-65536 1848KB 1914KB [ 2374.535404] kmalloc-32768 1650KB 1650KB [ 2374.546351] kmalloc-16384 1006KB 1006KB [ 2374.554897] kmalloc-8192 3984KB 3984KB [ 2374.567509] kmalloc-4096 20531KB 20570KB [ 2374.576811] kmalloc-2048 10877KB 13623KB [ 2374.585850] kmalloc-1024 5713KB 11316KB [ 2374.595145] kmalloc-512 13700KB 13878KB [ 2374.604257] kmalloc-256 3925KB 5940KB [ 2374.611919] kmalloc-128 906KB 1575KB [ 2374.617297] kmalloc-96 3231KB 4292KB [ 2374.632181] kmalloc-64 2335KB 3428KB [ 2374.637540] kmalloc-32 1800KB 2460KB [ 2374.644887] kmalloc-192 1516KB 2820KB [ 2374.656353] kmem_cache 177KB 183KB [ 2374.665429] Out of memory (oom_kill_allocating_task): Kill process 11813 (syz-fuzzer) score 0 or sacrifice child [ 2374.677727] Killed process 10552 (syz-executor.3) total-vm:48480kB, anon-rss:360kB, file-rss:0kB, shmem-rss:0kB [ 2374.697133] oom_reaper: reaped process 17570 (syz-executor.2), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 2374.701533] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2374.765874] systemd-journal cpuset=/ mems_allowed=0-1 [ 2374.771163] CPU: 0 PID: 17171 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2374.779125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2374.788473] Call Trace: [ 2374.791058] dump_stack+0x1fc/0x2ef [ 2374.794687] dump_header+0x15d/0xc3f [ 2374.798398] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2374.803493] ? ___ratelimit+0x319/0x590 [ 2374.807469] oom_kill_process.cold+0x10/0x692 [ 2374.811964] ? check_preemption_disabled+0x41/0x280 [ 2374.816982] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2374.822257] out_of_memory+0x1072/0x1390 [ 2374.826323] ? oom_killer_disable+0x270/0x270 [ 2374.830822] ? mutex_trylock+0x15f/0x1a0 [ 2374.834883] __alloc_pages_nodemask+0x23a2/0x2890 [ 2374.839730] ? find_get_entry+0x4cd/0x8a0 [ 2374.843887] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2374.848838] alloc_pages_current+0x193/0x2a0 [ 2374.853249] filemap_fault+0x146e/0x2180 [ 2374.857321] ext4_filemap_fault+0x84/0xb0 [ 2374.861472] __do_fault+0x10b/0x4b0 [ 2374.865103] __handle_mm_fault+0x273b/0x41c0 [ 2374.869518] ? vm_insert_page+0x9c0/0x9c0 [ 2374.873675] ? check_preemption_disabled+0x41/0x280 [ 2374.878693] handle_mm_fault+0x436/0xb10 [ 2374.882755] __do_page_fault+0x68e/0xd60 [ 2374.886817] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2374.891832] ? spurious_fault+0x840/0x840 [ 2374.895978] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2374.900820] ? page_fault+0x8/0x30 [ 2374.904361] page_fault+0x1e/0x30 [ 2374.907808] RIP: 0033:0x7f8864f040e0 [ 2374.911515] Code: Bad RIP value. [ 2374.914870] RSP: 002b:00007fffc5bfeb88 EFLAGS: 00010246 [ 2374.920222] RAX: 0000000000000001 RBX: 0000557b41fcd310 RCX: 00007f88645c72e3 [ 2374.927485] RDX: 0000000000000013 RSI: 00007fffc5bfeba0 RDI: 0000000000000000 [ 2374.935008] RBP: 00007fffc5bfed90 R08: 00007fffc5df7000 R09: 0000025f1fa618b4 [ 2374.942269] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc5bfeba0 [ 2374.949528] R13: 0000000000000001 R14: 0000000000000001 R15: 0005e578a60787e8 [ 2374.964195] Bluetooth: hci1: command 0x0c1a tx timeout [ 2374.976159] Mem-Info: [ 2374.986108] active_anon:17045 inactive_anon:34531 isolated_anon:0 [ 2374.986108] active_file:12 inactive_file:11 isolated_file:0 [ 2374.986108] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2374.986108] slab_reclaimable:13994 slab_unreclaimable:124279 [ 2374.986108] mapped:22175 shmem:35993 pagetables:580 bounce:0 [ 2374.986108] free:13866 free_pcp:325 free_cma:0 [ 2375.019487] syz-executor.2: vmalloc: allocation failure, allocated 1465319424 of 2128986112 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2375.040758] Node 0 active_anon:66240kB inactive_anon:79476kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74044kB dirty:0kB writeback:0kB shmem:85068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2375.056284] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2375.075080] Node 1 active_anon:1940kB inactive_anon:58648kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14656kB dirty:0kB writeback:0kB shmem:58904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2375.106895] CPU: 1 PID: 17570 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 2375.109717] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:2860kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2375.114869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2375.114879] Call Trace: [ 2375.141471] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2375.150826] dump_stack+0x1fc/0x2ef [ 2375.150848] warn_alloc.cold+0x7b/0x18f [ 2375.153402] Node 0 DMA32 free:17880kB min:35996kB low:44992kB high:53988kB active_anon:66116kB inactive_anon:76616kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1964kB bounce:0kB free_pcp:832kB local_pcp:316kB free_cma:0kB [ 2375.158406] ? zone_watermark_ok_safe+0x260/0x260 [ 2375.158421] ? retint_kernel+0x2d/0x2d [ 2375.158452] __vmalloc_area_node+0x4fd/0x780 [ 2375.162035] lowmem_reserve[]: 0 0 1 1 1 [ 2375.166001] ? __vmalloc_node_range+0x180/0x180 [ 2375.194887] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2375.199685] ? _raw_spin_unlock+0x29/0x40 [ 2375.199700] ? __get_vm_area_node+0x2e2/0x3a0 [ 2375.199719] __vmalloc_node_range+0xed/0x180 [ 2375.203575] lowmem_reserve[]: 0 0 0 0 0 [ 2375.207976] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2375.211937] Node 1 Normal free:26704kB min:53876kB low:67344kB high:80812kB active_anon:1940kB inactive_anon:58648kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:356kB bounce:0kB free_pcp:468kB local_pcp:248kB free_cma:0kB [ 2375.216572] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2375.242521] lowmem_reserve[]: 0 0 0 0 0 [ 2375.246636] vmalloc_user+0x70/0xe0 [ 2375.251118] Node 0 DMA: 2*4kB (UE) 4*8kB (UME) 3*16kB (M) 5*32kB (UME) 4*64kB (UME) 9*128kB (UME) 6*256kB (UME) 5*512kB (UME) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 10872kB [ 2375.255494] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2375.259453] Node 0 DMA32: 488*4kB (UME) 472*8kB (UME) 294*16kB (UME) 112*32kB (UME) 45*64kB (UME) 4*128kB (M) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17920kB [ 2375.263758] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2375.292288] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2375.297616] __vb2_queue_alloc+0x472/0xe60 [ 2375.301580] Node 1 Normal: 252*4kB (ME) 212*8kB (ME) 156*16kB (UME) 84*32kB (UME) 24*64kB (UM) 9*128kB (ME) 1*256kB (U) 1*512kB (M) 1*1024kB (E) 1*2048kB (U) 3*4096kB (U) = 26704kB [ 2375.305187] vb2_core_create_bufs+0x273/0x7e0 [ 2375.320608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2375.324906] ? __vb2_queue_free+0x870/0x870 [ 2375.339973] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2375.344094] ? mutex_trylock+0x1a0/0x1a0 [ 2375.355085] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2375.359280] ? __video_do_ioctl+0x632/0xcd0 [ 2375.359303] vb2_create_bufs+0x332/0x620 [ 2375.375508] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2375.379970] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2375.379983] ? __video_do_ioctl+0x632/0xcd0 [ 2375.379999] ? mutex_trylock+0x1a0/0x1a0 [ 2375.388831] 36016 total pagecache pages [ 2375.393473] ? mark_held_locks+0xf0/0xf0 [ 2375.402039] 0 pages in swap cache [ 2375.406068] ? futex_wait_queue_me+0x404/0x5e0 [ 2375.414980] Swap cache stats: add 0, delete 0, find 0/0 [ 2375.419268] vb2_ioctl_create_bufs+0x20d/0x360 [ 2375.419288] ? memset+0x20/0x40 [ 2375.423319] Free swap = 0kB [ 2375.431881] v4l_create_bufs+0xb2/0x160 [ 2375.431903] __video_do_ioctl+0x49a/0xcd0 [ 2375.436972] Total swap = 0kB [ 2375.441367] ? v4l_querycap+0x340/0x340 [ 2375.441387] ? __might_fault+0x192/0x1d0 [ 2375.445416] 2097051 pages RAM [ 2375.449374] ? v4l_querycap+0x340/0x340 [ 2375.449389] video_usercopy+0x13f/0xfa0 [ 2375.449410] ? v4l_enumstd+0x60/0x60 [ 2375.453436] 0 pages HighMem/MovableOnly [ 2375.456874] ? do_futex+0x171/0x1880 [ 2375.461453] 369649 pages reserved [ 2375.466786] ? mark_held_locks+0xf0/0xf0 [ 2375.471376] 0 pages cma reserved [ 2375.474633] ? debug_check_no_obj_freed+0x201/0x490 [ 2375.477643] Unreclaimable slab info: [ 2375.481629] ? video_usercopy+0xfa0/0xfa0 [ 2375.481641] v4l2_ioctl+0x147/0x1a0 [ 2375.481655] ? video_devdata+0xa0/0xa0 [ 2375.481672] do_vfs_ioctl+0xcdb/0x12e0 [ 2375.485796] Name Used Total [ 2375.488806] ? lock_downgrade+0x720/0x720 [ 2375.488822] ? check_preemption_disabled+0x41/0x280 [ 2375.488838] ? ioctl_preallocate+0x200/0x200 [ 2375.492795] pid_2 56KB 100KB [ 2375.496847] ? __fget+0x356/0x510 [ 2375.500024] batadv_tl_cache 4KB 12KB [ 2375.503887] ? do_dup2+0x450/0x450 [ 2375.507854] TIPC 15KB 30KB [ 2375.511537] ? __se_sys_futex+0x298/0x3b0 [ 2375.511558] ksys_ioctl+0x9b/0xc0 [ 2375.511576] __x64_sys_ioctl+0x6f/0xb0 [ 2375.515538] SCTPv6 14KB 18KB [ 2375.519249] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2375.519265] do_syscall_64+0xf9/0x620 [ 2375.519289] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2375.522714] SCTP 9KB 11KB [ 2375.526756] RIP: 0033:0x7f341ec39209 [ 2375.530146] DCCPv6 17KB 37KB [ 2375.535105] Code: Bad RIP value. [ 2375.538824] DCCP 16KB 28KB [ 2375.542919] RSP: 002b:00007f341d5ae168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2375.546572] RXRPC 11KB 19KB [ 2375.550408] RAX: ffffffffffffffda RBX: 00007f341ed4bf60 RCX: 00007f341ec39209 [ 2375.550416] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 2375.550423] RBP: 00007f341ec93161 R08: 0000000000000000 R09: 0000000000000000 [ 2375.550431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2375.550442] R13: 00007ffc3f7ea9cf R14: 00007f341d5ae300 R15: 0000000000022000 [ 2375.554319] rxrpc_call_jar 78KB 94KB [ 2375.571720] Mem-Info: [ 2375.599851] bridge_fdb_cache 9KB 23KB [ 2375.606303] active_anon:17045 inactive_anon:34531 isolated_anon:0 [ 2375.606303] active_file:12 inactive_file:11 isolated_file:0 [ 2375.606303] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2375.606303] slab_reclaimable:13994 slab_unreclaimable:124279 [ 2375.606303] mapped:22175 shmem:35993 pagetables:580 bounce:0 [ 2375.606303] free:13866 free_pcp:325 free_cma:0 [ 2375.607556] fib6_nodes 156KB 252KB [ 2375.610443] Node 0 active_anon:66240kB inactive_anon:79476kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74044kB dirty:0kB writeback:0kB shmem:85068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2375.627632] ip6_dst_cache 69KB 420KB [ 2375.633179] Node 1 active_anon:1940kB inactive_anon:58648kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14656kB dirty:0kB writeback:0kB shmem:58904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2375.646057] RAWv6 75KB 87KB [ 2375.647483] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:2860kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2375.665268] UDPv6 26KB 41KB [ 2375.669412] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2375.683727] TCPv6 24KB 36KB [ 2375.696798] Node 0 DMA32 free:17880kB min:35996kB low:44992kB high:53988kB active_anon:66116kB inactive_anon:76616kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1964kB bounce:0kB free_pcp:832kB local_pcp:516kB free_cma:0kB [ 2375.707752] nf_conntrack 1KB 7KB [ 2375.718582] lowmem_reserve[]: 0 0 1 1 1 [ 2375.770153] t10_alua_lu_gp_cache 0KB 3KB [ 2375.797495] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2375.847365] sd_ext_cdb 0KB 7KB [ 2375.848958] lowmem_reserve[]: 0 0 0 0 0 [ 2375.848980] Node 1 Normal free:26704kB min:53876kB low:67344kB high:80812kB active_anon:1940kB inactive_anon:58648kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:356kB bounce:0kB free_pcp:468kB local_pcp:220kB free_cma:0kB [ 2375.849014] lowmem_reserve[]: 0 0 0 0 0 [ 2375.880269] scsi_sense_cache 1056KB 1060KB [ 2375.902585] Node 0 DMA: 2*4kB (UE) 4*8kB (UME) 3*16kB (M) 5*32kB (UME) 4*64kB (UME) 9*128kB (UME) 6*256kB (UME) 5*512kB (UME) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 10872kB [ 2375.921382] virtio_scsi_cmd 16KB 16KB [ 2375.946656] Node 0 DMA32: 488*4kB (UME) 472*8kB (UME) 294*16kB (UME) 112*32kB (UME) 45*64kB (UME) 4*128kB (M) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17920kB [ 2375.980841] sgpool-128 8KB 8KB [ 2376.027457] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2376.030982] sgpool-64 4KB 12KB [ 2376.042012] Node 1 Normal: 252*4kB (ME) 212*8kB (ME) 156*16kB (UME) 84*32kB (UME) 24*64kB (UM) 9*128kB (ME) 1*256kB (U) 1*512kB (M) 1*1024kB (E) 1*2048kB (U) 3*4096kB (U) = 26704kB [ 2376.064020] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2376.072896] sgpool-32 2KB 15KB [ 2376.082302] sgpool-16 1KB 7KB [ 2376.087674] sgpool-8 0KB 7KB [ 2376.093134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2376.105547] mqueue_inode_cache 10KB 22KB [ 2376.108229] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2376.111043] bio_post_read_ctx 14KB 15KB [ 2376.111119] bio-2 14KB 15KB [ 2376.138058] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2376.146680] jfs_mp 7KB 7KB [ 2376.147542] 36016 total pagecache pages [ 2376.158860] cifs_small_rq 15KB 16KB [ 2376.164221] cifs_request 67KB 67KB [ 2376.173213] cifs_mpx_ids 0KB 7KB [ 2376.182552] nfs_commit_data 3KB 14KB [ 2376.184819] 0 pages in swap cache [ 2376.187911] nfs_write_data 34KB 44KB [ 2376.187953] ext4_system_zone 1KB 7KB [ 2376.187981] bio-1 1KB 7KB [ 2376.187991] pid_namespace 2KB 11KB [ 2376.188010] rpc_buffers 17KB 25KB [ 2376.188019] rpc_tasks 2KB 7KB [ 2376.188029] UNIX 247KB 251KB [ 2376.188045] tcp_bind_bucket 1KB 4KB [ 2376.188062] ip_fib_trie 23KB 47KB [ 2376.188071] ip_fib_alias 111KB 181KB [ 2376.188081] ip_dst_cache 4KB 20KB [ 2376.188092] RAW 42KB 60KB [ 2376.188101] UDP 30KB 47KB [ 2376.188114] TCP 30KB 78KB [ 2376.188126] hugetlbfs_inode_cache 3KB 15KB [ 2376.188136] fscache_cookie_jar 1KB 7KB [ 2376.188146] eventpoll_pwq 31KB 51KB [ 2376.188155] eventpoll_epi 59KB 74KB [ 2376.188165] inotify_inode_mark 30KB 43KB [ 2376.188177] request_queue 199KB 199KB [ 2376.188186] blkdev_requests 1KB 3KB [ 2376.188196] blkdev_ioc 16KB 30KB [ 2376.188206] bio-0 562KB 566KB [ 2376.188215] biovec-max 1402KB 1476KB [ 2376.188227] biovec-64 524KB 527KB [ 2376.188236] biovec-16 86KB 90KB [ 2376.188276] bio_integrity_payload 1KB 8KB [ 2376.188286] khugepaged_mm_slot 14KB 34KB [ 2376.188304] uid_cache 0KB 4KB [ 2376.188314] dmaengine-unmap-2 0KB 3KB [ 2376.188325] skbuff_fclone_cache 85KB 120KB [ 2376.188334] skbuff_head_cache 5812KB 6041KB [ 2376.188344] configfs_dir_cache 3KB 7KB [ 2376.188354] file_lock_cache 150KB 202KB [ 2376.188363] file_lock_ctx 9KB 11KB [ 2376.188373] fsnotify_mark_connector 16KB 27KB [ 2376.188382] net_namespace 52KB 52KB [ 2376.188392] shmem_inode_cache 8446KB 8574KB [ 2376.188402] task_delay_info 180KB 407KB [ 2376.188411] taskstats 70KB 99KB [ 2376.188421] proc_dir_entry 695KB 840KB [ 2376.188430] pde_opener 12KB 69KB [ 2376.188440] seq_file 317KB 460KB [ 2376.188449] sigqueue 62KB 82KB [ 2376.188458] kernfs_node_cache 18294KB 18321KB [ 2376.188468] mnt_cache 173KB 196KB [ 2376.188478] filp 5925KB 7312KB [ 2376.188487] names_cache 152039KB 152077KB [ 2376.188496] iint_cache 26KB 39KB [ 2376.188507] key_jar 4KB 7KB [ 2376.205519] Swap cache stats: add 0, delete 0, find 0/0 [ 2376.219392] uts_namespace 2KB 7KB [ 2376.239196] Free swap = 0kB [ 2376.251549] nsproxy 14KB 67KB [ 2376.270971] Total swap = 0kB [ 2376.284052] vm_area_struct 4302KB 4640KB [ 2376.305817] 2097051 pages RAM [ 2376.315388] mm_struct 609KB 676KB [ 2376.337430] 0 pages HighMem/MovableOnly [ 2376.342667] fs_cache 126KB 304KB [ 2376.364860] 369649 pages reserved [ 2376.369798] files_cache 467KB 723KB [ 2376.370864] 0 pages cma reserved [ 2376.376162] signal_cache 1109KB 1653KB [ 2376.525392] sighand_cache 534KB 652KB [ 2376.530793] task_struct 6154KB 6243KB [ 2376.536150] cred_jar 1324KB 2500KB [ 2376.541571] anon_vma_chain 1536KB 1736KB [ 2376.546927] anon_vma 141KB 323KB [ 2376.555226] pid 67KB 248KB [ 2376.591862] Acpi-Operand 156KB 194KB [ 2376.597756] Acpi-ParseExt 9KB 11KB [ 2376.624941] Acpi-Parse 41KB 47KB [ 2376.630376] Acpi-State 52KB 63KB [ 2376.635737] Acpi-Namespace 20KB 27KB [ 2376.662805] numa_policy 0KB 3KB [ 2376.668198] debug_objects_cache 1423KB 2143KB [ 2376.677269] trace_event_file 297KB 298KB [ 2376.696860] ftrace_event_field 398KB 401KB [ 2376.702352] pool_workqueue 121KB 152KB [ 2376.707715] page->ptl 634KB 766KB [ 2376.721524] kmalloc-2097152 2050KB 2050KB [ 2376.726896] kmalloc-524288 2056KB 2056KB [ 2376.734750] kmalloc-262144 1290KB 1290KB [ 2376.745991] kmalloc-131072 650KB 650KB [ 2376.753863] kmalloc-65536 1848KB 1914KB [ 2376.770817] kmalloc-32768 1650KB 1650KB [ 2376.776184] kmalloc-16384 1006KB 1006KB [ 2376.787570] kmalloc-8192 3984KB 3984KB [ 2376.795413] kmalloc-4096 20523KB 20561KB [ 2376.806868] kmalloc-2048 10856KB 13610KB [ 2376.814722] kmalloc-1024 5711KB 11316KB [ 2376.825613] kmalloc-512 13893KB 13893KB [ 2376.836904] kmalloc-256 3921KB 5940KB [ 2376.850901] kmalloc-128 900KB 1575KB [ 2376.856264] kmalloc-96 3254KB 4292KB [ 2376.864196] kmalloc-64 2332KB 3428KB [ 2376.871935] kmalloc-32 1808KB 2460KB [ 2376.877295] kmalloc-192 1509KB 2820KB [ 2376.882686] kmem_cache 177KB 183KB [ 2376.888044] Out of memory (oom_kill_allocating_task): Kill process 17171 (systemd-journal) score 0 or sacrifice child [ 2376.898864] Killed process 17171 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1292kB [ 2376.910502] oom_reaper: reaped process 17171 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1292kB [ 2376.989148] oom_reaper: reaped process 17550 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 2377.008251] Bluetooth: hci1: command 0x0c1a tx timeout [ 2377.019103] oom_reaper: reaped process 17575 (syz-executor.3), now anon-rss:0kB, file-rss:14336kB, shmem-rss:12kB [ 2377.213309] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2377.252811] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2377.257601] CPU: 0 PID: 10280 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2377.265128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2377.274479] Call Trace: [ 2377.277075] dump_stack+0x1fc/0x2ef [ 2377.280704] dump_header+0x15d/0xc3f [ 2377.284419] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2377.289522] ? ___ratelimit+0x319/0x590 [ 2377.293500] oom_kill_process.cold+0x10/0x692 [ 2377.297994] ? check_preemption_disabled+0x41/0x280 [ 2377.303012] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2377.308290] out_of_memory+0x1072/0x1390 [ 2377.312358] ? oom_killer_disable+0x270/0x270 [ 2377.316865] ? mutex_trylock+0x15f/0x1a0 [ 2377.320932] __alloc_pages_nodemask+0x23a2/0x2890 [ 2377.325780] ? find_get_entry+0x4cd/0x8a0 [ 2377.329937] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2377.334817] alloc_pages_current+0x193/0x2a0 [ 2377.339223] filemap_fault+0x146e/0x2180 [ 2377.343304] ext4_filemap_fault+0x84/0xb0 [ 2377.347450] __do_fault+0x10b/0x4b0 [ 2377.351097] __handle_mm_fault+0x273b/0x41c0 [ 2377.355510] ? do_signal+0x49d/0x1670 [ 2377.359307] ? vm_insert_page+0x9c0/0x9c0 [ 2377.363466] ? check_preemption_disabled+0x41/0x280 [ 2377.368490] handle_mm_fault+0x436/0xb10 [ 2377.372556] __do_page_fault+0x68e/0xd60 [ 2377.376626] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2377.381646] ? spurious_fault+0x840/0x840 [ 2377.385792] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2377.390637] ? page_fault+0x8/0x30 [ 2377.394175] page_fault+0x1e/0x30 [ 2377.397626] RIP: 0033:0x4665e0 [ 2377.400814] Code: Bad RIP value. [ 2377.404172] RSP: 002b:000000c0065d5ab8 EFLAGS: 00010202 [ 2377.409543] RAX: 0000000000000000 RBX: 000000c000020800 RCX: 000000000049e02a [ 2377.416813] RDX: 000000c0065d5ac0 RSI: 000000c0065d5bf0 RDI: 0000000000000011 [ 2377.424081] RBP: 000000c00002ae98 R08: 0000000000000000 R09: 0000000000000000 [ 2377.431344] R10: 0000000001000004 R11: 0000000000000202 R12: 000000c00002ae38 [ 2377.438611] R13: 0000000000000000 R14: 000000c000255380 R15: 0000000000000000 [ 2377.766870] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 2377.803252] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 2377.848424] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2377.855224] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2377.883353] systemd[1]: Stopped Journal Service. [ 2377.928245] Mem-Info: [ 2377.943183] active_anon:16864 inactive_anon:34530 isolated_anon:0 [ 2377.943183] active_file:978 inactive_file:1787 isolated_file:0 [ 2377.943183] unevictable:0 dirty:68 writeback:0 unstable:0 [ 2377.943183] slab_reclaimable:14006 slab_unreclaimable:123859 [ 2377.943183] mapped:23604 shmem:35993 pagetables:624 bounce:0 [ 2377.943183] free:34113 free_pcp:341 free_cma:0 [ 2377.980077] systemd[1]: Starting Journal Service... [ 2378.072888] Node 0 active_anon:65672kB inactive_anon:79476kB active_file:376kB inactive_file:1272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:75444kB dirty:36kB writeback:0kB shmem:85068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2378.115987] Node 1 active_anon:1984kB inactive_anon:58644kB active_file:4736kB inactive_file:6376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19872kB dirty:236kB writeback:0kB shmem:58904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2378.198238] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:2860kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2378.229370] systemd-journald[17609]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2378.308168] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2378.318143] Node 0 DMA32 free:35780kB min:35996kB low:44992kB high:53988kB active_anon:65548kB inactive_anon:76616kB active_file:376kB inactive_file:1272kB unevictable:0kB writepending:36kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1964kB bounce:0kB free_pcp:1160kB local_pcp:420kB free_cma:0kB [ 2378.439616] lowmem_reserve[]: 0 0 1 1 1 [ 2378.451524] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2378.548144] lowmem_reserve[]: 0 0 0 0 0 [ 2378.552153] Node 1 Normal free:78908kB min:53876kB low:67344kB high:80812kB active_anon:1984kB inactive_anon:66708kB active_file:1496kB inactive_file:1400kB unevictable:0kB writepending:236kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:384kB bounce:0kB free_pcp:2584kB local_pcp:1324kB free_cma:0kB [ 2378.642776] lowmem_reserve[]: 0 0 0 0 0 [ 2378.663218] Node 0 DMA: 1*4kB (E) 3*8kB (ME) 3*16kB (M) 8*32kB (UME) 4*64kB (UME) 9*128kB (UME) 6*256kB (UME) 5*512kB (UME) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 10956kB [ 2378.722900] Node 0 DMA32: 157*4kB (UME) 391*8kB (UME) 352*16kB (UME) 113*32kB (UME) 46*64kB (UME) 7*128kB (UM) 56*256kB (UM) 9*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 35788kB [ 2378.792742] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2378.840328] Node 1 Normal: 40*4kB (ME) 187*8kB (ME) 102*16kB (UME) 34*32kB (ME) 8*64kB (UM) 38*128kB (UE) 10*256kB (UM) 58*512kB (U) 10*1024kB (UE) 2*2048kB (U) 2*4096kB (U) = 64536kB [ 2378.905575] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2378.954238] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2378.982939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2379.028113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2379.036790] 38790 total pagecache pages [ 2379.088204] Bluetooth: hci1: command 0x0c1a tx timeout [ 2379.088862] 0 pages in swap cache [ 2379.096937] Swap cache stats: add 0, delete 0, find 0/0 [ 2379.148146] Free swap = 0kB [ 2379.151284] Total swap = 0kB [ 2379.154295] 2097051 pages RAM [ 2379.180704] 0 pages HighMem/MovableOnly [ 2379.187501] 369649 pages reserved [ 2379.200402] 0 pages cma reserved [ 2379.203769] Unreclaimable slab info: [ 2379.207476] Name Used Total [ 2379.248122] pid_2 53KB 100KB [ 2379.253575] batadv_tl_cache 4KB 12KB [ 2379.272946] TIPC 15KB 30KB [ 2379.300020] SCTPv6 14KB 18KB [ 2379.328066] SCTP 9KB 11KB [ 2379.333451] DCCPv6 17KB 37KB [ 2379.358082] DCCP 16KB 28KB [ 2379.392624] RXRPC 11KB 19KB [ 2379.397999] rxrpc_call_jar 78KB 94KB [ 2379.403436] bridge_fdb_cache 9KB 23KB [ 2379.433508] fib6_nodes 156KB 252KB [ 2379.438973] ip6_dst_cache 69KB 420KB [ 2379.452529] RAWv6 75KB 87KB [ 2379.457899] UDPv6 26KB 41KB [ 2379.492638] TCPv6 33KB 36KB [ 2379.498230] nf_conntrack 1KB 7KB [ 2379.503648] t10_alua_lu_gp_cache 0KB 3KB [ 2379.532574] sd_ext_cdb 0KB 7KB [ 2379.537959] scsi_sense_cache 1056KB 1060KB [ 2379.553083] virtio_scsi_cmd 16KB 16KB [ 2379.575394] sgpool-128 8KB 8KB [ 2379.580855] sgpool-64 4KB 12KB [ 2379.586213] sgpool-32 2KB 15KB [ 2379.596225] sgpool-16 1KB 7KB [ 2379.601834] sgpool-8 0KB 7KB [ 2379.607201] mqueue_inode_cache 10KB 22KB [ 2379.615159] bio_post_read_ctx 14KB 15KB [ 2379.620683] bio-2 14KB 15KB [ 2379.626027] jfs_mp 7KB 7KB [ 2379.634139] cifs_small_rq 15KB 16KB [ 2379.639562] cifs_request 67KB 67KB [ 2379.644913] cifs_mpx_ids 0KB 7KB [ 2379.652777] nfs_commit_data 3KB 14KB [ 2379.658155] nfs_write_data 34KB 44KB [ 2379.663517] ext4_system_zone 1KB 7KB [ 2379.672210] bio-1 1KB 7KB [ 2379.677568] pid_namespace 2KB 11KB [ 2379.683000] rpc_buffers 17KB 25KB [ 2379.688473] rpc_tasks 2KB 7KB [ 2379.693831] UNIX 258KB 258KB [ 2379.699271] tcp_bind_bucket 1KB 4KB [ 2379.704627] ip_fib_trie 23KB 47KB [ 2379.710041] ip_fib_alias 111KB 181KB [ 2379.715383] ip_dst_cache 4KB 20KB [ 2379.720822] RAW 42KB 60KB [ 2379.726186] UDP 30KB 47KB [ 2379.732138] TCP 28KB 56KB [ 2379.737502] hugetlbfs_inode_cache 3KB 15KB [ 2379.743302] fscache_cookie_jar 1KB 7KB [ 2379.748792] eventpoll_pwq 38KB 51KB [ 2379.754155] eventpoll_epi 70KB 74KB [ 2379.759569] inotify_inode_mark 32KB 43KB [ 2379.765006] request_queue 199KB 199KB [ 2379.770490] blkdev_requests 1KB 3KB [ 2379.776123] blkdev_ioc 21KB 30KB [ 2379.781507] bio-0 812KB 813KB [ 2379.786848] biovec-max 1608KB 1608KB [ 2379.792503] biovec-64 763KB 763KB [ 2379.797848] biovec-16 127KB 131KB [ 2379.803254] bio_integrity_payload 1KB 8KB [ 2379.809309] khugepaged_mm_slot 14KB 34KB [ 2379.814753] uid_cache 0KB 4KB [ 2379.820168] dmaengine-unmap-2 0KB 3KB [ 2379.825516] skbuff_fclone_cache 82KB 120KB [ 2379.831086] skbuff_head_cache 6023KB 6041KB [ 2379.836428] configfs_dir_cache 3KB 7KB [ 2379.841915] file_lock_cache 146KB 202KB [ 2379.847278] file_lock_ctx 9KB 11KB [ 2379.852647] fsnotify_mark_connector 17KB 27KB [ 2379.858569] net_namespace 52KB 52KB [ 2379.863919] shmem_inode_cache 8442KB 8574KB [ 2379.869307] task_delay_info 178KB 407KB [ 2379.875587] taskstats 64KB 99KB [ 2379.881179] proc_dir_entry 695KB 840KB [ 2379.886534] pde_opener 12KB 69KB [ 2379.891984] seq_file 325KB 460KB [ 2379.897344] sigqueue 75KB 82KB [ 2379.902744] kernfs_node_cache 18307KB 18321KB [ 2379.912011] mnt_cache 173KB 196KB [ 2379.917367] filp 5925KB 7312KB [ 2379.922806] names_cache 150433KB 150433KB [ 2379.931978] iint_cache 30KB 39KB [ 2379.937339] key_jar 4KB 7KB [ 2379.942738] uts_namespace 2KB 7KB [ 2379.951779] nsproxy 14KB 67KB [ 2379.957142] vm_area_struct 4286KB 4640KB [ 2379.962556] mm_struct 601KB 676KB [ 2379.967926] fs_cache 125KB 304KB [ 2379.977529] files_cache 463KB 720KB [ 2379.983129] signal_cache 1106KB 1653KB [ 2379.992172] sighand_cache 522KB 652KB [ 2379.997534] task_struct 6091KB 6179KB [ 2380.002944] cred_jar 1324KB 2500KB [ 2380.021772] anon_vma_chain 1533KB 1736KB [ 2380.027136] anon_vma 149KB 323KB [ 2380.051219] pid 67KB 248KB [ 2380.056585] Acpi-Operand 156KB 194KB [ 2380.084751] Acpi-ParseExt 9KB 11KB [ 2380.090190] Acpi-Parse 41KB 47KB [ 2380.095546] Acpi-State 52KB 63KB [ 2380.133269] Acpi-Namespace 20KB 27KB [ 2380.155220] numa_policy 0KB 3KB [ 2380.160742] syz-executor.4: vmalloc: allocation failure, allocated 1401339904 of 2128986112 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2380.170220] debug_objects_cache 1423KB 2143KB [ 2380.186213] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2380.194998] CPU: 1 PID: 17550 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 2380.198578] trace_event_file 297KB 298KB [ 2380.202874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2380.212044] ftrace_event_field 398KB 401KB [ 2380.217545] Call Trace: [ 2380.222999] pool_workqueue 121KB 152KB [ 2380.225548] dump_stack+0x1fc/0x2ef [ 2380.230903] page->ptl 626KB 766KB [ 2380.234490] warn_alloc.cold+0x7b/0x18f [ 2380.239878] kmalloc-2097152 2050KB 2050KB [ 2380.243786] ? zone_watermark_ok_safe+0x260/0x260 [ 2380.249137] kmalloc-524288 2056KB 2056KB [ 2380.253946] ? retint_kernel+0x2d/0x2d [ 2380.259475] kmalloc-262144 1290KB 1290KB [ 2380.263333] __vmalloc_area_node+0x4fd/0x780 [ 2380.268673] kmalloc-131072 650KB 650KB [ 2380.273045] ? __vmalloc_node_range+0x180/0x180 [ 2380.278394] kmalloc-65536 1848KB 1914KB [ 2380.283041] ? _raw_spin_unlock+0x29/0x40 [ 2380.288392] kmalloc-32768 1650KB 1650KB [ 2380.292507] ? __get_vm_area_node+0x2e2/0x3a0 [ 2380.297839] kmalloc-16384 1039KB 1039KB [ 2380.302316] __vmalloc_node_range+0xed/0x180 [ 2380.302332] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2380.302349] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2380.307683] kmalloc-8192 3984KB 3984KB [ 2380.312069] vmalloc_user+0x70/0xe0 [ 2380.312083] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2380.312099] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2380.316393] kmalloc-4096 20417KB 20455KB [ 2380.321735] __vb2_queue_alloc+0x472/0xe60 [ 2380.321763] vb2_core_create_bufs+0x273/0x7e0 [ 2380.327096] kmalloc-2048 10846KB 13610KB [ 2380.330700] ? __vb2_queue_free+0x870/0x870 [ 2380.330716] ? mutex_trylock+0x1a0/0x1a0 [ 2380.330734] ? __video_do_ioctl+0x632/0xcd0 [ 2380.335026] kmalloc-1024 5725KB 11316KB [ 2380.339158] vb2_create_bufs+0x332/0x620 [ 2380.339178] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2380.344512] kmalloc-512 14231KB 14231KB [ 2380.348726] ? __video_do_ioctl+0x632/0xcd0 [ 2380.348739] ? mutex_trylock+0x1a0/0x1a0 [ 2380.348756] ? mark_held_locks+0xf0/0xf0 [ 2380.353219] kmalloc-256 3930KB 5940KB [ 2380.358567] vb2_ioctl_create_bufs+0x20d/0x360 [ 2380.358585] ? memset+0x20/0x40 [ 2380.362878] kmalloc-128 911KB 1575KB [ 2380.366920] v4l_create_bufs+0xb2/0x160 [ 2380.371234] kmalloc-96 3314KB 4292KB [ 2380.376577] __video_do_ioctl+0x49a/0xcd0 [ 2380.380632] kmalloc-64 2332KB 3428KB [ 2380.385698] ? v4l_querycap+0x340/0x340 [ 2380.391049] kmalloc-32 1819KB 2460KB [ 2380.395337] ? __might_fault+0x192/0x1d0 [ 2380.399389] kmalloc-192 1524KB 2820KB [ 2380.403429] ? v4l_querycap+0x340/0x340 [ 2380.408783] kmem_cache 177KB 183KB [ 2380.413331] video_usercopy+0x13f/0xfa0 [ 2380.416582] Out of memory (oom_kill_allocating_task): Kill process 10280 (syz-fuzzer) score 0 or sacrifice child [ 2380.421937] ? v4l_enumstd+0x60/0x60 [ 2380.421953] ? do_futex+0x171/0x1880 [ 2380.421970] ? mark_held_locks+0xf0/0xf0 [ 2380.425980] Killed process 10122 (syz-executor.4) total-vm:48480kB, anon-rss:356kB, file-rss:4kB, shmem-rss:0kB [ 2380.431274] ? debug_check_no_obj_freed+0x201/0x490 [ 2380.431299] ? video_usercopy+0xfa0/0xfa0 [ 2380.446628] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2380.450058] v4l2_ioctl+0x147/0x1a0 [ 2380.450072] ? video_devdata+0xa0/0xa0 [ 2380.450088] do_vfs_ioctl+0xcdb/0x12e0 [ 2380.454124] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2380.459472] ? lock_downgrade+0x720/0x720 [ 2380.459488] ? check_preemption_disabled+0x41/0x280 [ 2380.459503] ? ioctl_preallocate+0x200/0x200 [ 2380.554734] ? __fget+0x356/0x510 [ 2380.558180] ? do_dup2+0x450/0x450 [ 2380.561711] ? __se_sys_futex+0x298/0x3b0 [ 2380.565857] ksys_ioctl+0x9b/0xc0 [ 2380.569300] __x64_sys_ioctl+0x6f/0xb0 [ 2380.573180] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2380.577751] do_syscall_64+0xf9/0x620 [ 2380.581557] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2380.586733] RIP: 0033:0x7fd56abe7209 [ 2380.590439] Code: Bad RIP value. [ 2380.593789] RSP: 002b:00007fd56955c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2380.601483] RAX: ffffffffffffffda RBX: 00007fd56acf9f60 RCX: 00007fd56abe7209 [ 2380.608742] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 2380.615998] RBP: 00007fd56ac41161 R08: 0000000000000000 R09: 0000000000000000 [ 2380.623257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2380.630525] R13: 00007fff49faaddf R14: 00007fd56955c300 R15: 0000000000022000 [ 2380.637801] CPU: 0 PID: 10280 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2380.645333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2380.654679] Call Trace: [ 2380.657267] dump_stack+0x1fc/0x2ef [ 2380.659860] Mem-Info: [ 2380.661762] dump_header+0x15d/0xc3f [ 2380.664167] active_anon:16855 inactive_anon:36563 isolated_anon:0 [ 2380.664167] active_file:14 inactive_file:15 isolated_file:0 [ 2380.664167] unevictable:0 dirty:1 writeback:0 unstable:0 [ 2380.664167] slab_reclaimable:14008 slab_unreclaimable:123724 [ 2380.664167] mapped:22135 shmem:38041 pagetables:565 bounce:0 [ 2380.664167] free:13916 free_pcp:208 free_cma:0 [ 2380.667864] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2380.706234] ? ___ratelimit+0x319/0x590 [ 2380.710212] oom_kill_process.cold+0x10/0x692 [ 2380.711179] Node 0 active_anon:65296kB inactive_anon:79476kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74044kB dirty:0kB writeback:0kB shmem:85068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2380.714707] ? check_preemption_disabled+0x41/0x280 [ 2380.747097] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2380.751555] Node 1 active_anon:2124kB inactive_anon:66776kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14496kB dirty:4kB writeback:0kB shmem:67096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2380.752368] out_of_memory+0x1072/0x1390 [ 2380.783567] ? oom_killer_disable+0x270/0x270 [ 2380.788063] ? mutex_trylock+0x15f/0x1a0 [ 2380.788927] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:2860kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2380.792119] __alloc_pages_nodemask+0x23a2/0x2890 [ 2380.823471] ? find_get_entry+0x4cd/0x8a0 [ 2380.827624] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2380.828581] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2380.832480] alloc_pages_current+0x193/0x2a0 [ 2380.837449] Node 0 DMA32 free:17852kB min:35996kB low:44992kB high:53988kB active_anon:65172kB inactive_anon:76616kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7264kB pagetables:1900kB bounce:0kB free_pcp:800kB local_pcp:668kB free_cma:0kB [ 2380.841843] filemap_fault+0x146e/0x2180 [ 2380.841869] ext4_filemap_fault+0x84/0xb0 [ 2380.841884] __do_fault+0x10b/0x4b0 [ 2380.841900] __handle_mm_fault+0x273b/0x41c0 [ 2380.841922] ? do_signal+0x49d/0x1670 [ 2380.880620] lowmem_reserve[]: 0 0 1 1 1 [ 2380.882398] ? vm_insert_page+0x9c0/0x9c0 [ 2380.886779] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2380.890577] ? check_preemption_disabled+0x41/0x280 [ 2380.890596] handle_mm_fault+0x436/0xb10 [ 2380.890616] __do_page_fault+0x68e/0xd60 [ 2380.890635] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2380.890648] ? spurious_fault+0x840/0x840 [ 2380.890664] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2380.903904] lowmem_reserve[]: 0 0 0 0 0 [ 2380.924576] ? page_fault+0x8/0x30 [ 2380.924591] page_fault+0x1e/0x30 [ 2380.924602] RIP: 0033:0x4665e0 [ 2380.924615] Code: Bad RIP value. [ 2380.924622] RSP: 002b:000000c0065d5ab8 EFLAGS: 00010202 [ 2380.924632] RAX: 0000000000000000 RBX: 000000c000020800 RCX: 000000000049e02a [ 2380.924641] RDX: 000000c0065d5ac0 RSI: 000000c0065d5bf0 RDI: 0000000000000011 [ 2380.924647] RBP: 000000c00002ae98 R08: 0000000000000000 R09: 0000000000000000 [ 2380.924655] R10: 0000000001000004 R11: 0000000000000202 R12: 000000c00002ae38 [ 2380.924661] R13: 0000000000000000 R14: 000000c000255380 R15: 0000000000000000 [ 2380.937273] syz-executor.3: vmalloc: allocation failure, allocated 275603456 of 2128986112 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2380.955669] Node 1 Normal free:26932kB min:53876kB low:67344kB high:80812kB active_anon:2100kB inactive_anon:66776kB active_file:12kB inactive_file:92kB unevictable:0kB writepending:4kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:360kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 2380.969187] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2380.986641] lowmem_reserve[]: 0 0 0 0 0 [ 2381.034578] CPU: 0 PID: 17575 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2381.072529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2381.081877] Call Trace: [ 2381.084466] dump_stack+0x1fc/0x2ef [ 2381.084651] Node 0 DMA: 2*4kB (UE) 4*8kB (UME) 3*16kB (M) 5*32kB (UME) 4*64kB (UME) 9*128kB (UME) 6*256kB (UME) 5*512kB (UME) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 10872kB [ 2381.088090] warn_alloc.cold+0x7b/0x18f [ 2381.088109] ? zone_watermark_ok_safe+0x260/0x260 [ 2381.088126] ? retint_kernel+0x2d/0x2d [ 2381.088149] ? alloc_pages_current+0x14a/0x2a0 [ 2381.088172] __vmalloc_area_node+0x4fd/0x780 [ 2381.088192] ? __vmalloc_node_range+0x180/0x180 [ 2381.123020] Node 0 DMA32: 624*4kB (ME) 495*8kB (UME) 318*16kB (UME) 120*32kB (UME) 46*64kB (UME) 10*128kB (UM) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20120kB [ 2381.125203] ? _raw_spin_unlock+0x29/0x40 [ 2381.147087] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2381.149139] ? __get_vm_area_node+0x2e2/0x3a0 [ 2381.149161] __vmalloc_node_range+0xed/0x180 [ 2381.149178] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2381.149195] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2381.149209] vmalloc_user+0x70/0xe0 [ 2381.149230] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2381.179376] Node 1 Normal: 344*4kB (UME) 222*8kB (ME) 114*16kB (ME) 37*32kB (UME) 3*64kB (M) 1*128kB (E) 2*256kB (UM) 1*512kB (U) 3*1024kB (UE) 4*2048kB (U) 2*4096kB (U) = 26960kB [ 2381.182345] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2381.186641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2381.202751] __vb2_queue_alloc+0x472/0xe60 [ 2381.202777] vb2_core_create_bufs+0x273/0x7e0 [ 2381.202792] ? __vb2_queue_free+0x870/0x870 [ 2381.202809] ? mutex_trylock+0x1a0/0x1a0 [ 2381.202825] ? __video_do_ioctl+0x632/0xcd0 [ 2381.202845] vb2_create_bufs+0x332/0x620 [ 2381.202862] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2381.202876] ? __video_do_ioctl+0x632/0xcd0 [ 2381.202889] ? mutex_trylock+0x1a0/0x1a0 [ 2381.202904] ? mark_held_locks+0xf0/0xf0 [ 2381.202923] vb2_ioctl_create_bufs+0x20d/0x360 [ 2381.202939] ? memset+0x20/0x40 [ 2381.226414] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2381.228879] v4l_create_bufs+0xb2/0x160 [ 2381.228897] __video_do_ioctl+0x49a/0xcd0 [ 2381.228920] ? v4l_querycap+0x340/0x340 [ 2381.228939] ? __might_fault+0x192/0x1d0 [ 2381.228957] ? v4l_querycap+0x340/0x340 [ 2381.237402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2381.241364] video_usercopy+0x13f/0xfa0 [ 2381.241386] ? v4l_enumstd+0x60/0x60 [ 2381.241400] ? do_futex+0x171/0x1880 [ 2381.241418] ? mark_held_locks+0xf0/0xf0 [ 2381.241438] ? debug_check_no_obj_freed+0x201/0x490 [ 2381.241460] ? video_usercopy+0xfa0/0xfa0 [ 2381.261663] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2381.263476] v4l2_ioctl+0x147/0x1a0 [ 2381.266813] 38070 total pagecache pages [ 2381.275378] ? video_devdata+0xa0/0xa0 [ 2381.275394] do_vfs_ioctl+0xcdb/0x12e0 [ 2381.275410] ? lock_downgrade+0x720/0x720 [ 2381.275426] ? check_preemption_disabled+0x41/0x280 [ 2381.275440] ? ioctl_preallocate+0x200/0x200 [ 2381.275457] ? __fget+0x356/0x510 [ 2381.295404] 0 pages in swap cache [ 2381.295494] ? do_dup2+0x450/0x450 [ 2381.304358] Swap cache stats: add 0, delete 0, find 0/0 [ 2381.308291] ? __se_sys_futex+0x298/0x3b0 [ 2381.308314] ksys_ioctl+0x9b/0xc0 [ 2381.308331] __x64_sys_ioctl+0x6f/0xb0 [ 2381.308345] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2381.308357] do_syscall_64+0xf9/0x620 [ 2381.308375] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2381.308385] RIP: 0033:0x7f3666b91209 [ 2381.308399] Code: Bad RIP value. [ 2381.308406] RSP: 002b:00007f3665506168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2381.308417] RAX: ffffffffffffffda RBX: 00007f3666ca3f60 RCX: 00007f3666b91209 [ 2381.308425] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 2381.308433] RBP: 00007f3666beb161 R08: 0000000000000000 R09: 0000000000000000 [ 2381.308441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2381.308450] R13: 00007fffd759f56f R14: 00007f3665506300 R15: 0000000000022000 [ 2381.321354] Bluetooth: hci1: command 0x0c1a tx timeout [ 2381.347659] Free swap = 0kB [ 2381.357089] Mem-Info: [ 2381.478521] Total swap = 0kB [ 2381.481544] 2097051 pages RAM [ 2381.484637] 0 pages HighMem/MovableOnly [ 2381.492258] 369649 pages reserved [ 2381.495705] 0 pages cma reserved [ 2381.660481] active_anon:16818 inactive_anon:36563 isolated_anon:0 [ 2381.660481] active_file:15 inactive_file:14 isolated_file:0 [ 2381.660481] unevictable:0 dirty:3 writeback:1 unstable:0 [ 2381.660481] slab_reclaimable:14008 slab_unreclaimable:123357 [ 2381.660481] mapped:22135 shmem:38041 pagetables:540 bounce:0 [ 2381.660481] free:14468 free_pcp:23 free_cma:0 [ 2381.721988] Node 0 active_anon:65172kB inactive_anon:79476kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74044kB dirty:4kB writeback:0kB shmem:85068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2381.777170] Node 1 active_anon:2100kB inactive_anon:66776kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14496kB dirty:8kB writeback:4kB shmem:67096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2381.833691] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:2860kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2381.888471] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2381.893511] Node 0 DMA32 free:20120kB min:35996kB low:44992kB high:53988kB active_anon:65048kB inactive_anon:76616kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:4kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7264kB pagetables:1800kB bounce:0kB free_pcp:40kB local_pcp:40kB free_cma:0kB [ 2381.955161] lowmem_reserve[]: 0 0 1 1 1 [ 2381.977096] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2382.022944] lowmem_reserve[]: 0 0 0 0 0 [ 2382.029452] Node 1 Normal free:26960kB min:53876kB low:67344kB high:80812kB active_anon:2100kB inactive_anon:66776kB active_file:60kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:360kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2382.073833] lowmem_reserve[]: 0 0 0 0 0 [ 2382.091672] Node 0 DMA: 2*4kB (UE) 4*8kB (UME) 3*16kB (M) 5*32kB (UME) 4*64kB (UME) 9*128kB (UME) 6*256kB (UME) 5*512kB (UME) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 10872kB [ 2382.185759] Node 0 DMA32: 625*4kB (UME) 463*8kB (UME) 318*16kB (UME) 120*32kB (UME) 46*64kB (UME) 10*128kB (UM) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19868kB [ 2382.219004] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2382.285721] Node 1 Normal: 344*4kB (UME) 222*8kB (ME) 114*16kB (ME) 37*32kB (UME) 3*64kB (M) 1*128kB (E) 2*256kB (UM) 1*512kB (U) 3*1024kB (UE) 4*2048kB (U) 2*4096kB (U) = 26960kB [ 2382.355683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2382.391385] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2382.442896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2382.475834] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2382.535832] 38069 total pagecache pages [ 2382.539854] 0 pages in swap cache [ 2382.543300] Swap cache stats: add 0, delete 0, find 0/0 [ 2382.595833] Free swap = 0kB [ 2382.598908] Total swap = 0kB [ 2382.601917] 2097051 pages RAM [ 2382.605010] 0 pages HighMem/MovableOnly [ 2382.655597] 369649 pages reserved [ 2382.659112] 0 pages cma reserved [ 2382.662474] Unreclaimable slab info: [ 2382.666202] Name Used Total [ 2382.692906] pid_2 52KB 100KB [ 2382.702096] batadv_tl_cache 4KB 12KB [ 2382.707480] TIPC 15KB 30KB [ 2382.730793] SCTPv6 14KB 18KB [ 2382.736166] SCTP 9KB 11KB [ 2382.741563] DCCPv6 17KB 37KB [ 2382.746925] DCCP 16KB 28KB [ 2382.770043] RXRPC 11KB 19KB [ 2382.775410] rxrpc_call_jar 78KB 94KB [ 2382.780834] bridge_fdb_cache 9KB 23KB [ 2382.786200] fib6_nodes 156KB 252KB [ 2382.809259] ip6_dst_cache 69KB 420KB [ 2382.814628] RAWv6 75KB 87KB [ 2382.844658] UDPv6 26KB 41KB [ 2382.875809] TCPv6 27KB 36KB [ 2382.884777] nf_conntrack 1KB 7KB [ 2382.923856] t10_alua_lu_gp_cache 0KB 3KB [ 2382.931047] sd_ext_cdb 0KB 7KB [ 2382.947139] scsi_sense_cache 1056KB 1060KB [ 2382.960372] virtio_scsi_cmd 16KB 16KB [ 2383.000809] sgpool-128 8KB 8KB [ 2383.006528] sgpool-64 4KB 12KB [ 2383.055151] sgpool-32 2KB 15KB [ 2383.060727] sgpool-16 1KB 7KB [ 2383.066091] sgpool-8 0KB 7KB [ 2383.092665] mqueue_inode_cache 10KB 22KB [ 2383.107937] bio_post_read_ctx 14KB 15KB [ 2383.113375] bio-2 14KB 15KB [ 2383.131447] jfs_mp 7KB 7KB [ 2383.137423] cifs_small_rq 15KB 16KB [ 2383.148309] cifs_request 67KB 67KB [ 2383.182690] cifs_mpx_ids 0KB 7KB [ 2383.213196] nfs_commit_data 3KB 14KB [ 2383.232775] nfs_write_data 34KB 44KB [ 2383.252479] ext4_system_zone 1KB 7KB [ 2383.277850] bio-1 1KB 7KB [ 2383.283224] pid_namespace 2KB 11KB [ 2383.301444] rpc_buffers 17KB 25KB [ 2383.332399] rpc_tasks 2KB 7KB [ 2383.340126] UNIX 256KB 258KB [ 2383.345497] tcp_bind_bucket 1KB 4KB [ 2383.365688] ip_fib_trie 23KB 47KB [ 2383.392719] ip_fib_alias 111KB 181KB [ 2383.398143] ip_dst_cache 4KB 20KB [ 2383.403658] RAW 42KB 60KB [ 2383.413950] UDP 30KB 47KB [ 2383.419364] TCP 47KB 56KB [ 2383.447893] hugetlbfs_inode_cache 3KB 15KB [ 2383.453610] fscache_cookie_jar 1KB 7KB [ 2383.465244] eventpoll_pwq 41KB 51KB [ 2383.470679] eventpoll_epi 69KB 74KB [ 2383.502809] inotify_inode_mark 30KB 43KB [ 2383.508550] request_queue 199KB 199KB [ 2383.513919] blkdev_requests 1KB 3KB [ 2383.542450] blkdev_ioc 18KB 30KB [ 2383.548485] bio-0 936KB 937KB [ 2383.553850] biovec-max 1608KB 1608KB [ 2383.582443] biovec-64 865KB 866KB [ 2383.587894] biovec-16 139KB 142KB [ 2383.593400] bio_integrity_payload 1KB 8KB [ 2383.622547] khugepaged_mm_slot 14KB 34KB [ 2383.629019] uid_cache 0KB 4KB [ 2383.634384] dmaengine-unmap-2 0KB 3KB [ 2383.662420] skbuff_fclone_cache 80KB 120KB [ 2383.682915] skbuff_head_cache 5996KB 6210KB [ 2383.689236] configfs_dir_cache 3KB 7KB [ 2383.694689] file_lock_cache 152KB 202KB [ 2383.722508] file_lock_ctx 9KB 11KB [ 2383.727943] fsnotify_mark_connector 16KB 27KB [ 2383.742910] net_namespace 52KB 52KB [ 2383.762547] shmem_inode_cache 8436KB 8574KB [ 2383.768724] task_delay_info 173KB 407KB [ 2383.774091] taskstats 62KB 99KB [ 2383.802417] proc_dir_entry 695KB 840KB [ 2383.807956] pde_opener 12KB 69KB [ 2383.822686] seq_file 326KB 460KB [ 2383.842593] sigqueue 75KB 82KB [ 2383.848016] kernfs_node_cache 18301KB 18321KB [ 2383.862681] mnt_cache 173KB 196KB [ 2383.882949] filp 5992KB 7308KB [ 2383.902924] names_cache 153807KB 153807KB [ 2383.908362] iint_cache 29KB 39KB [ 2383.922626] key_jar 4KB 7KB [ 2383.928058] uts_namespace 2KB 7KB [ 2383.942564] nsproxy 14KB 67KB [ 2383.947994] vm_area_struct 3647KB 4532KB [ 2383.972975] mm_struct 591KB 676KB [ 2383.978617] fs_cache 119KB 304KB [ 2383.983981] files_cache 455KB 716KB [ 2384.012911] signal_cache 1098KB 1653KB [ 2384.019022] sighand_cache 513KB 652KB [ 2384.024390] task_struct 5207KB 5296KB [ 2384.052660] cred_jar 1603KB 2500KB [ 2384.058086] anon_vma_chain 1344KB 1732KB [ 2384.072541] anon_vma 138KB 323KB [ 2384.092804] pid 66KB 248KB [ 2384.098222] Acpi-Operand 156KB 194KB [ 2384.112403] Acpi-ParseExt 9KB 11KB [ 2384.117845] Acpi-Parse 41KB 47KB [ 2384.133092] Acpi-State 52KB 63KB [ 2384.138532] Acpi-Namespace 20KB 27KB [ 2384.172391] numa_policy 0KB 3KB [ 2384.178766] debug_objects_cache 1423KB 2143KB [ 2384.184303] trace_event_file 297KB 298KB [ 2384.207941] ftrace_event_field 398KB 401KB [ 2384.213403] pool_workqueue 121KB 152KB [ 2384.232743] page->ptl 544KB 766KB [ 2384.247752] kmalloc-2097152 2050KB 2050KB [ 2384.253152] kmalloc-524288 2056KB 2056KB [ 2384.267745] kmalloc-262144 1290KB 1290KB [ 2384.273142] kmalloc-131072 650KB 650KB [ 2384.287756] kmalloc-65536 1848KB 1914KB [ 2384.293156] kmalloc-32768 1650KB 1650KB [ 2384.307775] kmalloc-16384 1039KB 1039KB [ 2384.313154] kmalloc-8192 3984KB 3984KB [ 2384.322645] kmalloc-4096 18972KB 19010KB [ 2384.337725] kmalloc-2048 10831KB 13597KB [ 2384.343122] kmalloc-1024 5752KB 11316KB [ 2384.357778] kmalloc-512 13136KB 14501KB [ 2384.363144] kmalloc-256 3930KB 5940KB [ 2384.377864] kmalloc-128 907KB 1575KB [ 2384.384887] kmalloc-96 3284KB 4292KB [ 2384.402728] kmalloc-64 2272KB 3428KB [ 2384.417719] kmalloc-32 1778KB 2460KB [ 2384.423117] kmalloc-192 1517KB 2820KB [ 2384.437919] kmem_cache 177KB 183KB [ 2384.441490] systemd[1]: Started Journal Service. [ 2384.443280] Out of memory (oom_kill_allocating_task): Kill process 10280 (syz-fuzzer) score 0 or sacrifice child [ 2384.477802] Killed process 10119 (syz-executor.5) total-vm:48480kB, anon-rss:356kB, file-rss:4kB, shmem-rss:0kB [ 2385.201952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2385.218078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2385.230697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2385.237390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2385.269772] device bridge_slave_1 left promiscuous mode [ 2385.275272] bridge0: port 2(bridge_slave_1) entered disabled state [ 2385.298483] device bridge_slave_0 left promiscuous mode [ 2385.303966] bridge0: port 1(bridge_slave_0) entered disabled state [ 2385.328153] device veth1_macvtap left promiscuous mode [ 2385.333456] device veth0_macvtap left promiscuous mode [ 2385.339655] device veth1_vlan left promiscuous mode [ 2385.344856] device veth0_vlan left promiscuous mode [ 2385.499371] device hsr_slave_1 left promiscuous mode [ 2385.510041] device hsr_slave_0 left promiscuous mode [ 2385.549250] team0 (unregistering): Port device team_slave_1 removed [ 2385.571386] team0 (unregistering): Port device team_slave_0 removed [ 2385.592009] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2385.609553] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2385.671310] bond0 (unregistering): Released all slaves 06:34:08 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x762d, 0x2) r1 = socket(0x25, 0xa, 0x20) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async, rerun: 32) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, 0x0) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000600)={&(0x7f00000001c0)={{@local, 0x2}, {@any, 0x9}, 0x400, "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"}, 0x418, 0xe71}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) r3 = socket(0x2, 0x4, 0x4929) sendmsg$can_raw(r3, &(0x7f0000000700)={&(0x7f0000000640), 0x10, &(0x7f00000006c0)={&(0x7f0000000680)=@can={{0x0, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "a3e0b04bb3392154"}, 0x10}, 0x1, 0x0, 0x0, 0x4008890}, 0x40850) 06:34:08 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000001c0)={0x5, @vbi={0x1f, 0x5, 0x7, 0x32315559, [0x3, 0xffff020e], [0x2, 0x374e], 0x13a}}) 06:34:08 executing program 5: socket(0x2, 0x2, 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000080)={0x15}) 06:34:08 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000001c0)={0x5, @vbi={0x1f, 0x5, 0x7, 0x32315559, [0x3, 0xffff020e], [0x2, 0x374e], 0x13a}}) syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000001c0)={0x5, @vbi={0x1f, 0x5, 0x7, 0x32315559, [0x3, 0xffff020e], [0x2, 0x374e], 0x13a}}) (async) 06:34:08 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="fe5590b20d6c5e422114a7db13025c96", 0x10) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) gettid() [ 2387.725303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2387.745358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2387.771978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2387.788053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2387.804400] device bridge_slave_1 left promiscuous mode [ 2387.816878] bridge0: port 2(bridge_slave_1) entered disabled state [ 2387.832242] device bridge_slave_0 left promiscuous mode [ 2387.837927] bridge0: port 1(bridge_slave_0) entered disabled state [ 2387.849006] device veth1_macvtap left promiscuous mode [ 2387.861686] device veth0_macvtap left promiscuous mode [ 2387.875809] device veth1_vlan left promiscuous mode [ 2387.891726] device veth0_vlan left promiscuous mode [ 2388.144716] device hsr_slave_1 left promiscuous mode [ 2388.164574] device hsr_slave_0 left promiscuous mode [ 2388.198819] team0 (unregistering): Port device team_slave_1 removed [ 2388.235777] team0 (unregistering): Port device team_slave_0 removed [ 2388.259098] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2388.283120] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2388.370375] bond0 (unregistering): Released all slaves [ 2389.751640] IPVS: ftp: loaded support on port[0] = 21 [ 2389.873892] IPVS: ftp: loaded support on port[0] = 21 [ 2389.884967] IPVS: ftp: loaded support on port[0] = 21 [ 2390.346750] chnl_net:caif_netlink_parms(): no params data found [ 2390.499994] chnl_net:caif_netlink_parms(): no params data found [ 2390.551569] chnl_net:caif_netlink_parms(): no params data found [ 2390.774885] bridge0: port 1(bridge_slave_0) entered blocking state [ 2390.797342] bridge0: port 1(bridge_slave_0) entered disabled state [ 2390.804761] device bridge_slave_0 entered promiscuous mode [ 2390.854526] bridge0: port 1(bridge_slave_0) entered blocking state [ 2390.887633] bridge0: port 1(bridge_slave_0) entered disabled state [ 2390.902809] device bridge_slave_0 entered promiscuous mode [ 2390.918079] bridge0: port 2(bridge_slave_1) entered blocking state [ 2390.924457] bridge0: port 2(bridge_slave_1) entered disabled state [ 2390.948395] device bridge_slave_1 entered promiscuous mode [ 2390.963040] bridge0: port 1(bridge_slave_0) entered blocking state [ 2390.969600] bridge0: port 1(bridge_slave_0) entered disabled state [ 2390.991208] device bridge_slave_0 entered promiscuous mode [ 2391.006164] bridge0: port 2(bridge_slave_1) entered blocking state [ 2391.013460] bridge0: port 2(bridge_slave_1) entered disabled state [ 2391.026884] device bridge_slave_1 entered promiscuous mode [ 2391.045836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2391.059244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2391.071981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2391.080259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2391.092938] device bridge_slave_1 left promiscuous mode [ 2391.107352] bridge0: port 2(bridge_slave_1) entered disabled state [ 2391.114776] device bridge_slave_0 left promiscuous mode [ 2391.143321] bridge0: port 1(bridge_slave_0) entered disabled state [ 2391.166160] device veth1_macvtap left promiscuous mode [ 2391.171604] device veth0_macvtap left promiscuous mode [ 2391.176923] device veth1_vlan left promiscuous mode [ 2391.202177] device veth0_vlan left promiscuous mode [ 2391.451216] device hsr_slave_1 left promiscuous mode [ 2391.470809] device hsr_slave_0 left promiscuous mode [ 2391.525035] team0 (unregistering): Port device team_slave_1 removed [ 2391.535960] team0 (unregistering): Port device team_slave_0 removed [ 2391.552738] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2391.571014] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2391.620280] bond0 (unregistering): Released all slaves [ 2391.641672] bridge0: port 2(bridge_slave_1) entered blocking state [ 2391.655649] bridge0: port 2(bridge_slave_1) entered disabled state [ 2391.664000] device bridge_slave_1 entered promiscuous mode [ 2391.698863] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2391.710339] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2391.763598] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2391.786930] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2391.807302] Bluetooth: hci0: command 0x0409 tx timeout [ 2391.808949] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2391.827598] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2391.835122] team0: Port device team_slave_0 added [ 2391.849202] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2391.864908] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2391.878274] team0: Port device team_slave_1 added [ 2391.887401] Bluetooth: hci3: command 0x0409 tx timeout [ 2391.888167] Bluetooth: hci1: command 0x0409 tx timeout [ 2391.902196] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2391.923547] team0: Port device team_slave_0 added [ 2391.974814] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2391.983509] team0: Port device team_slave_1 added [ 2391.997748] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2392.005349] team0: Port device team_slave_0 added [ 2392.032783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2392.039921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2392.102013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2392.134328] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2392.149177] team0: Port device team_slave_1 added [ 2392.172798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2392.187504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2392.257926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2392.292345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2392.300060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2392.358749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2392.397380] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2392.404997] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2392.432270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2392.440051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2392.511735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2392.574556] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2392.583149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2392.594725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2392.661871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2392.830391] device hsr_slave_0 entered promiscuous mode [ 2392.848332] device hsr_slave_1 entered promiscuous mode [ 2392.887569] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2392.895539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2392.908177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2392.990655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2393.041670] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2393.063810] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2393.093405] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2393.147874] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2393.158609] device hsr_slave_0 entered promiscuous mode [ 2393.182334] device hsr_slave_1 entered promiscuous mode [ 2393.207861] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2393.258403] device hsr_slave_0 entered promiscuous mode [ 2393.272192] device hsr_slave_1 entered promiscuous mode [ 2393.308498] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2393.334234] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2393.373676] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2393.600941] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2393.694407] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2393.788751] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2393.805042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2393.838010] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2393.887127] Bluetooth: hci0: command 0x041b tx timeout [ 2393.891877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2393.919707] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2393.928474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2393.935647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2393.967121] Bluetooth: hci1: command 0x041b tx timeout [ 2393.969699] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2393.972517] Bluetooth: hci3: command 0x041b tx timeout [ 2393.989363] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2393.995825] 8021q: adding VLAN 0 to HW filter on device team0 [ 2394.010966] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2394.022375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2394.031163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2394.046309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2394.062401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2394.073136] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2394.085346] 8021q: adding VLAN 0 to HW filter on device team0 [ 2394.093154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2394.105751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2394.116233] bridge0: port 1(bridge_slave_0) entered blocking state [ 2394.122844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2394.139571] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2394.155514] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2394.164952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2394.179001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2394.186513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2394.200837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2394.214282] bridge0: port 2(bridge_slave_1) entered blocking state [ 2394.220701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2394.233785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2394.242432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2394.255452] bridge0: port 1(bridge_slave_0) entered blocking state [ 2394.261858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2394.276754] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2394.293236] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2394.309550] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2394.323326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2394.331592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2394.344672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2394.352681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2394.382804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2394.391550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2394.407372] bridge0: port 2(bridge_slave_1) entered blocking state [ 2394.413768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2394.444498] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2394.474940] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2394.482869] 8021q: adding VLAN 0 to HW filter on device team0 [ 2394.494025] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2394.502032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2394.528277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2394.538931] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2394.549342] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2394.560733] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2394.568271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2394.576178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2394.597635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2394.605512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2394.627750] bridge0: port 1(bridge_slave_0) entered blocking state [ 2394.634113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2394.657521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2394.668231] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2394.688057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2394.696731] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2394.718504] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2394.726265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2394.736300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2394.749032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2394.761974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2394.772633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2394.786186] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2394.795628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2394.809242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2394.816954] bridge0: port 2(bridge_slave_1) entered blocking state [ 2394.823333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2394.832912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2394.841630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2394.850765] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2394.861017] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2394.871844] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2394.881931] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2394.890287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2394.899415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2394.907982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2394.915515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2394.924407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2394.937632] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2394.947623] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2394.961938] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2394.973165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2394.985346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2394.996212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2395.011737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2395.020255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2395.036078] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2395.043388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2395.058299] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2395.073948] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2395.083622] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2395.097425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2395.104972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2395.119403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2395.132495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2395.142056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2395.162317] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2395.181768] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2395.194014] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2395.202927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2395.216024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2395.257172] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2395.265865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2395.280433] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2395.287885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2395.295513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2395.309779] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2395.316490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2395.331650] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2395.343745] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2395.354386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2395.373053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2395.381843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2395.392947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2395.406467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2395.436593] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2395.489158] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2395.501608] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2395.531914] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2395.547517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2395.554271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2395.577841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2395.587203] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2395.594791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2395.617555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2395.658904] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2395.666605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2395.693521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2395.725533] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2395.751099] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready 06:34:16 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="fe5590b20d6c5e422114a7db13025c96", 0x10) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) gettid() [ 2395.768834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2395.776818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2395.860342] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2395.883785] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2395.898159] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2395.920666] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2395.940566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2395.953005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2395.967077] Bluetooth: hci0: command 0x040f tx timeout [ 2395.973070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2395.989704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2396.008654] device veth0_vlan entered promiscuous mode [ 2396.021946] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2396.045512] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2396.047057] Bluetooth: hci3: command 0x040f tx timeout [ 2396.065326] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2396.069039] Bluetooth: hci1: command 0x040f tx timeout [ 2396.084102] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2396.095816] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2396.107841] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2396.121267] device veth1_vlan entered promiscuous mode [ 2396.137683] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2396.153299] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2396.164633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2396.177229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2396.185936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2396.206624] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2396.224727] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2396.248852] device veth0_vlan entered promiscuous mode [ 2396.262965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2396.271223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2396.283827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2396.292659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2396.307096] device veth0_vlan entered promiscuous mode [ 2396.319417] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2396.335028] device veth1_vlan entered promiscuous mode [ 2396.342493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2396.354773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2396.363332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2396.377748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2396.387274] device veth0_macvtap entered promiscuous mode [ 2396.393712] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2396.405749] device veth1_vlan entered promiscuous mode [ 2396.412804] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2396.433685] device veth1_macvtap entered promiscuous mode [ 2396.445668] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2396.470495] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2396.485936] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2396.496334] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2396.515151] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2396.529861] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2396.550969] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2396.562443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2396.572736] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2396.584247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2396.592523] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2396.604093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2396.614616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2396.636860] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2396.658013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2396.669301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2396.684998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2396.700831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2396.721421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2396.731879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2396.741347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2396.751461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2396.762480] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2396.771465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2396.788341] device veth0_macvtap entered promiscuous mode [ 2396.794891] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2396.803356] device veth0_macvtap entered promiscuous mode [ 2396.810668] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2396.827084] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2396.835631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2396.856282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2396.882123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2396.905655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2396.936874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2396.946003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2396.966814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2397.001671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2397.021548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2397.060462] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2397.075368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2397.098792] device veth1_macvtap entered promiscuous mode [ 2397.106285] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2397.125945] device veth1_macvtap entered promiscuous mode [ 2397.138489] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2397.154075] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2397.162721] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2397.182026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2397.198837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2397.225373] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2397.239413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2397.266264] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2397.289820] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2397.301099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2397.313251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2397.327570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2397.345215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2397.355203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2397.372465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2397.383715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2397.400808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 06:34:18 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="fe5590b20d6c5e422114a7db13025c96", 0x10) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) gettid() [ 2397.417395] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2397.424473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2397.438890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2397.453181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2397.468117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2397.483501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2397.498213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2397.512472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2397.521699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2397.536154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2397.545402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2397.560911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2397.574681] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2397.585638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2397.594423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2397.608880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2397.621410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2397.630634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2397.644909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2397.661102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2397.670902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2397.695248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2397.726888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2397.736611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2397.764565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2397.796762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2397.814869] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2397.826821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2397.835518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2397.857241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2397.886299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2397.923319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2397.944854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2397.972049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2397.996784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2398.006508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2398.036752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2398.046477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2398.056821] Bluetooth: hci0: command 0x0419 tx timeout [ 2398.088525] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2398.095451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2398.115308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2398.127439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2398.135475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2398.157840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2398.187057] Bluetooth: hci1: command 0x0419 tx timeout [ 2398.218182] Bluetooth: hci3: command 0x0419 tx timeout [ 2398.577589] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2398.601826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2398.618254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2398.625031] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2398.711024] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2398.746014] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2398.767597] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2398.774457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2398.776842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2398.798267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2398.806011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2398.827251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2398.842309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2398.856181] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2398.860675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2398.881315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2398.900063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2398.910441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2398.919506] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2398.933768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2398.947377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2398.969059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2398.979845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2399.000503] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:34:20 executing program 5: socket(0x2, 0x2, 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000080)={0x15}) socket(0x2, 0x2, 0x4) (async) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000080)={0x15}) (async) 06:34:20 executing program 5: socket(0x2, 0x2, 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000080)={0x15}) 06:34:21 executing program 1: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 06:34:21 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000840)={&(0x7f0000000000), 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_AF={0x6}]}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x40801}, 0x4) 06:34:21 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000840)={&(0x7f0000000000), 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_AF={0x6}]}]}, 0x2c}}, 0x0) (async) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x40801}, 0x4) 06:34:21 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000840)={&(0x7f0000000000), 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_AF={0x6}]}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf251100000008000600ffff00001c00028008000800030000000800090002000000060002004e2000005c0001800c0007001200000004000000060004004e21000008000500010000000800080069a80000060004004e220000060001000200000014000300fe8000000000000000000000000000bb060004004e2300000800090005000000340003801400020064756d6d79300000000000000000000014000600fc000000000000000000000000000001060007004e2000001400028006000f0002000000080003000200000008000400090000001c000180080005000400000008000500010000000800090022000000"], 0x100}, 0x1, 0x0, 0x0, 0x40801}, 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000840)={&(0x7f0000000000), 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_AF={0x6}]}]}, 0x2c}}, 0x0) (async) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x40801}, 0x4) (async) [ 2401.012879] Bluetooth: hci0: command 0x0c1a tx timeout [ 2402.526461] Bluetooth: hci1: command 0x0c1a tx timeout [ 2403.086396] Bluetooth: hci0: command 0x0c1a tx timeout [ 2405.166265] Bluetooth: hci0: command 0x0c1a tx timeout [ 2407.088134] ieee802154 phy0 wpan0: encryption failed: -22 [ 2407.093736] ieee802154 phy1 wpan1: encryption failed: -22 06:34:28 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x762d, 0x2) (async) r1 = socket(0x25, 0xa, 0x20) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, 0x0) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000600)={&(0x7f00000001c0)={{@local, 0x2}, {@any, 0x9}, 0x400, "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"}, 0x418, 0xe71}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) r3 = socket(0x2, 0x4, 0x4929) sendmsg$can_raw(r3, &(0x7f0000000700)={&(0x7f0000000640), 0x10, &(0x7f00000006c0)={&(0x7f0000000680)=@can={{0x0, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "a3e0b04bb3392154"}, 0x10}, 0x1, 0x0, 0x0, 0x4008890}, 0x40850) 06:34:28 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000001c0)={0x5, @vbi={0x1f, 0x5, 0x7, 0x32315559, [0x3, 0xffff020e], [0x2, 0x374e], 0x13a}}) 06:34:28 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x4, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:34:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x400, @rand_addr=' \x01\x00', 0x10001}}, 0x0, 0x0, 0x2c, 0x0, "1a93037d7a2398c34342819172e0f46f634cdf3b07e7ca3b2d77f21e1384df082bea59bb053b84e5624b77cd25a366f29fd0ca7bee555492bf7c2ad54dedba043ca1203f9842bdc7a1a5ef8470dde260"}, 0xd8) 06:34:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async, rerun: 32) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="fe5590b20d6c5e422114a7db13025c96", 0x10) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) gettid() 06:34:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/182, 0xb6, 0x0, &(0x7f0000000100)=""/50, 0x32}, &(0x7f0000000180)=0x40) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='cdg\x00', 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f00000001c0), &(0x7f0000000200)=0x4) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000240)={0xfffffff8, 0xffffff00, 0x400, 0x60, 0x107}, 0x14) 06:34:28 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x4, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:34:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/182, 0xb6, 0x0, &(0x7f0000000100)=""/50, 0x32}, &(0x7f0000000180)=0x40) (async) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100)) (async, rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='cdg\x00', 0x4) (async, rerun: 64) getsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f00000001c0), &(0x7f0000000200)=0x4) socket$can_raw(0x1d, 0x3, 0x1) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000240)={0xfffffff8, 0xffffff00, 0x400, 0x60, 0x107}, 0x14) 06:34:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="58856a96be24f6d95db2de839fc6be26b1c2b6de7638d9ff05651b99189504ade74812fcc5732fc987db9b4784edac52b3a9030588121a17b9cd55bd3cdb661bd0153c64a948cd238fccff8b2bed688545093734b35df122575d5fcede75596472edbf310d964315289a8a7711d2735b988779de85753d70c29b5f0a47abcc8ad2fedf8e0f1a601894a8d6b3b4b231a8e993039ff631101a08d7afd4da4e585cb6e95ce1c55464") 06:34:28 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x4, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:34:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f00000001c0)={0x0, 0xf6b, 0x2, '\x00', &(0x7f0000000080)=0x3f}) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000200)={0x2, "5af54295907a91db538c379c492d8ae085ba6cef5ad5cb890eef1cb676bc4cef", 0x1, 0x20, 0x1, 0xc54, 0x4, 0x2, 0x6, 0x7}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:34:28 executing program 1: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x4, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) [ 2411.574551] oom_reaper: reaped process 18531 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2411.596076] oom_reaper: reaped process 18525 (syz-executor.2), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 2411.618276] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2411.637573] oom_reaper: reaped process 18541 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 2411.652390] in:imklog cpuset=/ mems_allowed=0-1 [ 2411.662314] CPU: 0 PID: 15043 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 2411.669764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2411.679112] Call Trace: [ 2411.681700] dump_stack+0x1fc/0x2ef [ 2411.685326] dump_header+0x15d/0xc3f [ 2411.689038] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2411.694134] ? ___ratelimit+0x319/0x590 [ 2411.698114] oom_kill_process.cold+0x10/0x692 [ 2411.702606] ? check_preemption_disabled+0x41/0x280 [ 2411.707639] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2411.712912] out_of_memory+0x1072/0x1390 [ 2411.716973] ? oom_killer_disable+0x270/0x270 [ 2411.721469] ? mutex_trylock+0x15f/0x1a0 [ 2411.725537] __alloc_pages_nodemask+0x23a2/0x2890 [ 2411.730385] ? find_get_entry+0x4cd/0x8a0 [ 2411.734538] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2411.739401] alloc_pages_current+0x193/0x2a0 [ 2411.743809] filemap_fault+0x146e/0x2180 [ 2411.747884] ext4_filemap_fault+0x84/0xb0 [ 2411.752027] __do_fault+0x10b/0x4b0 [ 2411.755650] __handle_mm_fault+0x273b/0x41c0 [ 2411.760063] ? vm_insert_page+0x9c0/0x9c0 [ 2411.764205] ? lock_downgrade+0x720/0x720 [ 2411.768623] ? check_preemption_disabled+0x41/0x280 [ 2411.773639] handle_mm_fault+0x436/0xb10 [ 2411.777709] __do_page_fault+0x68e/0xd60 [ 2411.781775] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2411.786788] ? spurious_fault+0x840/0x840 [ 2411.790934] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2411.795777] ? page_fault+0x8/0x30 [ 2411.799313] page_fault+0x1e/0x30 [ 2411.802765] RIP: 0033:0x7fec2642822d [ 2411.806472] Code: Bad RIP value. [ 2411.809825] RSP: 002b:00007fec23dc4580 EFLAGS: 00010293 [ 2411.815185] RAX: 00000000000000ee RBX: 0000000000000000 RCX: 00007fec2642822d [ 2411.822449] RDX: 0000000000001fa0 RSI: 00007fec23dc4da0 RDI: 0000000000000004 [ 2411.829712] RBP: 000055b0da5479d0 R08: 0000000000000000 R09: 0000000000000000 [ 2411.836984] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007fec23dc4da0 [ 2411.844244] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007fec23dc4e20 [ 2411.855367] Mem-Info: [ 2411.862685] active_anon:16214 inactive_anon:36563 isolated_anon:0 [ 2411.862685] active_file:36 inactive_file:14 isolated_file:0 [ 2411.862685] unevictable:0 dirty:0 writeback:26 unstable:0 [ 2411.862685] slab_reclaimable:13556 slab_unreclaimable:116646 [ 2411.862685] mapped:22349 shmem:38042 pagetables:592 bounce:0 [ 2411.862685] free:13814 free_pcp:164 free_cma:0 [ 2411.886644] syz-executor.0: vmalloc: allocation failure, allocated 1805389824 of 2128986112 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2411.899432] Node 0 active_anon:63224kB inactive_anon:79436kB active_file:44kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82236kB dirty:0kB writeback:0kB shmem:85020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2411.910072] syz-executor.4: vmalloc: allocation failure, allocated 112934912 of 2128986112 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2411.941092] Node 1 active_anon:1596kB inactive_anon:66816kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:7104kB dirty:0kB writeback:0kB shmem:67148kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2411.953340] syz-executor.2: vmalloc: allocation failure, allocated 1920774144 of 2128986112 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2411.988967] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:2860kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2411.994223] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2412.033700] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2412.037542] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2412.038909] CPU: 1 PID: 18531 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 2412.043824] Node 0 DMA32 free:17624kB min:35996kB low:44992kB high:53988kB active_anon:63100kB inactive_anon:76576kB active_file:44kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:2132kB bounce:0kB free_pcp:388kB local_pcp:164kB free_cma:0kB [ 2412.051684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2412.051689] Call Trace: [ 2412.051710] dump_stack+0x1fc/0x2ef [ 2412.051727] warn_alloc.cold+0x7b/0x18f [ 2412.051746] ? zone_watermark_ok_safe+0x260/0x260 [ 2412.081004] lowmem_reserve[]: 0 0 1 1 1 [ 2412.090345] __vmalloc_area_node+0x4fd/0x780 [ 2412.090366] ? __vmalloc_node_range+0x180/0x180 [ 2412.092915] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2412.096522] ? _raw_spin_unlock+0x29/0x40 [ 2412.096535] ? __get_vm_area_node+0x2e2/0x3a0 [ 2412.096554] __vmalloc_node_range+0xed/0x180 [ 2412.100492] lowmem_reserve[]: 0 0 0 0 0 [ 2412.105335] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2412.109319] Node 1 Normal free:27020kB min:53876kB low:67344kB high:80812kB active_anon:1596kB inactive_anon:66816kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:236kB bounce:0kB free_pcp:220kB local_pcp:4kB free_cma:0kB [ 2412.113670] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2412.118327] lowmem_reserve[]: 0 0 0 0 0 [ 2412.144184] vmalloc_user+0x70/0xe0 [ 2412.144200] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2412.144212] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2412.144233] __vb2_queue_alloc+0x472/0xe60 [ 2412.148381] Node 0 DMA: 1*4kB (E) 3*8kB (UME) 5*16kB (UME) 4*32kB (ME) 2*64kB (ME) 4*128kB (UME) 7*256kB (UME) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10860kB [ 2412.152852] vb2_core_create_bufs+0x273/0x7e0 [ 2412.157246] Node 0 DMA32: 1094*4kB (ME) 470*8kB (UME) 241*16kB (UME) 86*32kB (UME) 23*64kB (UME) 5*128kB (UM) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17624kB [ 2412.161182] ? __vb2_queue_free+0x870/0x870 [ 2412.165471] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2412.193995] ? mutex_trylock+0x1a0/0x1a0 [ 2412.194010] ? __video_do_ioctl+0x632/0xcd0 [ 2412.194029] vb2_create_bufs+0x332/0x620 [ 2412.199392] Node 1 Normal: 367*4kB (UME) 264*8kB (UME) 137*16kB (ME) 58*32kB (ME) 11*64kB (ME) 8*128kB (UM) 5*256kB (UM) 2*512kB (M) 3*1024kB (ME) 2*2048kB (UM) 2*4096kB (U) = 27020kB [ 2412.203334] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2412.206955] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2412.211239] ? __video_do_ioctl+0x632/0xcd0 [ 2412.215357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2412.219567] ? mutex_trylock+0x1a0/0x1a0 [ 2412.219582] ? mark_held_locks+0xf0/0xf0 [ 2412.219601] vb2_ioctl_create_bufs+0x20d/0x360 [ 2412.235021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2412.239479] ? memset+0x20/0x40 [ 2412.239494] v4l_create_bufs+0xb2/0x160 [ 2412.239511] __video_do_ioctl+0x49a/0xcd0 [ 2412.254846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2412.259135] ? v4l_querycap+0x340/0x340 [ 2412.259154] ? __might_fault+0x192/0x1d0 [ 2412.270144] 38073 total pagecache pages [ 2412.274174] ? v4l_querycap+0x340/0x340 [ 2412.278502] 0 pages in swap cache [ 2412.282525] video_usercopy+0x13f/0xfa0 [ 2412.298987] Swap cache stats: add 0, delete 0, find 0/0 [ 2412.304054] ? v4l_enumstd+0x60/0x60 [ 2412.312875] Free swap = 0kB [ 2412.317162] ? mark_held_locks+0xf0/0xf0 [ 2412.317181] ? __lock_acquire+0x6de/0x3ff0 [ 2412.325743] Total swap = 0kB [ 2412.329780] ? video_usercopy+0xfa0/0xfa0 [ 2412.333803] 2097051 pages RAM [ 2412.338360] v4l2_ioctl+0x147/0x1a0 [ 2412.338373] ? video_devdata+0xa0/0xa0 [ 2412.338388] do_vfs_ioctl+0xcdb/0x12e0 [ 2412.347212] 0 pages HighMem/MovableOnly [ 2412.350460] ? lock_downgrade+0x720/0x720 [ 2412.354402] 369649 pages reserved [ 2412.358529] ? check_preemption_disabled+0x41/0x280 [ 2412.358542] ? ioctl_preallocate+0x200/0x200 [ 2412.358558] ? __fget+0x356/0x510 [ 2412.367122] 0 pages cma reserved [ 2412.371068] ? do_dup2+0x450/0x450 [ 2412.375095] Unreclaimable slab info: [ 2412.379050] ? lock_acquire+0x170/0x3c0 [ 2412.379063] ? finish_task_switch+0x118/0x760 [ 2412.379081] ksys_ioctl+0x9b/0xc0 [ 2412.383020] Name Used Total [ 2412.386457] __x64_sys_ioctl+0x6f/0xb0 [ 2412.386469] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2412.386484] do_syscall_64+0xf9/0x620 [ 2412.390432] pid_2 40KB 100KB [ 2412.395776] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2412.395787] RIP: 0033:0x7f67abb9c209 [ 2412.395799] Code: Bad RIP value. [ 2412.399559] batadv_tt_change_cache 2KB 3KB [ 2412.402497] RSP: 002b:00007f67aa4cf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2412.406562] batadv_tl_cache 7KB 12KB [ 2412.410744] RAX: ffffffffffffffda RBX: 00007f67abcaf100 RCX: 00007f67abb9c209 [ 2412.410754] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 2412.413762] SMC 76KB 76KB [ 2412.417871] RBP: 00007f67abbf6161 R08: 0000000000000000 R09: 0000000000000000 [ 2412.417878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2412.417886] R13: 00007ffc5dd9437f R14: 00007f67aa4cf300 R15: 0000000000022000 [ 2412.422794] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 2412.442930] TIPC 15KB 30KB [ 2412.446148] CPU: 1 PID: 18541 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2412.457693] SCTPv6 20KB 24KB [ 2412.458909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2412.462254] SCTP 1KB 3KB [ 2412.465763] Call Trace: [ 2412.465786] dump_stack+0x1fc/0x2ef [ 2412.465808] warn_alloc.cold+0x7b/0x18f [ 2412.479367] DCCPv6 17KB 30KB [ 2412.481799] ? zone_watermark_ok_safe+0x260/0x260 [ 2412.495690] DCCP 16KB 28KB [ 2412.495782] __vmalloc_area_node+0x4fd/0x780 [ 2412.499563] RXRPC 16KB 19KB [ 2412.504895] ? __vmalloc_node_range+0x180/0x180 [ 2412.525679] rxrpc_call_jar 112KB 118KB [ 2412.530571] ? _raw_spin_unlock+0x29/0x40 [ 2412.545671] bridge_fdb_cache 14KB 23KB [ 2412.550410] ? __get_vm_area_node+0x2e2/0x3a0 [ 2412.565663] fib6_nodes 235KB 252KB [ 2412.570254] __vmalloc_node_range+0xed/0x180 [ 2412.585654] ip6_dst_cache 513KB 513KB [ 2412.587927] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2412.605657] RAWv6 114KB 114KB [ 2412.610456] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2412.625652] UDPv6 37KB 45KB [ 2412.625907] vmalloc_user+0x70/0xe0 [ 2412.631242] TCPv6 36KB 42KB [ 2412.636063] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2412.636078] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2412.636094] __vb2_queue_alloc+0x472/0xe60 [ 2412.665659] nf_conntrack 7KB 11KB [ 2412.670752] vb2_core_create_bufs+0x273/0x7e0 [ 2412.675270] t10_alua_lu_gp_cache 0KB 3KB [ 2412.680591] ? __vb2_queue_free+0x870/0x870 [ 2412.680607] ? mutex_trylock+0x1a0/0x1a0 [ 2412.680627] ? __video_do_ioctl+0x632/0xcd0 [ 2412.680646] vb2_create_bufs+0x332/0x620 [ 2412.695665] sd_ext_cdb 0KB 7KB [ 2412.700024] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2412.705366] scsi_sense_cache 1056KB 1060KB [ 2412.710712] ? __video_do_ioctl+0x632/0xcd0 [ 2412.710726] ? mutex_trylock+0x1a0/0x1a0 [ 2412.710740] ? mark_held_locks+0xf0/0xf0 [ 2412.710760] vb2_ioctl_create_bufs+0x20d/0x360 [ 2412.735650] virtio_scsi_cmd 16KB 16KB [ 2412.737677] ? memset+0x20/0x40 [ 2412.742141] sgpool-128 8KB 8KB [ 2412.747748] v4l_create_bufs+0xb2/0x160 [ 2412.747765] __video_do_ioctl+0x49a/0xcd0 [ 2412.747786] ? v4l_querycap+0x340/0x340 [ 2412.765642] sgpool-64 4KB 12KB [ 2412.770056] ? __might_fault+0x192/0x1d0 [ 2412.775127] sgpool-32 2KB 15KB [ 2412.780472] ? v4l_querycap+0x340/0x340 [ 2412.780487] video_usercopy+0x13f/0xfa0 [ 2412.780508] ? v4l_enumstd+0x60/0x60 [ 2412.805639] sgpool-16 1KB 7KB [ 2412.806018] ? do_futex+0x171/0x1880 [ 2412.811350] sgpool-8 0KB 7KB [ 2412.815309] ? mark_held_locks+0xf0/0xf0 [ 2412.835642] mqueue_inode_cache 15KB 30KB [ 2412.838091] ? debug_check_no_obj_freed+0x201/0x490 [ 2412.842037] bio_post_read_ctx 14KB 15KB [ 2412.845998] ? video_usercopy+0xfa0/0xfa0 [ 2412.846015] v4l2_ioctl+0x147/0x1a0 [ 2412.865694] bio-2 14KB 15KB [ 2412.868125] ? video_devdata+0xa0/0xa0 [ 2412.873546] jfs_mp 7KB 7KB [ 2412.878545] do_vfs_ioctl+0xcdb/0x12e0 [ 2412.878561] ? lock_downgrade+0x720/0x720 [ 2412.878581] ? check_preemption_disabled+0x41/0x280 [ 2412.905661] cifs_small_rq 15KB 16KB [ 2412.906210] ? ioctl_preallocate+0x200/0x200 [ 2412.910073] cifs_request 67KB 67KB [ 2412.914202] ? __fget+0x356/0x510 [ 2412.925628] cifs_mpx_ids 0KB 7KB [ 2412.928915] ? do_dup2+0x450/0x450 [ 2412.934264] nfs_commit_data 3KB 14KB [ 2412.937692] ? __se_sys_futex+0x298/0x3b0 [ 2412.937714] ksys_ioctl+0x9b/0xc0 [ 2412.937730] __x64_sys_ioctl+0x6f/0xb0 [ 2412.963349] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2412.965630] nfs_write_data 34KB 44KB [ 2412.967925] do_syscall_64+0xf9/0x620 [ 2412.973287] ext4_system_zone 1KB 7KB [ 2412.977045] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2412.977057] RIP: 0033:0x7fccfd70a209 [ 2412.977071] Code: Bad RIP value. [ 2412.994613] RSP: 002b:00007fccfc07f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2412.995646] bio-1 1KB 7KB [ 2413.002308] RAX: ffffffffffffffda RBX: 00007fccfd81cf60 RCX: 00007fccfd70a209 [ 2413.002319] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 2413.022153] RBP: 00007fccfd764161 R08: 0000000000000000 R09: 0000000000000000 [ 2413.025625] pid_namespace 3KB 11KB [ 2413.029405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2413.029416] R13: 00007fffd8a8c5bf R14: 00007fccfc07f300 R15: 0000000000022000 [ 2413.034761] rpc_buffers 17KB 25KB [ 2413.050885] warn_alloc_show_mem: 1 callbacks suppressed [ 2413.050889] Mem-Info: [ 2413.063518] active_anon:16205 inactive_anon:36563 isolated_anon:0 [ 2413.063518] active_file:16 inactive_file:15 isolated_file:0 [ 2413.063518] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2413.063518] slab_reclaimable:13556 slab_unreclaimable:116674 [ 2413.063518] mapped:22335 shmem:38042 pagetables:592 bounce:0 [ 2413.063518] free:13878 free_pcp:87 free_cma:0 [ 2413.074752] CPU: 0 PID: 18525 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 2413.096914] Node 0 active_anon:63224kB inactive_anon:79436kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82236kB dirty:0kB writeback:0kB shmem:85020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2413.104597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2413.132268] Node 1 active_anon:1596kB inactive_anon:66816kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:7104kB dirty:0kB writeback:0kB shmem:67148kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2413.141500] Call Trace: [ 2413.141523] dump_stack+0x1fc/0x2ef [ 2413.141547] warn_alloc.cold+0x7b/0x18f [ 2413.170571] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:2860kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2413.171169] ? zone_watermark_ok_safe+0x260/0x260 [ 2413.174760] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2413.178736] __vmalloc_area_node+0x4fd/0x780 [ 2413.178756] ? __vmalloc_node_range+0x180/0x180 [ 2413.178776] ? _raw_spin_unlock+0x29/0x40 [ 2413.205337] Node 0 DMA32 free:17624kB min:35996kB low:44992kB high:53988kB active_anon:63100kB inactive_anon:76576kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:2132kB bounce:0kB free_pcp:280kB local_pcp:132kB free_cma:0kB [ 2413.210114] ? __get_vm_area_node+0x2e2/0x3a0 [ 2413.210133] __vmalloc_node_range+0xed/0x180 [ 2413.210153] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2413.215140] lowmem_reserve[]: 0 0 1 1 1 [ 2413.219529] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2413.219543] vmalloc_user+0x70/0xe0 [ 2413.219556] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2413.219569] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2413.219583] __vb2_queue_alloc+0x472/0xe60 [ 2413.224223] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2413.228365] vb2_core_create_bufs+0x273/0x7e0 [ 2413.228386] ? __vb2_queue_free+0x870/0x870 [ 2413.259168] lowmem_reserve[]: 0 0 0 0 0 [ 2413.261742] ? mutex_trylock+0x1a0/0x1a0 [ 2413.266158] Node 1 Normal free:27020kB min:53876kB low:67344kB high:80812kB active_anon:1596kB inactive_anon:66816kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:236kB bounce:0kB free_pcp:24kB local_pcp:20kB free_cma:0kB [ 2413.270446] ? __video_do_ioctl+0x632/0xcd0 [ 2413.274400] lowmem_reserve[]: 0 0 0 0 0 [ 2413.279754] vb2_create_bufs+0x332/0x620 [ 2413.279771] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2413.279784] ? __video_do_ioctl+0x632/0xcd0 [ 2413.279795] ? mutex_trylock+0x1a0/0x1a0 [ 2413.279812] ? mark_held_locks+0xf0/0xf0 [ 2413.283410] Node 0 DMA: 1*4kB (E) 3*8kB (UME) 5*16kB (UME) 4*32kB (ME) 2*64kB (ME) 4*128kB (UME) 7*256kB (UME) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10860kB [ 2413.287713] ? futex_wait_queue_me+0x404/0x5e0 [ 2413.287730] vb2_ioctl_create_bufs+0x20d/0x360 [ 2413.287744] ? memset+0x20/0x40 [ 2413.287760] v4l_create_bufs+0xb2/0x160 [ 2413.291877] Node 0 DMA32: 1094*4kB (ME) 470*8kB (UME) 241*16kB (UME) 86*32kB (UME) 23*64kB (UME) 5*128kB (UM) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17624kB [ 2413.296098] __video_do_ioctl+0x49a/0xcd0 [ 2413.296118] ? v4l_querycap+0x340/0x340 [ 2413.296135] ? __might_fault+0x192/0x1d0 [ 2413.296149] ? v4l_querycap+0x340/0x340 [ 2413.296166] video_usercopy+0x13f/0xfa0 [ 2413.345618] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2413.367291] ? v4l_enumstd+0x60/0x60 [ 2413.367305] ? do_futex+0x171/0x1880 [ 2413.367321] ? mark_held_locks+0xf0/0xf0 [ 2413.367337] ? debug_check_no_obj_freed+0x201/0x490 [ 2413.367355] ? video_usercopy+0xfa0/0xfa0 [ 2413.367366] v4l2_ioctl+0x147/0x1a0 [ 2413.367376] ? video_devdata+0xa0/0xa0 [ 2413.367389] do_vfs_ioctl+0xcdb/0x12e0 [ 2413.367404] ? lock_downgrade+0x720/0x720 [ 2413.367418] ? check_preemption_disabled+0x41/0x280 [ 2413.367429] ? ioctl_preallocate+0x200/0x200 [ 2413.367446] ? __fget+0x356/0x510 [ 2413.367461] ? do_dup2+0x450/0x450 [ 2413.367475] ? __se_sys_futex+0x298/0x3b0 [ 2413.367494] ksys_ioctl+0x9b/0xc0 [ 2413.367521] __x64_sys_ioctl+0x6f/0xb0 [ 2413.367535] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2413.367548] do_syscall_64+0xf9/0x620 [ 2413.367567] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2413.367578] RIP: 0033:0x7f341ec39209 [ 2413.367592] Code: Bad RIP value. [ 2413.367599] RSP: 002b:00007f341d5ae168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2413.367617] RAX: ffffffffffffffda RBX: 00007f341ed4bf60 RCX: 00007f341ec39209 [ 2413.367625] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 2413.367632] RBP: 00007f341ec93161 R08: 0000000000000000 R09: 0000000000000000 [ 2413.367639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2413.367647] R13: 00007ffc3f7ea9cf R14: 00007f341d5ae300 R15: 0000000000022000 [ 2413.384788] rpc_tasks 2KB 7KB [ 2413.432252] Node 1 Normal: 367*4kB (UME) 264*8kB (UME) 137*16kB (ME) 58*32kB (ME) 11*64kB (ME) 8*128kB (UM) 5*256kB (UM) 2*512kB (M) 3*1024kB (ME) 2*2048kB (UM) 2*4096kB (U) = 27020kB [ 2413.454270] UNIX 1428KB 1443KB [ 2413.485671] net_ratelimit: 2 callbacks suppressed [ 2413.485677] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2413.506831] tcp_bind_bucket 1KB 4KB [ 2413.510069] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2413.514151] ip_fib_trie 34KB 47KB [ 2413.519205] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2413.525835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2413.534715] ip_fib_alias 166KB 181KB [ 2413.534726] ip_dst_cache 10KB 20KB [ 2413.548947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2413.558399] RAW 60KB 75KB [ 2413.705240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2413.715412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2413.724042] 38073 total pagecache pages [ 2413.731573] 0 pages in swap cache [ 2413.735028] Swap cache stats: add 0, delete 0, find 0/0 [ 2413.740416] Free swap = 0kB [ 2413.743429] Total swap = 0kB [ 2413.750121] 2097051 pages RAM [ 2413.753223] 0 pages HighMem/MovableOnly [ 2413.757216] 369649 pages reserved [ 2413.760662] 0 pages cma reserved [ 2413.892500] UDP 50KB 60KB [ 2413.897942] TCP 247KB 247KB [ 2413.903313] hugetlbfs_inode_cache 3KB 15KB [ 2413.942681] fscache_cookie_jar 1KB 7KB [ 2413.948200] eventpoll_pwq 39KB 51KB [ 2413.953571] eventpoll_epi 74KB 74KB [ 2413.992797] inotify_inode_mark 21KB 43KB [ 2413.998327] request_queue 199KB 199KB [ 2414.003687] blkdev_requests 1KB 3KB [ 2414.025576] blkdev_ioc 16KB 30KB [ 2414.030958] bio-0 685KB 772KB [ 2414.082429] biovec-max 1625KB 1625KB [ 2414.102826] biovec-64 687KB 763KB [ 2414.122880] biovec-16 123KB 142KB [ 2414.128363] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2414.162480] bio_integrity_payload 1KB 8KB [ 2414.168260] khugepaged_mm_slot 10KB 34KB [ 2414.173717] uid_cache 0KB 4KB [ 2414.199060] dmaengine-unmap-2 0KB 3KB [ 2414.204453] skbuff_fclone_cache 48KB 116KB [ 2414.229044] skbuff_head_cache 7932KB 7935KB [ 2414.234425] configfs_dir_cache 3KB 7KB [ 2414.269222] file_lock_cache 74KB 166KB [ 2414.274605] file_lock_ctx 9KB 11KB [ 2414.298960] fsnotify_mark_connector 11KB 27KB [ 2414.304867] net_namespace 78KB 78KB [ 2414.339243] shmem_inode_cache 8300KB 8547KB [ 2414.344627] task_delay_info 260KB 407KB [ 2414.369017] taskstats 37KB 95KB [ 2414.374397] proc_dir_entry 892KB 900KB [ 2414.410328] pde_opener 13KB 69KB [ 2414.424690] seq_file 271KB 456KB [ 2414.442101] sigqueue 79KB 86KB [ 2414.455483] kernfs_node_cache 18321KB 18340KB [ 2414.478990] mnt_cache 226KB 232KB [ 2414.491504] filp 6818KB 7282KB [ 2414.510384] names_cache 117538KB 117576KB [ 2414.519373] iint_cache 24KB 39KB [ 2414.524744] key_jar 4KB 7KB [ 2414.559345] uts_namespace 4KB 11KB [ 2414.576356] nsproxy 23KB 63KB [ 2414.582079] vm_area_struct 3396KB 4424KB [ 2414.599912] mm_struct 500KB 676KB [ 2414.605292] fs_cache 267KB 304KB [ 2414.635597] files_cache 956KB 956KB [ 2414.640980] signal_cache 1868KB 1883KB [ 2414.670356] sighand_cache 580KB 645KB [ 2414.675864] task_struct 8300KB 8357KB [ 2414.681229] cred_jar 2017KB 2500KB [ 2414.710657] anon_vma_chain 1192KB 1732KB [ 2414.730474] anon_vma 168KB 323KB [ 2414.750555] pid 143KB 248KB [ 2414.756015] Acpi-Operand 156KB 194KB [ 2414.761375] Acpi-ParseExt 9KB 11KB [ 2414.810261] Acpi-Parse 41KB 47KB [ 2414.816260] Acpi-State 52KB 63KB [ 2414.821628] Acpi-Namespace 20KB 27KB [ 2414.850385] numa_policy 0KB 3KB [ 2414.870209] debug_objects_cache 1615KB 2143KB [ 2414.875848] trace_event_file 297KB 298KB [ 2414.881208] ftrace_event_field 398KB 401KB [ 2414.910755] pool_workqueue 142KB 156KB [ 2414.916419] page->ptl 476KB 766KB [ 2414.921823] kmalloc-2097152 2050KB 2050KB [ 2414.965525] kmalloc-524288 2056KB 2056KB [ 2414.970915] kmalloc-262144 1290KB 1290KB [ 2414.996499] kmalloc-131072 650KB 650KB [ 2415.015545] kmalloc-65536 2640KB 2706KB [ 2415.020924] kmalloc-32768 2145KB 2145KB [ 2415.050309] kmalloc-16384 1320KB 1386KB [ 2415.055826] kmalloc-8192 5494KB 5494KB [ 2415.061194] kmalloc-4096 27816KB 27854KB [ 2415.090161] kmalloc-2048 16874KB 16951KB [ 2415.098821] kmalloc-1024 11341KB 11347KB [ 2415.104200] kmalloc-512 15367KB 15671KB [ 2415.130154] kmalloc-256 5381KB 5940KB [ 2415.135683] kmalloc-128 1310KB 1575KB [ 2415.141044] kmalloc-96 3314KB 4292KB [ 2415.171664] kmalloc-64 2609KB 3428KB [ 2415.177141] kmalloc-32 1928KB 2460KB [ 2415.182506] kmalloc-192 2139KB 2820KB [ 2415.230136] kmem_cache 177KB 183KB [ 2415.235603] Out of memory (oom_kill_allocating_task): Kill process 15043 (in:imklog) score 0 or sacrifice child [ 2415.270284] Killed process 15041 (rsyslogd) total-vm:254332kB, anon-rss:836kB, file-rss:0kB, shmem-rss:0kB [ 2415.292179] oom_reaper: reaped process 15041 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 06:34:38 executing program 1: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x4, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:34:38 executing program 3: r0 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0xc044) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000840)={&(0x7f0000000000), 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_AF={0x6}]}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20040000) 06:34:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/182, 0xb6, 0x0, &(0x7f0000000100)=""/50, 0x32}, &(0x7f0000000180)=0x40) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='cdg\x00', 0x4) (async, rerun: 32) getsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (rerun: 32) socket$can_raw(0x1d, 0x3, 0x1) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000240)={0xfffffff8, 0xffffff00, 0x400, 0x60, 0x107}, 0x14) 06:34:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f00000001c0)={0x0, 0xf6b, 0x2, '\x00', &(0x7f0000000080)=0x3f}) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000200)={0x2, "5af54295907a91db538c379c492d8ae085ba6cef5ad5cb890eef1cb676bc4cef", 0x1, 0x20, 0x1, 0xc54, 0x4, 0x2, 0x6, 0x7}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f00000001c0)={0x0, 0xf6b, 0x2, '\x00', &(0x7f0000000080)=0x3f}) (async) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000200)={0x2, "5af54295907a91db538c379c492d8ae085ba6cef5ad5cb890eef1cb676bc4cef", 0x1, 0x20, 0x1, 0xc54, 0x4, 0x2, 0x6, 0x7}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) 06:34:38 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, r2, 0x0], &(0x7f0000000240)=[0x4], 0x10000, 0x6, 0x6}) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000080)=0x80000) 06:34:38 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000080)={{0x2, 0xc20b}, {0x1, 0x4}, 0x3}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0xfffffffd, 0x3, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0x2000002}) 06:34:38 executing program 1: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x4, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:34:38 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f00000000c0)="49527d6d6460d5762e5f1f12c7af46ddb9c3ba4ce67121f08fc26633f71152b7d49d4bde2cf3baf5c6e638d8f9734542c51e79da761063640ab5924e8a989bbc0e49c4c06fddc5b34d049440aea66bbe7a") 06:34:38 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f00000000c0)="49527d6d6460d5762e5f1f12c7af46ddb9c3ba4ce67121f08fc26633f71152b7d49d4bde2cf3baf5c6e638d8f9734542c51e79da761063640ab5924e8a989bbc0e49c4c06fddc5b34d049440aea66bbe7a") setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f00000000c0)="49527d6d6460d5762e5f1f12c7af46ddb9c3ba4ce67121f08fc26633f71152b7d49d4bde2cf3baf5c6e638d8f9734542c51e79da761063640ab5924e8a989bbc0e49c4c06fddc5b34d049440aea66bbe7a") (async) 06:34:38 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x4, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:34:38 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x4, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:34:38 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f00000000c0)="49527d6d6460d5762e5f1f12c7af46ddb9c3ba4ce67121f08fc26633f71152b7d49d4bde2cf3baf5c6e638d8f9734542c51e79da761063640ab5924e8a989bbc0e49c4c06fddc5b34d049440aea66bbe7a") setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f00000000c0)="49527d6d6460d5762e5f1f12c7af46ddb9c3ba4ce67121f08fc26633f71152b7d49d4bde2cf3baf5c6e638d8f9734542c51e79da761063640ab5924e8a989bbc0e49c4c06fddc5b34d049440aea66bbe7a") (async) 06:34:38 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x4, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:34:38 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000080)="916568c51dc83698b7f9cdeda822dcd4d8e036bf3c15af84b50c4d77ff03948657ef4547bfb6e98753be76222dc4f260c06321e309fe019a9edae748ba033a522da3344f9e85088a4e282241c4f69fa71335317c1443e3e08cc511cae40d9b63afdd4b2249cc072b7ab2319c330febc8c0195ad81e971093b4b239") 06:34:38 executing program 1: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x4, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) [ 2422.391168] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2422.402707] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2422.425549] CPU: 0 PID: 8111 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2422.433003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2422.442350] Call Trace: [ 2422.444940] dump_stack+0x1fc/0x2ef [ 2422.448570] dump_header+0x15d/0xc3f [ 2422.452281] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2422.457376] ? ___ratelimit+0x319/0x590 [ 2422.461348] oom_kill_process.cold+0x10/0x692 [ 2422.465839] ? check_preemption_disabled+0x41/0x280 [ 2422.470861] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2422.476136] out_of_memory+0x1072/0x1390 [ 2422.480198] ? oom_killer_disable+0x270/0x270 [ 2422.484691] ? mutex_trylock+0x15f/0x1a0 [ 2422.488755] __alloc_pages_nodemask+0x23a2/0x2890 [ 2422.493598] ? find_get_entry+0x4cd/0x8a0 [ 2422.497750] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2422.502614] alloc_pages_current+0x193/0x2a0 [ 2422.507020] filemap_fault+0x146e/0x2180 [ 2422.511088] ext4_filemap_fault+0x84/0xb0 [ 2422.515230] __do_fault+0x10b/0x4b0 [ 2422.518857] __handle_mm_fault+0x273b/0x41c0 [ 2422.523264] ? vm_insert_page+0x9c0/0x9c0 [ 2422.527422] ? check_preemption_disabled+0x41/0x280 [ 2422.532443] handle_mm_fault+0x436/0xb10 [ 2422.536520] __do_page_fault+0x68e/0xd60 [ 2422.540585] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2422.545593] ? spurious_fault+0x840/0x840 [ 2422.549729] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2422.554555] ? page_fault+0x8/0x30 [ 2422.558073] page_fault+0x1e/0x30 [ 2422.561505] RIP: 0033:0x40b2a5 [ 2422.564675] Code: Bad RIP value. [ 2422.568015] RSP: 002b:000000c00003fed0 EFLAGS: 00010202 [ 2422.573357] RAX: ffffffffffffff92 RBX: 0000000000000000 RCX: 00000000004668c3 [ 2422.580608] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000183e758 [ 2422.587856] RBP: 000000c00003ff00 R08: 0000000000000000 R09: 0000000000000000 [ 2422.595103] R10: 000000c00003feb0 R11: 0000000000000202 R12: 000000c00003feb0 [ 2422.602376] R13: 000000c000355c00 R14: 000000c0000004e0 R15: 00007f47abff20d0 [ 2422.611634] Mem-Info: [ 2422.614074] active_anon:16758 inactive_anon:36563 isolated_anon:0 [ 2422.614074] active_file:15 inactive_file:16 isolated_file:0 [ 2422.614074] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2422.614074] slab_reclaimable:13555 slab_unreclaimable:116935 [ 2422.614074] mapped:22384 shmem:38042 pagetables:609 bounce:0 [ 2422.614074] free:25206 free_pcp:16 free_cma:0 [ 2422.702117] Node 0 active_anon:65884kB inactive_anon:79436kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82236kB dirty:0kB writeback:0kB shmem:85020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2422.800039] Node 1 active_anon:1148kB inactive_anon:66816kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:7300kB dirty:0kB writeback:0kB shmem:67148kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2422.852813] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:2860kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2422.887205] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2422.892267] Node 0 DMA32 free:35892kB min:35996kB low:44992kB high:53988kB active_anon:65760kB inactive_anon:76576kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:2280kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2422.925070] lowmem_reserve[]: 0 0 1 1 1 [ 2422.929067] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2422.959031] lowmem_reserve[]: 0 0 0 0 0 [ 2422.963020] Node 1 Normal free:53736kB min:53876kB low:67344kB high:80812kB active_anon:1148kB inactive_anon:66816kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:156kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2422.995756] lowmem_reserve[]: 0 0 0 0 0 [ 2422.999747] Node 0 DMA: 1*4kB (E) 2*8kB (ME) 5*16kB (UME) 4*32kB (ME) 2*64kB (ME) 5*128kB (UME) 7*256kB (UME) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10980kB [ 2423.019701] Node 0 DMA32: 1285*4kB (UME) 635*8kB (ME) 378*16kB (UME) 181*32kB (ME) 86*64kB (UME) 23*128kB (M) 13*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 35884kB [ 2423.042405] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2423.053521] Node 1 Normal: 344*4kB (ME) 261*8kB (ME) 138*16kB (ME) 68*32kB (ME) 13*64kB (ME) 6*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (ME) 1*2048kB (M) 9*4096kB (U) = 53736kB [ 2423.077338] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2423.086539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2423.102664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2423.111617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2423.123114] 38073 total pagecache pages [ 2423.130915] 0 pages in swap cache [ 2423.134362] Swap cache stats: add 0, delete 0, find 0/0 [ 2423.144145] Free swap = 0kB [ 2423.148412] Total swap = 0kB [ 2423.151448] 2097051 pages RAM [ 2423.154532] 0 pages HighMem/MovableOnly [ 2423.163161] 369649 pages reserved [ 2423.168450] 0 pages cma reserved [ 2423.171796] Unreclaimable slab info: [ 2423.178541] Name Used Total [ 2423.184076] pid_2 30KB 96KB [ 2423.194227] batadv_tt_change_cache 2KB 3KB [ 2423.202995] batadv_tl_cache 7KB 12KB [ 2423.210211] SMC 6KB 34KB [ 2423.222393] TIPC 15KB 30KB [ 2423.229825] SCTPv6 20KB 24KB [ 2423.242746] DCCPv6 17KB 30KB [ 2423.249982] DCCP 16KB 28KB [ 2423.263146] RXRPC 16KB 19KB [ 2423.270366] rxrpc_call_jar 112KB 118KB [ 2423.283229] can_receiver 0KB 3KB [ 2423.291496] bridge_fdb_cache 14KB 23KB [ 2423.303728] fib6_nodes 235KB 252KB [ 2423.310955] ip6_dst_cache 528KB 528KB [ 2423.318341] RAWv6 106KB 114KB [ 2423.323711] UDPv6 37KB 45KB [ 2423.332811] TCPv6 27KB 36KB [ 2423.341825] nf_conntrack 9KB 11KB [ 2423.351004] t10_alua_lu_gp_cache 0KB 3KB [ 2423.360293] sd_ext_cdb 0KB 7KB [ 2423.369433] scsi_sense_cache 1056KB 1060KB [ 2423.374787] virtio_scsi_cmd 16KB 16KB [ 2423.382952] sgpool-128 8KB 8KB [ 2423.392453] sgpool-64 4KB 12KB [ 2423.403385] sgpool-32 2KB 15KB [ 2423.412586] sgpool-16 1KB 7KB [ 2423.422254] sgpool-8 0KB 7KB [ 2423.432157] mqueue_inode_cache 15KB 30KB [ 2423.437674] bio_post_read_ctx 14KB 15KB [ 2423.443150] bio-2 14KB 15KB [ 2423.452095] jfs_mp 7KB 7KB [ 2423.457541] cifs_small_rq 15KB 16KB [ 2423.462903] cifs_request 67KB 67KB [ 2423.469615] cifs_mpx_ids 0KB 7KB [ 2423.477511] nfs_commit_data 3KB 14KB [ 2423.482855] nfs_write_data 34KB 44KB [ 2423.499904] ext4_system_zone 1KB 7KB [ 2423.510823] bio-1 1KB 7KB [ 2423.518931] pid_namespace 3KB 11KB [ 2423.524282] rpc_buffers 17KB 25KB [ 2423.531762] rpc_tasks 2KB 7KB [ 2423.537216] UNIX 1460KB 1462KB [ 2423.542614] tcp_bind_bucket 1KB 4KB [ 2423.551593] ip_fib_trie 34KB 47KB [ 2423.557018] ip_fib_alias 166KB 181KB [ 2423.562374] ip_dst_cache 10KB 20KB [ 2423.569670] RAW 60KB 75KB [ 2423.577134] UDP 55KB 60KB [ 2423.582484] TCP 90KB 196KB [ 2423.593694] hugetlbfs_inode_cache 3KB 15KB [ 2423.602169] fscache_cookie_jar 1KB 7KB [ 2423.608540] eventpoll_pwq 32KB 51KB [ 2423.613906] eventpoll_epi 61KB 74KB [ 2423.622608] inotify_inode_mark 15KB 43KB [ 2423.629897] request_queue 199KB 199KB [ 2423.639776] blkdev_requests 1KB 3KB [ 2423.648558] blkdev_ioc 19KB 30KB [ 2423.653919] bio-0 860KB 888KB [ 2423.663078] biovec-max 1608KB 1625KB [ 2423.674542] biovec-64 847KB 889KB [ 2423.681719] biovec-16 142KB 146KB [ 2423.688296] bio_integrity_payload 1KB 8KB [ 2423.694009] khugepaged_mm_slot 8KB 34KB [ 2423.702428] uid_cache 0KB 4KB [ 2423.709792] dmaengine-unmap-2 0KB 3KB [ 2423.719166] skbuff_fclone_cache 29KB 86KB [ 2423.724700] skbuff_head_cache 7873KB 7968KB [ 2423.733129] configfs_dir_cache 3KB 7KB [ 2423.740480] file_lock_cache 52KB 166KB [ 2423.749602] file_lock_ctx 9KB 11KB [ 2423.759187] fsnotify_mark_connector 7KB 27KB [ 2423.766935] net_namespace 78KB 78KB [ 2423.772283] shmem_inode_cache 8222KB 8512KB [ 2423.778735] task_delay_info 251KB 407KB [ 2423.784094] taskstats 32KB 84KB [ 2423.798277] proc_dir_entry 892KB 900KB [ 2423.803642] pde_opener 12KB 69KB [ 2423.813942] seq_file 262KB 456KB [ 2423.821256] sigqueue 74KB 86KB [ 2423.828227] kernfs_node_cache 18320KB 18340KB [ 2423.833591] mnt_cache 226KB 232KB [ 2423.842680] filp 7121KB 7282KB [ 2423.852345] names_cache 118617KB 118655KB [ 2423.861459] iint_cache 25KB 39KB [ 2423.868294] key_jar 4KB 7KB [ 2423.873657] uts_namespace 4KB 11KB [ 2423.882688] nsproxy 17KB 59KB [ 2423.891647] vm_area_struct 3203KB 4404KB [ 2423.905245] mm_struct 451KB 669KB [ 2423.910612] fs_cache 255KB 304KB [ 2423.918294] files_cache 935KB 956KB [ 2423.923664] signal_cache 1825KB 1883KB [ 2423.932792] sighand_cache 550KB 638KB [ 2423.941840] task_struct 7985KB 8042KB [ 2423.950955] cred_jar 2155KB 2500KB [ 2423.960005] anon_vma_chain 1091KB 1732KB [ 2423.969176] anon_vma 163KB 319KB [ 2423.974537] pid 139KB 248KB [ 2423.982980] Acpi-Operand 156KB 194KB [ 2423.992044] Acpi-ParseExt 9KB 11KB [ 2423.998193] Acpi-Parse 41KB 47KB [ 2424.003561] Acpi-State 52KB 63KB [ 2424.013539] Acpi-Namespace 20KB 27KB [ 2424.020997] numa_policy 0KB 3KB [ 2424.030143] debug_objects_cache 1612KB 2143KB [ 2424.039331] trace_event_file 297KB 298KB [ 2424.044685] ftrace_event_field 398KB 401KB [ 2424.052089] pool_workqueue 142KB 156KB [ 2424.061866] page->ptl 463KB 766KB [ 2424.068266] kmalloc-2097152 2050KB 2050KB [ 2424.073636] kmalloc-524288 2056KB 2056KB [ 2424.082602] kmalloc-262144 1290KB 1290KB [ 2424.091709] kmalloc-131072 650KB 650KB [ 2424.100757] kmalloc-65536 2640KB 2706KB [ 2424.111623] kmalloc-32768 2145KB 2145KB [ 2424.120690] kmalloc-16384 1320KB 1386KB [ 2424.129865] kmalloc-8192 5494KB 5494KB [ 2424.138982] kmalloc-4096 27871KB 27909KB [ 2424.144339] kmalloc-2048 16810KB 16951KB [ 2424.151787] kmalloc-1024 11561KB 11568KB [ 2424.161561] kmalloc-512 15468KB 15667KB [ 2424.168265] kmalloc-256 5396KB 5940KB [ 2424.173620] kmalloc-128 1310KB 1575KB [ 2424.182530] kmalloc-96 3351KB 4292KB [ 2424.191606] kmalloc-64 2609KB 3428KB [ 2424.200599] kmalloc-32 1928KB 2460KB [ 2424.211501] kmalloc-192 2127KB 2820KB [ 2424.220542] kmem_cache 177KB 183KB [ 2424.229691] Out of memory (oom_kill_allocating_task): Kill process 8111 (syz-fuzzer) score 0 or sacrifice child [ 2424.243594] Killed process 17676 (syz-executor.4) total-vm:48480kB, anon-rss:360kB, file-rss:4kB, shmem-rss:0kB [ 2424.273582] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2424.318963] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2424.324333] CPU: 1 PID: 8111 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2424.331775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2424.341114] Call Trace: [ 2424.343691] dump_stack+0x1fc/0x2ef [ 2424.347313] dump_header+0x15d/0xc3f [ 2424.351019] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2424.356105] ? ___ratelimit+0x319/0x590 [ 2424.360067] oom_kill_process.cold+0x10/0x692 [ 2424.364547] ? check_preemption_disabled+0x41/0x280 [ 2424.369564] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2424.374832] out_of_memory+0x1072/0x1390 [ 2424.378883] ? oom_killer_disable+0x270/0x270 [ 2424.383366] ? mutex_trylock+0x15f/0x1a0 [ 2424.387414] __alloc_pages_nodemask+0x23a2/0x2890 [ 2424.392248] ? find_get_entry+0x4cd/0x8a0 [ 2424.396388] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2424.401254] alloc_pages_current+0x193/0x2a0 [ 2424.405652] filemap_fault+0x146e/0x2180 [ 2424.409708] ext4_filemap_fault+0x84/0xb0 [ 2424.413857] __do_fault+0x10b/0x4b0 [ 2424.417471] __handle_mm_fault+0x273b/0x41c0 [ 2424.421868] ? vm_insert_page+0x9c0/0x9c0 [ 2424.426017] ? check_preemption_disabled+0x41/0x280 [ 2424.431024] handle_mm_fault+0x436/0xb10 [ 2424.435074] __do_page_fault+0x68e/0xd60 [ 2424.439124] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2424.444123] ? spurious_fault+0x840/0x840 [ 2424.448254] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2424.453091] ? page_fault+0x8/0x30 [ 2424.456618] page_fault+0x1e/0x30 [ 2424.460054] RIP: 0033:0x40b2a5 [ 2424.463229] Code: 05 bb 80 96 98 00 48 8b 54 24 28 48 8b 72 30 c6 86 15 01 00 00 01 48 8b 44 24 40 48 89 d9 31 db 0f 1f 44 00 00 e8 db 4c 02 00 <48> 8b 15 cc ec 70 00 48 8b 12 48 85 d2 74 1f 48 89 14 24 48 c7 44 [ 2424.482111] RSP: 002b:000000c00003fed0 EFLAGS: 00010202 [ 2424.487458] RAX: ffffffffffffff92 RBX: 0000000000000000 RCX: 00000000004668c3 [ 2424.494708] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000183e758 [ 2424.501960] RBP: 000000c00003ff00 R08: 0000000000000000 R09: 0000000000000000 [ 2424.509210] R10: 000000c00003feb0 R11: 0000000000000202 R12: 000000c00003feb0 [ 2424.516474] R13: 000000c000355c00 R14: 000000c0000004e0 R15: 00007f47abff20d0 [ 2424.568077] Mem-Info: [ 2424.570530] active_anon:16658 inactive_anon:36563 isolated_anon:0 [ 2424.570530] active_file:221 inactive_file:258 isolated_file:32 [ 2424.570530] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2424.570530] slab_reclaimable:13539 slab_unreclaimable:116948 [ 2424.570530] mapped:19234 shmem:38042 pagetables:572 bounce:0 [ 2424.570530] free:25100 free_pcp:293 free_cma:0 [ 2424.671615] Node 0 active_anon:65484kB inactive_anon:79436kB active_file:72kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67936kB dirty:0kB writeback:0kB shmem:85020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2424.793197] Node 1 active_anon:1148kB inactive_anon:66816kB active_file:4kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:7300kB dirty:0kB writeback:0kB shmem:67148kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2424.847064] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:2860kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2424.903326] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2424.928474] Node 0 DMA32 free:35540kB min:35996kB low:44992kB high:53988kB active_anon:65316kB inactive_anon:76576kB active_file:52kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:2180kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2424.989910] lowmem_reserve[]: 0 0 1 1 1 [ 2424.993918] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2425.038715] lowmem_reserve[]: 0 0 0 0 0 [ 2425.042725] Node 1 Normal free:53436kB min:53876kB low:67344kB high:80812kB active_anon:1140kB inactive_anon:66816kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:156kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2425.152143] lowmem_reserve[]: 0 0 0 0 0 [ 2425.173990] Node 0 DMA: 1*4kB (E) 2*8kB (ME) 5*16kB (UME) 4*32kB (ME) 2*64kB (ME) 5*128kB (UME) 7*256kB (UME) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10980kB [ 2425.210790] Node 0 DMA32: 1303*4kB (ME) 655*8kB (ME) 390*16kB (UME) 182*32kB (ME) 87*64kB (ME) 24*128kB (M) 12*256kB (M) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35764kB [ 2425.254158] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2425.274451] Node 1 Normal: 343*4kB (UME) 263*8kB (ME) 138*16kB (ME) 68*32kB (ME) 14*64kB (UME) 7*128kB (UM) 4*256kB (UM) 4*512kB (UM) 4*1024kB (UME) 2*2048kB (UM) 8*4096kB (U) = 53684kB [ 2425.306050] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2425.322083] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2425.345228] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2425.354082] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2425.363875] 38076 total pagecache pages [ 2425.369470] 0 pages in swap cache [ 2425.372920] Swap cache stats: add 0, delete 0, find 0/0 [ 2425.392205] Free swap = 0kB [ 2425.398806] Total swap = 0kB [ 2425.401824] 2097051 pages RAM [ 2425.419337] 0 pages HighMem/MovableOnly [ 2425.423311] 369649 pages reserved [ 2425.429067] 0 pages cma reserved [ 2425.432428] Unreclaimable slab info: [ 2425.457941] Name Used Total [ 2425.463531] pid_2 30KB 96KB [ 2425.472572] batadv_tt_change_cache 2KB 3KB [ 2425.503555] batadv_tl_cache 7KB 12KB [ 2425.565942] SMC 6KB 34KB [ 2425.571324] TIPC 15KB 30KB [ 2425.600341] SCTPv6 20KB 24KB [ 2425.612689] DCCPv6 17KB 30KB [ 2425.643143] DCCP 16KB 28KB [ 2425.674528] RXRPC 16KB 19KB [ 2425.683595] rxrpc_call_jar 112KB 118KB [ 2425.714775] can_receiver 0KB 3KB [ 2425.720183] bridge_fdb_cache 14KB 23KB [ 2425.751158] fib6_nodes 235KB 252KB [ 2425.782652] ip6_dst_cache 547KB 547KB [ 2425.811790] RAWv6 106KB 114KB [ 2425.841026] UDPv6 37KB 45KB [ 2425.872738] TCPv6 27KB 36KB [ 2425.881873] nf_conntrack 9KB 11KB [ 2425.912764] t10_alua_lu_gp_cache 0KB 3KB [ 2425.941105] sd_ext_cdb 0KB 7KB [ 2425.950188] scsi_sense_cache 1056KB 1060KB [ 2425.992336] virtio_scsi_cmd 16KB 16KB [ 2426.017816] sgpool-128 8KB 8KB [ 2426.023233] sgpool-64 4KB 12KB [ 2426.050645] sgpool-32 2KB 15KB [ 2426.089157] sgpool-16 1KB 7KB [ 2426.094546] sgpool-8 0KB 7KB [ 2426.124080] mqueue_inode_cache 15KB 30KB [ 2426.156731] bio_post_read_ctx 14KB 15KB [ 2426.162181] bio-2 14KB 15KB [ 2426.190977] jfs_mp 7KB 7KB [ 2426.200288] cifs_small_rq 15KB 16KB [ 2426.234366] cifs_request 67KB 67KB [ 2426.239792] cifs_mpx_ids 0KB 7KB [ 2426.280659] nfs_commit_data 3KB 14KB [ 2426.301343] nfs_write_data 34KB 44KB [ 2426.312222] ext4_system_zone 1KB 7KB [ 2426.337503] bio-1 1KB 7KB [ 2426.342880] pid_namespace 3KB 11KB [ 2426.353227] rpc_buffers 17KB 25KB [ 2426.360470] rpc_tasks 2KB 7KB [ 2426.383924] UNIX 1462KB 1462KB [ 2426.394067] tcp_bind_bucket 1KB 4KB [ 2426.421327] ip_fib_trie 34KB 47KB [ 2426.432895] ip_fib_alias 166KB 181KB [ 2426.471643] ip_dst_cache 10KB 20KB [ 2426.498279] RAW 60KB 75KB [ 2426.503656] UDP 55KB 60KB [ 2426.535644] TCP 90KB 196KB [ 2426.541022] hugetlbfs_inode_cache 3KB 15KB [ 2426.580552] fscache_cookie_jar 1KB 7KB [ 2426.604097] eventpoll_pwq 32KB 51KB [ 2426.633289] eventpoll_epi 61KB 74KB [ 2426.643151] inotify_inode_mark 15KB 43KB [ 2426.681571] request_queue 199KB 199KB [ 2426.703205] blkdev_requests 1KB 3KB [ 2426.708682] blkdev_ioc 27KB 30KB [ 2426.714040] bio-0 947KB 975KB [ 2426.743875] biovec-max 1608KB 1625KB [ 2426.753689] biovec-64 914KB 921KB [ 2426.780425] biovec-16 146KB 150KB [ 2426.807646] bio_integrity_payload 1KB 8KB [ 2426.813374] khugepaged_mm_slot 8KB 34KB [ 2426.822516] uid_cache 0KB 4KB [ 2426.849598] dmaengine-unmap-2 0KB 3KB [ 2426.862285] skbuff_fclone_cache 39KB 86KB [ 2426.882472] skbuff_head_cache 7595KB 7968KB [ 2426.892864] configfs_dir_cache 3KB 7KB [ 2426.910477] file_lock_cache 52KB 166KB [ 2426.959196] file_lock_ctx 9KB 11KB [ 2426.964591] fsnotify_mark_connector 7KB 27KB [ 2426.999841] net_namespace 78KB 78KB [ 2427.051077] shmem_inode_cache 8222KB 8512KB [ 2427.075839] task_delay_info 251KB 407KB [ 2427.083113] taskstats 32KB 84KB [ 2427.140218] proc_dir_entry 892KB 900KB [ 2427.184083] pde_opener 12KB 69KB [ 2427.208283] seq_file 262KB 456KB [ 2427.213659] sigqueue 74KB 86KB [ 2427.275582] kernfs_node_cache 18320KB 18340KB [ 2427.280979] mnt_cache 226KB 232KB [ 2427.347403] filp 7121KB 7282KB [ 2427.352787] names_cache 118269KB 118324KB [ 2427.425569] iint_cache 25KB 39KB [ 2427.430952] key_jar 4KB 7KB [ 2427.491109] uts_namespace 4KB 11KB [ 2427.527520] nsproxy 17KB 59KB [ 2427.532897] vm_area_struct 3161KB 4400KB [ 2427.594190] mm_struct 451KB 669KB [ 2427.625283] fs_cache 255KB 304KB [ 2427.630667] files_cache 956KB 956KB [ 2427.685846] signal_cache 1825KB 1883KB [ 2427.692976] sighand_cache 550KB 638KB [ 2427.740118] task_struct 8010KB 8042KB [ 2427.799147] cred_jar 2155KB 2500KB [ 2427.804529] anon_vma_chain 1091KB 1732KB [ 2427.828579] anon_vma 163KB 319KB [ 2427.897139] pid 139KB 248KB [ 2427.902528] Acpi-Operand 156KB 194KB [ 2427.973162] Acpi-ParseExt 9KB 11KB [ 2428.012671] Acpi-Parse 41KB 47KB [ 2428.050248] Acpi-State 52KB 63KB [ 2428.100721] Acpi-Namespace 20KB 27KB [ 2428.137123] numa_policy 0KB 3KB [ 2428.142496] debug_objects_cache 1612KB 2143KB [ 2428.214420] trace_event_file 297KB 298KB [ 2428.247384] ftrace_event_field 398KB 401KB [ 2428.252855] pool_workqueue 142KB 156KB [ 2428.272954] page->ptl 463KB 766KB [ 2428.315747] kmalloc-2097152 2050KB 2050KB [ 2428.321134] kmalloc-524288 2056KB 2056KB [ 2428.399303] kmalloc-262144 1290KB 1290KB [ 2428.449165] kmalloc-131072 650KB 650KB [ 2428.493700] kmalloc-65536 2640KB 2706KB [ 2428.530061] kmalloc-32768 2145KB 2145KB [ 2428.573704] kmalloc-16384 1320KB 1386KB [ 2428.603504] kmalloc-8192 5494KB 5494KB [ 2428.652429] kmalloc-4096 27854KB 27892KB [ 2428.682053] kmalloc-2048 16810KB 16951KB [ 2428.719898] kmalloc-1024 11658KB 11662KB [ 2428.725329] kmalloc-512 15136KB 15498KB [ 2428.730689] kmalloc-256 5422KB 5940KB [ 2428.771718] kmalloc-128 1310KB 1575KB [ 2428.817635] kmalloc-96 3336KB 4292KB [ 2428.823014] kmalloc-64 2609KB 3428KB [ 2428.907829] kmalloc-32 1928KB 2460KB [ 2428.913214] kmalloc-192 2142KB 2820KB [ 2428.992775] kmem_cache 177KB 183KB [ 2429.031178] Out of memory (oom_kill_allocating_task): Kill process 8111 (syz-fuzzer) score 0 or sacrifice child [ 2429.103588] Killed process 17677 (syz-executor.3) total-vm:48480kB, anon-rss:356kB, file-rss:4kB, shmem-rss:0kB [ 2429.192131] systemd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2429.292318] systemd cpuset=/ mems_allowed=0-1 [ 2429.336054] CPU: 0 PID: 1 Comm: systemd Not tainted 4.19.211-syzkaller #0 [ 2429.342994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2429.352340] Call Trace: [ 2429.354932] dump_stack+0x1fc/0x2ef [ 2429.358568] dump_header+0x15d/0xc3f [ 2429.362288] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2429.367389] ? ___ratelimit+0x319/0x590 [ 2429.371364] oom_kill_process.cold+0x10/0x692 [ 2429.375854] ? oom_badness.part.0+0x135/0x6e0 [ 2429.380348] ? lock_downgrade+0x720/0x720 [ 2429.384528] ? check_preemption_disabled+0x41/0x280 [ 2429.389544] out_of_memory+0x34d/0x1390 [ 2429.393521] ? oom_killer_disable+0x270/0x270 [ 2429.398020] ? mutex_trylock+0x15f/0x1a0 [ 2429.402088] __alloc_pages_nodemask+0x23a2/0x2890 [ 2429.406941] ? find_get_entry+0x4cd/0x8a0 [ 2429.411128] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2429.416000] alloc_pages_current+0x193/0x2a0 [ 2429.420408] filemap_fault+0x146e/0x2180 [ 2429.424484] ext4_filemap_fault+0x84/0xb0 [ 2429.428629] __do_fault+0x10b/0x4b0 [ 2429.432249] ? do_raw_spin_unlock+0x171/0x230 [ 2429.436750] __handle_mm_fault+0x273b/0x41c0 [ 2429.441159] ? vm_insert_page+0x9c0/0x9c0 [ 2429.445315] ? check_preemption_disabled+0x41/0x280 [ 2429.450335] handle_mm_fault+0x436/0xb10 [ 2429.454397] __do_page_fault+0x68e/0xd60 [ 2429.458464] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2429.463477] ? spurious_fault+0x840/0x840 [ 2429.467647] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2429.472489] ? page_fault+0x8/0x30 [ 2429.476030] page_fault+0x1e/0x30 [ 2429.479477] RIP: 0033:0x7f279675e5b0 [ 2429.483184] Code: Bad RIP value. [ 2429.486538] RSP: 002b:00007ffd299f0848 EFLAGS: 00010293 [ 2429.491893] RAX: 0000000000000007 RBX: 0000564dbb97e080 RCX: 0000000000073815 [ 2429.499154] RDX: ffffffffffffffff RSI: 00007ffd299f0850 RDI: 0000000000000007 [ 2429.506436] RBP: 00007ffd299f0b50 R08: 00007ffd299f5000 R09: 0000026dceb2d9ba [ 2429.513697] R10: 000e19891d3d085b R11: 0000000000000001 R12: 00007ffd299f0890 [ 2429.520961] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000002 [ 2429.531004] Mem-Info: [ 2429.533441] active_anon:16620 inactive_anon:36563 isolated_anon:0 [ 2429.533441] active_file:40 inactive_file:0 isolated_file:0 [ 2429.533441] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2429.533441] slab_reclaimable:13541 slab_unreclaimable:116534 [ 2429.533441] mapped:18800 shmem:38042 pagetables:547 bounce:0 [ 2429.533441] free:25223 free_pcp:150 free_cma:0 [ 2429.566972] Node 0 active_anon:65340kB inactive_anon:79436kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67900kB dirty:0kB writeback:0kB shmem:85020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2429.614472] Node 1 active_anon:1140kB inactive_anon:66816kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:7300kB dirty:0kB writeback:0kB shmem:67148kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2429.779361] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:2860kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2429.820618] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2429.861182] Node 0 DMA32 free:35908kB min:35996kB low:44992kB high:53988kB active_anon:65204kB inactive_anon:76576kB active_file:92kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:2080kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2429.912807] lowmem_reserve[]: 0 0 1 1 1 [ 2429.944463] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2429.992458] lowmem_reserve[]: 0 0 0 0 0 [ 2430.004000] Node 1 Normal free:53668kB min:53876kB low:67344kB high:80812kB active_anon:1136kB inactive_anon:66816kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2430.050897] lowmem_reserve[]: 0 0 0 0 0 [ 2430.054964] Node 0 DMA: 1*4kB (E) 2*8kB (ME) 5*16kB (UME) 4*32kB (ME) 2*64kB (ME) 5*128kB (UME) 7*256kB (UME) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10980kB [ 2430.089295] Node 0 DMA32: 1308*4kB (UME) 706*8kB (UME) 399*16kB (UME) 181*32kB (UME) 85*64kB (UME) 24*128kB (UM) 12*256kB (UM) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36176kB [ 2430.123847] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2430.171983] Node 1 Normal: 345*4kB (UME) 263*8kB (ME) 139*16kB (UME) 70*32kB (UME) 14*64kB (UME) 7*128kB (UM) 4*256kB (UM) 4*512kB (UM) 4*1024kB (UME) 2*2048kB (UM) 8*4096kB (U) = 53772kB [ 2430.219228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2430.251746] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2430.279027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2430.317209] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2430.348099] 38075 total pagecache pages [ 2430.352090] 0 pages in swap cache [ 2430.361015] Swap cache stats: add 0, delete 0, find 0/0 [ 2430.387217] Free swap = 0kB [ 2430.390239] Total swap = 0kB [ 2430.393246] 2097051 pages RAM [ 2430.412117] 0 pages HighMem/MovableOnly [ 2430.416150] 369649 pages reserved [ 2430.419591] 0 pages cma reserved [ 2430.422942] Unreclaimable slab info: [ 2430.451235] Name Used Total [ 2430.482564] pid_2 26KB 96KB [ 2430.491350] batadv_tt_change_cache 2KB 3KB [ 2430.520540] batadv_tl_cache 7KB 12KB [ 2430.532561] SMC 2KB 13KB [ 2430.561811] TIPC 15KB 30KB [ 2430.572290] SCTPv6 20KB 24KB [ 2430.595984] DCCPv6 17KB 30KB [ 2430.601356] DCCP 16KB 28KB [ 2430.610410] RXRPC 16KB 19KB [ 2430.634172] rxrpc_call_jar 112KB 118KB [ 2430.639616] can_receiver 0KB 3KB [ 2430.651801] bridge_fdb_cache 14KB 23KB [ 2430.662444] fib6_nodes 235KB 252KB [ 2430.672750] ip6_dst_cache 570KB 570KB [ 2430.701472] RAWv6 106KB 114KB [ 2430.710993] UDPv6 37KB 45KB [ 2430.739686] TCPv6 24KB 36KB [ 2430.750006] nf_conntrack 10KB 11KB [ 2430.769380] t10_alua_lu_gp_cache 0KB 3KB [ 2430.780576] sd_ext_cdb 0KB 7KB [ 2430.800764] scsi_sense_cache 1056KB 1060KB [ 2430.811303] virtio_scsi_cmd 16KB 16KB [ 2430.820610] sgpool-128 8KB 8KB [ 2430.880378] sgpool-64 4KB 12KB [ 2430.922164] sgpool-32 2KB 15KB [ 2430.979016] sgpool-16 1KB 7KB [ 2430.992497] sgpool-8 0KB 7KB [ 2431.030001] mqueue_inode_cache 15KB 30KB [ 2431.067266] bio_post_read_ctx 14KB 15KB [ 2431.072747] bio-2 14KB 15KB [ 2431.118775] jfs_mp 7KB 7KB [ 2431.124196] cifs_small_rq 15KB 16KB [ 2431.158969] cifs_request 67KB 67KB [ 2431.201595] cifs_mpx_ids 0KB 7KB [ 2431.230016] nfs_commit_data 3KB 14KB [ 2431.279608] nfs_write_data 34KB 44KB [ 2431.296145] ext4_system_zone 1KB 7KB [ 2431.301546] bio-1 1KB 7KB [ 2431.340293] pid_namespace 3KB 11KB [ 2431.352683] rpc_buffers 17KB 25KB [ 2431.358084] rpc_tasks 2KB 7KB [ 2431.363426] UNIX 1462KB 1462KB [ 2431.381547] tcp_bind_bucket 1KB 4KB [ 2431.390819] ip_fib_trie 34KB 47KB [ 2431.403458] ip_fib_alias 166KB 181KB [ 2431.413179] ip_dst_cache 14KB 20KB [ 2431.429614] RAW 60KB 75KB [ 2431.435555] UDP 55KB 60KB [ 2431.440918] TCP 19KB 101KB [ 2431.471180] hugetlbfs_inode_cache 3KB 15KB [ 2431.513626] fscache_cookie_jar 1KB 7KB [ 2431.544667] eventpoll_pwq 29KB 51KB [ 2431.550043] eventpoll_epi 55KB 74KB [ 2431.584026] inotify_inode_mark 13KB 43KB [ 2431.612797] request_queue 199KB 199KB [ 2431.638200] blkdev_requests 1KB 3KB [ 2431.643577] blkdev_ioc 27KB 30KB [ 2431.651978] bio-0 836KB 862KB [ 2431.689644] biovec-max 1584KB 1608KB [ 2431.739255] biovec-64 807KB 850KB [ 2431.753894] biovec-16 146KB 150KB [ 2431.782951] bio_integrity_payload 1KB 8KB [ 2431.822923] khugepaged_mm_slot 7KB 34KB [ 2431.852300] uid_cache 0KB 4KB [ 2431.883838] dmaengine-unmap-2 0KB 3KB [ 2431.911854] skbuff_fclone_cache 32KB 86KB [ 2431.944061] skbuff_head_cache 8018KB 8021KB [ 2431.971526] configfs_dir_cache 3KB 7KB [ 2432.006302] file_lock_cache 46KB 166KB [ 2432.011683] file_lock_ctx 9KB 11KB [ 2432.040725] fsnotify_mark_connector 6KB 27KB [ 2432.051775] net_namespace 78KB 78KB [ 2432.059934] shmem_inode_cache 8189KB 8501KB [ 2432.082908] task_delay_info 246KB 407KB [ 2432.089568] taskstats 27KB 80KB [ 2432.119251] proc_dir_entry 892KB 900KB [ 2432.142427] pde_opener 11KB 69KB [ 2432.168472] seq_file 243KB 456KB [ 2432.173845] sigqueue 69KB 86KB [ 2432.202088] kernfs_node_cache 18283KB 18329KB [ 2432.231387] mnt_cache 226KB 232KB [ 2432.236954] filp 7094KB 7282KB [ 2432.242313] names_cache 117686KB 117746KB [ 2432.271934] iint_cache 24KB 39KB [ 2432.304634] key_jar 4KB 7KB [ 2432.310013] uts_namespace 4KB 11KB [ 2432.335821] nsproxy 17KB 59KB [ 2432.341184] vm_area_struct 3088KB 4400KB [ 2432.377158] mm_struct 432KB 663KB [ 2432.383354] fs_cache 255KB 304KB [ 2432.411231] files_cache 956KB 956KB [ 2432.420317] signal_cache 1822KB 1883KB [ 2432.457934] sighand_cache 550KB 638KB [ 2432.463312] task_struct 8010KB 8042KB [ 2432.489682] cred_jar 2155KB 2500KB [ 2432.498768] anon_vma_chain 1055KB 1732KB [ 2432.533354] anon_vma 130KB 319KB [ 2432.538831] pid 139KB 248KB [ 2432.571110] Acpi-Operand 156KB 194KB [ 2432.593335] Acpi-ParseExt 9KB 11KB [ 2432.601239] Acpi-Parse 41KB 47KB [ 2432.635669] Acpi-State 52KB 63KB [ 2432.641045] Acpi-Namespace 20KB 27KB [ 2432.649151] numa_policy 0KB 3KB [ 2432.683100] debug_objects_cache 1612KB 2143KB [ 2432.692875] trace_event_file 297KB 298KB [ 2432.721156] ftrace_event_field 398KB 401KB [ 2432.729841] pool_workqueue 142KB 156KB [ 2432.766606] page->ptl 451KB 766KB [ 2432.772018] kmalloc-2097152 2050KB 2050KB [ 2432.781466] kmalloc-524288 2056KB 2056KB [ 2432.847817] kmalloc-262144 1290KB 1290KB [ 2432.856430] kmalloc-131072 650KB 650KB [ 2432.861801] kmalloc-65536 2640KB 2706KB [ 2432.893062] kmalloc-32768 2145KB 2145KB [ 2432.923482] kmalloc-16384 1287KB 1369KB [ 2432.932546] kmalloc-8192 5494KB 5494KB [ 2432.964381] kmalloc-4096 27778KB 27837KB [ 2432.969744] kmalloc-2048 16768KB 16951KB [ 2432.997816] kmalloc-1024 11793KB 11796KB [ 2433.003187] kmalloc-512 15750KB 15926KB [ 2433.036034] kmalloc-256 5422KB 5940KB [ 2433.041411] kmalloc-128 1310KB 1575KB [ 2433.072675] kmalloc-96 3344KB 4292KB [ 2433.081883] kmalloc-64 2605KB 3428KB [ 2433.112071] kmalloc-32 1928KB 2460KB [ 2433.142677] kmalloc-192 2142KB 2820KB [ 2433.148199] kmem_cache 177KB 183KB [ 2433.153557] Out of memory: Kill process 18574 (syz-executor.3) score 1001 or sacrifice child [ 2433.192315] Killed process 18583 (syz-executor.3) total-vm:62828kB, anon-rss:432kB, file-rss:14340kB, shmem-rss:80kB [ 2433.205158] oom_reaper: reaped process 18583 (syz-executor.3), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB [ 2433.221511] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2433.324237] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2433.329059] CPU: 0 PID: 8111 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2433.336504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2433.345853] Call Trace: [ 2433.348443] dump_stack+0x1fc/0x2ef [ 2433.352072] dump_header+0x15d/0xc3f [ 2433.355787] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2433.360889] ? ___ratelimit+0x319/0x590 [ 2433.364866] oom_kill_process.cold+0x10/0x692 [ 2433.369363] ? check_preemption_disabled+0x41/0x280 [ 2433.374383] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2433.379661] out_of_memory+0x1072/0x1390 [ 2433.383725] ? oom_killer_disable+0x270/0x270 [ 2433.388220] ? mutex_trylock+0x15f/0x1a0 [ 2433.392285] __alloc_pages_nodemask+0x23a2/0x2890 [ 2433.397131] ? find_get_entry+0x4cd/0x8a0 [ 2433.401290] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2433.406167] alloc_pages_current+0x193/0x2a0 [ 2433.410569] filemap_fault+0x146e/0x2180 [ 2433.414640] ext4_filemap_fault+0x84/0xb0 [ 2433.418783] __do_fault+0x10b/0x4b0 [ 2433.422409] __handle_mm_fault+0x273b/0x41c0 [ 2433.426821] ? vm_insert_page+0x9c0/0x9c0 [ 2433.430978] ? check_preemption_disabled+0x41/0x280 [ 2433.435999] handle_mm_fault+0x436/0xb10 [ 2433.440063] __do_page_fault+0x68e/0xd60 [ 2433.444125] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2433.449137] ? spurious_fault+0x840/0x840 [ 2433.453286] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2433.458131] ? page_fault+0x8/0x30 [ 2433.461669] page_fault+0x1e/0x30 [ 2433.465114] RIP: 0033:0x40b2a5 [ 2433.468300] Code: Bad RIP value. [ 2433.471653] RSP: 002b:000000c00003fed0 EFLAGS: 00010202 [ 2433.477007] RAX: ffffffffffffff92 RBX: 0000000000000000 RCX: 00000000004668c3 [ 2433.484272] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000183e758 [ 2433.491533] RBP: 000000c00003ff00 R08: 0000000000000000 R09: 0000000000000000 [ 2433.498793] R10: 000000c00003feb0 R11: 0000000000000202 R12: 000000c00003feb0 [ 2433.506057] R13: 000000c000355c00 R14: 000000c0000004e0 R15: 00007f47abff20d0 [ 2433.571776] Mem-Info: [ 2433.578079] active_anon:16516 inactive_anon:36563 isolated_anon:0 [ 2433.578079] active_file:37 inactive_file:35 isolated_file:0 [ 2433.578079] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2433.578079] slab_reclaimable:13515 slab_unreclaimable:116240 [ 2433.578079] mapped:18800 shmem:38042 pagetables:559 bounce:0 [ 2433.578079] free:20198 free_pcp:148 free_cma:0 [ 2433.649987] Node 0 active_anon:64928kB inactive_anon:79436kB active_file:116kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67900kB dirty:0kB writeback:0kB shmem:85020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2433.691205] Node 1 active_anon:1136kB inactive_anon:66816kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:7300kB dirty:0kB writeback:0kB shmem:67148kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2433.753286] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:2860kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2433.796951] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2433.801996] Node 0 DMA32 free:17820kB min:35996kB low:44992kB high:53988kB active_anon:64804kB inactive_anon:76576kB active_file:116kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:2080kB bounce:0kB free_pcp:420kB local_pcp:172kB free_cma:0kB [ 2433.864027] lowmem_reserve[]: 0 0 1 1 1 [ 2433.888106] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2433.894392] syz-executor.3: vmalloc: allocation failure, allocated 805670912 of 2128986112 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2433.952639] lowmem_reserve[]: 0 0 0 0 0 [ 2433.958711] Node 1 Normal free:26924kB min:53876kB low:67344kB high:80812kB active_anon:1132kB inactive_anon:66816kB active_file:12kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2433.991148] lowmem_reserve[]: 0 0 0 0 0 [ 2434.000260] Node 0 DMA: 2*4kB (UE) 3*8kB (UME) 4*16kB (ME) 5*32kB (UME) 2*64kB (ME) 4*128kB (UME) 7*256kB (UME) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10880kB [ 2434.042324] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2434.068414] Node 0 DMA32: 1223*4kB (ME) 543*8kB (ME) 253*16kB (UME) 88*32kB (UME) 27*64kB (UME) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18212kB [ 2434.074623] CPU: 0 PID: 18590 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2434.090957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2434.100310] Call Trace: [ 2434.102900] dump_stack+0x1fc/0x2ef [ 2434.106531] warn_alloc.cold+0x7b/0x18f [ 2434.110509] ? zone_watermark_ok_safe+0x260/0x260 [ 2434.115377] __vmalloc_area_node+0x4fd/0x780 [ 2434.119804] ? __vmalloc_node_range+0x180/0x180 [ 2434.124478] ? _raw_spin_unlock+0x29/0x40 [ 2434.128631] ? __get_vm_area_node+0x2e2/0x3a0 [ 2434.130797] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2434.133126] __vmalloc_node_range+0xed/0x180 [ 2434.148519] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2434.152843] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2434.158206] vmalloc_user+0x70/0xe0 [ 2434.161832] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2434.166154] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2434.170304] __vb2_queue_alloc+0x472/0xe60 [ 2434.172258] Node 1 Normal: 343*4kB (ME) 264*8kB (ME) 140*16kB (UME) 69*32kB (UME) 14*64kB (UME) 6*128kB (M) 4*256kB (UM) 4*512kB (UM) 4*1024kB (UME) 1*2048kB (M) 2*4096kB (U) = 27004kB [ 2434.174545] vb2_core_create_bufs+0x273/0x7e0 [ 2434.174561] ? __vb2_queue_free+0x870/0x870 [ 2434.174576] ? __video_do_ioctl+0x632/0xcd0 [ 2434.174600] ? __mutex_lock+0x368/0x1190 [ 2434.174616] vb2_create_bufs+0x332/0x620 [ 2434.174633] ? mark_held_locks+0xf0/0xf0 [ 2434.216396] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2434.221505] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2434.226608] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2434.231803] v4l_create_bufs+0xb2/0x160 [ 2434.235784] __video_do_ioctl+0x49a/0xcd0 [ 2434.239940] ? v4l_querycap+0x340/0x340 [ 2434.241190] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2434.243912] ? __might_fault+0x192/0x1d0 [ 2434.256780] ? v4l_querycap+0x340/0x340 [ 2434.260755] video_usercopy+0x13f/0xfa0 [ 2434.264767] ? v4l_enumstd+0x60/0x60 [ 2434.268481] ? do_futex+0x171/0x1880 [ 2434.272196] ? mark_held_locks+0xf0/0xf0 [ 2434.276258] ? debug_check_no_obj_freed+0x201/0x490 [ 2434.281280] ? video_usercopy+0xfa0/0xfa0 [ 2434.285424] v4l2_ioctl+0x147/0x1a0 [ 2434.289049] ? video_devdata+0xa0/0xa0 [ 2434.292940] do_vfs_ioctl+0xcdb/0x12e0 [ 2434.296826] ? lock_downgrade+0x720/0x720 [ 2434.299707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2434.300974] ? check_preemption_disabled+0x41/0x280 [ 2434.314527] ? ioctl_preallocate+0x200/0x200 [ 2434.318937] ? __fget+0x356/0x510 [ 2434.322387] ? do_dup2+0x450/0x450 [ 2434.325927] ? __se_sys_futex+0x298/0x3b0 [ 2434.330080] ksys_ioctl+0x9b/0xc0 [ 2434.333534] __x64_sys_ioctl+0x6f/0xb0 [ 2434.337419] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2434.337847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2434.341996] do_syscall_64+0xf9/0x620 [ 2434.354606] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2434.359791] RIP: 0033:0x7f111ac68209 [ 2434.363500] Code: Bad RIP value. [ 2434.366854] RSP: 002b:00007f11195bc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2434.374556] RAX: ffffffffffffffda RBX: 00007f111ad7b030 RCX: 00007f111ac68209 [ 2434.381820] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 2434.389081] RBP: 00007f111acc2161 R08: 0000000000000000 R09: 0000000000000000 [ 2434.396346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2434.397762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2434.403607] R13: 00007ffcf4e3131f R14: 00007f11195bc300 R15: 0000000000022000 [ 2434.448998] warn_alloc_show_mem: 2 callbacks suppressed [ 2434.449003] Mem-Info: [ 2434.453642] 38076 total pagecache pages [ 2434.460848] 0 pages in swap cache [ 2434.491393] Swap cache stats: add 0, delete 0, find 0/0 [ 2434.499650] active_anon:16507 inactive_anon:36563 isolated_anon:0 [ 2434.499650] active_file:14 inactive_file:20 isolated_file:0 [ 2434.499650] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2434.499650] slab_reclaimable:13512 slab_unreclaimable:115846 [ 2434.499650] mapped:18800 shmem:38042 pagetables:559 bounce:0 [ 2434.499650] free:14368 free_pcp:56 free_cma:0 [ 2434.511615] Free swap = 0kB [ 2434.550355] Total swap = 0kB [ 2434.562195] 2097051 pages RAM [ 2434.573111] 0 pages HighMem/MovableOnly [ 2434.580452] Node 0 active_anon:64896kB inactive_anon:79436kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67900kB dirty:0kB writeback:0kB shmem:85020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2434.601011] 369649 pages reserved [ 2434.641269] 0 pages cma reserved [ 2434.651299] Node 1 active_anon:1132kB inactive_anon:66816kB active_file:12kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:7300kB dirty:0kB writeback:0kB shmem:67148kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2434.659038] Unreclaimable slab info: [ 2434.703573] Name Used Total [ 2434.733314] pid_2 23KB 96KB [ 2434.758333] batadv_tt_change_cache 2KB 3KB [ 2434.767864] batadv_tl_cache 7KB 12KB [ 2434.773243] TIPC 15KB 30KB [ 2434.811188] SCTPv6 20KB 24KB [ 2434.844472] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:2860kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2434.882095] DCCPv6 17KB 30KB [ 2434.887536] DCCP 16KB 28KB [ 2434.888731] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2434.892961] RXRPC 16KB 19KB [ 2434.898015] Node 0 DMA32 free:18868kB min:35996kB low:44992kB high:53988kB active_anon:64772kB inactive_anon:76576kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:2080kB bounce:0kB free_pcp:184kB local_pcp:184kB free_cma:0kB [ 2434.924084] rxrpc_call_jar 112KB 118KB [ 2434.932283] lowmem_reserve[]: 0 0 1 1 1 [ 2434.941535] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2434.954095] can_receiver 0KB 3KB [ 2434.969532] lowmem_reserve[]: 0 0 0 0 0 [ 2434.977063] Node 1 Normal free:27792kB min:53876kB low:67344kB high:80812kB active_anon:1132kB inactive_anon:66816kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2434.994079] bridge_fdb_cache 14KB 23KB [ 2435.016526] fib6_nodes 235KB 252KB [ 2435.021895] ip6_dst_cache 573KB 573KB [ 2435.027351] RAWv6 106KB 114KB [ 2435.032708] UDPv6 37KB 45KB [ 2435.034072] lowmem_reserve[]: 0 0 0 0 0 [ 2435.038131] TCPv6 21KB 36KB [ 2435.042019] Node 0 DMA: 2*4kB (UE) 3*8kB (UME) 4*16kB (ME) 5*32kB (UME) 2*64kB (ME) 4*128kB (UME) 7*256kB (UME) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10880kB [ 2435.047398] nf_conntrack 9KB 11KB [ 2435.047462] t10_alua_lu_gp_cache 0KB 3KB [ 2435.073945] sd_ext_cdb 0KB 7KB [ 2435.079349] scsi_sense_cache 1056KB 1060KB [ 2435.084811] virtio_scsi_cmd 16KB 16KB [ 2435.087560] Node 0 DMA32: 1224*4kB (UME) 577*8kB (UME) 268*16kB (UMEH) 90*32kB (UME) 27*64kB (UME) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18792kB [ 2435.090216] sgpool-128 8KB 8KB [ 2435.105217] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2435.110478] sgpool-64 4KB 12KB [ 2435.121545] Node 1 Normal: 347*4kB (UME) 264*8kB (ME) 138*16kB (ME) 72*32kB (UME) 16*64kB (UME) 7*128kB (UM) 5*256kB (UM) 4*512kB (UM) 4*1024kB (UME) 1*2048kB (M) 2*4096kB (U) = 27596kB [ 2435.131403] sgpool-32 2KB 15KB [ 2435.149104] sgpool-16 1KB 7KB [ 2435.154522] sgpool-8 0KB 7KB [ 2435.159893] mqueue_inode_cache 15KB 30KB [ 2435.165393] bio_post_read_ctx 14KB 15KB [ 2435.170823] bio-2 14KB 15KB [ 2435.176275] jfs_mp 7KB 7KB [ 2435.177916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2435.181653] cifs_small_rq 15KB 16KB [ 2435.190548] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2435.195875] cifs_request 67KB 67KB [ 2435.195884] cifs_mpx_ids 0KB 7KB [ 2435.195913] nfs_commit_data 3KB 14KB [ 2435.195928] nfs_write_data 34KB 44KB [ 2435.204746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2435.209909] ext4_system_zone 1KB 7KB [ 2435.215265] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2435.220629] bio-1 1KB 7KB [ 2435.228507] 38076 total pagecache pages [ 2435.240498] pid_namespace 3KB 11KB [ 2435.248893] 0 pages in swap cache [ 2435.248902] Swap cache stats: add 0, delete 0, find 0/0 [ 2435.248907] Free swap = 0kB [ 2435.248911] Total swap = 0kB [ 2435.248920] 2097051 pages RAM [ 2435.248925] 0 pages HighMem/MovableOnly [ 2435.248930] 369649 pages reserved [ 2435.248935] 0 pages cma reserved [ 2435.292972] rpc_buffers 17KB 25KB [ 2435.298364] rpc_tasks 2KB 7KB [ 2435.303720] UNIX 1458KB 1462KB [ 2435.309231] tcp_bind_bucket 1KB 4KB [ 2435.314637] ip_fib_trie 34KB 47KB [ 2435.319995] ip_fib_alias 166KB 181KB [ 2435.325473] ip_dst_cache 12KB 20KB [ 2435.330830] RAW 60KB 75KB [ 2435.341877] UDP 55KB 60KB [ 2435.347283] TCP 14KB 78KB [ 2435.352818] hugetlbfs_inode_cache 3KB 15KB [ 2435.358603] fscache_cookie_jar 1KB 7KB [ 2435.364087] eventpoll_pwq 26KB 51KB [ 2435.369444] eventpoll_epi 50KB 74KB [ 2435.374862] inotify_inode_mark 13KB 43KB [ 2435.380315] request_queue 199KB 199KB [ 2435.385712] blkdev_requests 1KB 3KB [ 2435.391073] blkdev_ioc 23KB 30KB [ 2435.396479] bio-0 819KB 862KB [ 2435.401838] biovec-max 1584KB 1608KB [ 2435.407303] biovec-64 802KB 850KB [ 2435.412658] biovec-16 143KB 150KB [ 2435.418050] bio_integrity_payload 1KB 8KB [ 2435.423757] khugepaged_mm_slot 7KB 34KB [ 2435.429253] uid_cache 0KB 4KB [ 2435.434650] dmaengine-unmap-2 0KB 3KB [ 2435.440012] skbuff_fclone_cache 24KB 82KB [ 2435.452379] skbuff_head_cache 8281KB 8283KB [ 2435.457794] configfs_dir_cache 3KB 7KB [ 2435.463242] file_lock_cache 42KB 162KB [ 2435.468674] file_lock_ctx 9KB 11KB [ 2435.474058] fsnotify_mark_connector 6KB 27KB [ 2435.479933] net_namespace 78KB 78KB [ 2435.485449] shmem_inode_cache 8154KB 8481KB [ 2435.490813] task_delay_info 239KB 407KB [ 2435.496199] taskstats 23KB 80KB [ 2435.501555] proc_dir_entry 892KB 900KB [ 2435.506968] pde_opener 11KB 69KB [ 2435.512325] seq_file 225KB 456KB [ 2435.517743] sigqueue 58KB 86KB [ 2435.523101] kernfs_node_cache 18199KB 18329KB [ 2435.528525] mnt_cache 226KB 232KB [ 2435.533886] filp 7060KB 7282KB [ 2435.539290] names_cache 116097KB 116156KB [ 2435.544676] iint_cache 24KB 39KB [ 2435.550047] key_jar 4KB 7KB [ 2435.560650] uts_namespace 4KB 11KB [ 2435.566120] nsproxy 17KB 59KB [ 2435.571483] vm_area_struct 3064KB 4396KB [ 2435.576916] mm_struct 414KB 663KB [ 2435.582277] fs_cache 249KB 304KB [ 2435.587677] files_cache 945KB 956KB [ 2435.593039] signal_cache 1814KB 1883KB [ 2435.598431] sighand_cache 538KB 638KB [ 2435.603794] task_struct 7985KB 8029KB [ 2435.609181] cred_jar 2149KB 2500KB [ 2435.614579] anon_vma_chain 1040KB 1732KB [ 2435.619943] anon_vma 116KB 319KB [ 2435.625343] pid 139KB 248KB [ 2435.630702] Acpi-Operand 156KB 194KB [ 2435.636106] Acpi-ParseExt 9KB 11KB [ 2435.641460] Acpi-Parse 41KB 47KB [ 2435.646850] Acpi-State 52KB 63KB [ 2435.652208] Acpi-Namespace 20KB 27KB [ 2435.657601] numa_policy 0KB 3KB [ 2435.662960] debug_objects_cache 1612KB 2143KB [ 2435.679684] trace_event_file 297KB 298KB [ 2435.685089] ftrace_event_field 398KB 401KB [ 2435.690539] pool_workqueue 142KB 156KB [ 2435.695985] page->ptl 439KB 766KB [ 2435.701379] kmalloc-2097152 2050KB 2050KB [ 2435.706801] kmalloc-524288 2056KB 2056KB [ 2435.712163] kmalloc-262144 1290KB 1290KB [ 2435.717583] kmalloc-131072 650KB 650KB [ 2435.722942] kmalloc-65536 2640KB 2706KB [ 2435.728476] kmalloc-32768 2145KB 2145KB [ 2435.733841] kmalloc-16384 1287KB 1369KB [ 2435.739234] kmalloc-8192 5494KB 5494KB [ 2435.744631] kmalloc-4096 27710KB 27752KB [ 2435.749986] kmalloc-2048 16768KB 16951KB [ 2435.755382] kmalloc-1024 11851KB 11851KB [ 2435.760737] kmalloc-512 16091KB 16091KB [ 2435.766133] kmalloc-256 5439KB 5940KB [ 2435.771492] kmalloc-128 1310KB 1575KB [ 2435.783859] kmalloc-96 3359KB 4292KB [ 2435.789259] kmalloc-64 2604KB 3428KB [ 2435.794689] kmalloc-32 1928KB 2460KB [ 2435.800047] kmalloc-192 2136KB 2820KB [ 2435.805455] kmem_cache 177KB 183KB [ 2435.810822] Out of memory (oom_kill_allocating_task): Kill process 8111 (syz-fuzzer) score 0 or sacrifice child [ 2435.821151] Killed process 17675 (syz-executor.5) total-vm:48480kB, anon-rss:356kB, file-rss:4kB, shmem-rss:0kB [ 2435.849067] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2435.860576] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2435.879394] CPU: 0 PID: 8111 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2435.886850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2435.896197] Call Trace: [ 2435.898786] dump_stack+0x1fc/0x2ef [ 2435.902422] dump_header+0x15d/0xc3f [ 2435.906141] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2435.911349] ? ___ratelimit+0x319/0x590 [ 2435.915331] oom_kill_process.cold+0x10/0x692 [ 2435.919831] ? check_preemption_disabled+0x41/0x280 [ 2435.924852] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2435.930127] out_of_memory+0x1072/0x1390 [ 2435.934193] ? oom_killer_disable+0x270/0x270 [ 2435.938691] ? mutex_trylock+0x15f/0x1a0 [ 2435.942758] __alloc_pages_nodemask+0x23a2/0x2890 [ 2435.947608] ? find_get_entry+0x4cd/0x8a0 [ 2435.951769] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2435.956638] alloc_pages_current+0x193/0x2a0 [ 2435.961049] filemap_fault+0x146e/0x2180 [ 2435.965124] ext4_filemap_fault+0x84/0xb0 [ 2435.969269] __do_fault+0x10b/0x4b0 [ 2435.972899] __handle_mm_fault+0x273b/0x41c0 [ 2435.977311] ? vm_insert_page+0x9c0/0x9c0 [ 2435.981475] ? check_preemption_disabled+0x41/0x280 [ 2435.986498] handle_mm_fault+0x436/0xb10 [ 2435.990567] __do_page_fault+0x68e/0xd60 [ 2435.994635] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2435.999651] ? spurious_fault+0x840/0x840 [ 2436.003797] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2436.008645] ? page_fault+0x8/0x30 [ 2436.012186] page_fault+0x1e/0x30 [ 2436.015638] RIP: 0033:0x40b2a5 [ 2436.018827] Code: Bad RIP value. [ 2436.022186] RSP: 002b:000000c00003fed0 EFLAGS: 00010202 [ 2436.027545] RAX: ffffffffffffff92 RBX: 0000000000000000 RCX: 00000000004668c3 [ 2436.034811] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000183e758 [ 2436.042076] RBP: 000000c00003ff00 R08: 0000000000000000 R09: 0000000000000000 [ 2436.049341] R10: 000000c00003feb0 R11: 0000000000000202 R12: 000000c00003feb0 [ 2436.056603] R13: 000000c000355c00 R14: 000000c0000004e0 R15: 00007f47abff20d0 [ 2436.069946] Mem-Info: [ 2436.073160] active_anon:16416 inactive_anon:36563 isolated_anon:0 [ 2436.073160] active_file:18 inactive_file:341 isolated_file:0 [ 2436.073160] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2436.073160] slab_reclaimable:13479 slab_unreclaimable:115895 [ 2436.073160] mapped:15300 shmem:38042 pagetables:547 bounce:0 [ 2436.073160] free:29503 free_pcp:515 free_cma:0 [ 2436.114191] Node 0 active_anon:64532kB inactive_anon:79436kB active_file:52kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53600kB dirty:0kB writeback:0kB shmem:85020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2436.152409] Node 1 active_anon:1132kB inactive_anon:66816kB active_file:120kB inactive_file:4716kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:9900kB dirty:0kB writeback:0kB shmem:67148kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2436.189193] Node 0 DMA free:10880kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:2860kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2436.359483] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2436.384335] Node 0 DMA32 free:32760kB min:35996kB low:44992kB high:53988kB active_anon:64308kB inactive_anon:76576kB active_file:52kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:2032kB bounce:0kB free_pcp:1984kB local_pcp:1276kB free_cma:0kB [ 2436.506370] lowmem_reserve[]: 0 0 1 1 1 [ 2436.518756] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2436.616360] lowmem_reserve[]: 0 0 0 0 0 [ 2436.620368] Node 1 Normal free:151472kB min:53876kB low:67344kB high:80812kB active_anon:1732kB inactive_anon:66816kB active_file:2120kB inactive_file:7916kB unevictable:0kB writepending:296kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:480kB pagetables:156kB bounce:0kB free_pcp:384kB local_pcp:300kB free_cma:0kB [ 2436.697691] lowmem_reserve[]: 0 0 0 0 0 [ 2436.716359] Node 0 DMA: 3*4kB (UE) 3*8kB (UME) 4*16kB (ME) 5*32kB (UME) 2*64kB (ME) 4*128kB (UME) 7*256kB (UME) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10884kB [ 2436.779446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2436.787098] Node 0 DMA32: 1302*4kB (UME) 1200*8kB (UME) 328*16kB (UMEH) 132*32kB (UME) 74*64kB (UME) 29*128kB (UM) 19*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37592kB [ 2436.813654] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2436.814053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2436.825194] Node 1 Normal: 12*4kB (ME) 16*8kB (UME) 5*16kB (UE) 8*32kB (UME) 27*64kB (UME) 960*128kB (UM) 23*256kB (U) 13*512kB (U) 15*1024kB (UME) 8*2048kB (UM) 3*4096kB (U) = 181696kB [ 2436.848480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2436.858062] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2436.866959] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2436.876351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2436.885257] 41033 total pagecache pages [ 2436.889232] 0 pages in swap cache [ 2436.892679] Swap cache stats: add 0, delete 0, find 0/0 [ 2436.898370] Free swap = 0kB [ 2436.901386] Total swap = 0kB [ 2436.904771] 2097051 pages RAM [ 2436.909494] 0 pages HighMem/MovableOnly [ 2436.913674] 369649 pages reserved [ 2436.921618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2436.923997] 0 pages cma reserved [ 2436.945556] Unreclaimable slab info: [ 2436.949278] Name Used Total [ 2436.964029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2436.965530] pid_2 20KB 96KB [ 2436.977883] device bridge_slave_1 left promiscuous mode [ 2436.983379] bridge0: port 2(bridge_slave_1) entered disabled state [ 2436.997278] batadv_tt_change_cache 3KB 3KB [ 2437.003193] batadv_tl_cache 7KB 12KB [ 2437.024250] device bridge_slave_0 left promiscuous mode [ 2437.026095] TIPC 15KB 30KB [ 2437.029758] bridge0: port 1(bridge_slave_0) entered disabled state [ 2437.057099] SCTPv6 20KB 24KB [ 2437.062521] DCCPv6 17KB 30KB [ 2437.068139] device veth1_macvtap left promiscuous mode [ 2437.073442] device veth0_macvtap left promiscuous mode [ 2437.094027] device veth1_vlan left promiscuous mode [ 2437.097222] DCCP 16KB 28KB [ 2437.099085] device veth0_vlan left promiscuous mode [ 2437.137461] RXRPC 16KB 19KB [ 2437.142848] rxrpc_call_jar 112KB 118KB [ 2437.177287] can_receiver 0KB 3KB [ 2437.182669] bridge_fdb_cache 14KB 23KB [ 2437.218183] fib6_nodes 235KB 252KB [ 2437.223570] ip6_dst_cache 573KB 573KB [ 2437.265775] RAWv6 106KB 114KB [ 2437.271163] UDPv6 37KB 45KB [ 2437.305556] TCPv6 21KB 36KB [ 2437.310949] nf_conntrack 9KB 11KB [ 2437.343983] t10_alua_lu_gp_cache 0KB 3KB [ 2437.349674] sd_ext_cdb 0KB 7KB [ 2437.357231] scsi_sense_cache 1056KB 1060KB [ 2437.362599] virtio_scsi_cmd 16KB 16KB [ 2437.383959] sgpool-128 8KB 8KB [ 2437.389368] sgpool-64 4KB 12KB [ 2437.403951] sgpool-32 2KB 15KB [ 2437.409365] sgpool-16 1KB 7KB [ 2437.419743] sgpool-8 0KB 7KB [ 2437.433986] mqueue_inode_cache 15KB 30KB [ 2437.439460] bio_post_read_ctx 14KB 15KB [ 2437.454055] bio-2 14KB 15KB [ 2437.459430] jfs_mp 7KB 7KB [ 2437.474006] cifs_small_rq 15KB 16KB [ 2437.479384] cifs_request 67KB 67KB [ 2437.503937] cifs_mpx_ids 0KB 7KB [ 2437.509406] nfs_commit_data 3KB 14KB [ 2437.515118] nfs_write_data 34KB 44KB [ 2437.520512] ext4_system_zone 1KB 7KB [ 2437.533933] bio-1 1KB 7KB [ 2437.545557] pid_namespace 3KB 11KB [ 2437.550945] rpc_buffers 17KB 25KB [ 2437.585384] rpc_tasks 2KB 7KB [ 2437.590769] UNIX 1470KB 1470KB [ 2437.626542] tcp_bind_bucket 1KB 4KB [ 2437.631934] ip_fib_trie 34KB 47KB [ 2437.677252] ip_fib_alias 166KB 181KB [ 2437.682643] ip_dst_cache 12KB 20KB [ 2437.705410] RAW 60KB 75KB [ 2437.710797] UDP 55KB 60KB [ 2437.737773] TCP 14KB 78KB [ 2437.743158] hugetlbfs_inode_cache 3KB 15KB [ 2437.757651] fscache_cookie_jar 1KB 7KB [ 2437.763445] eventpoll_pwq 25KB 51KB [ 2437.778142] eventpoll_epi 46KB 74KB [ 2437.783786] inotify_inode_mark 12KB 43KB [ 2437.803314] request_queue 199KB 199KB [ 2437.811640] blkdev_requests 1KB 3KB [ 2437.829783] blkdev_ioc 28KB 30KB [ 2437.843483] bio-0 733KB 738KB [ 2437.865706] biovec-max 1485KB 1592KB [ 2437.871084] biovec-64 704KB 740KB [ 2437.897468] biovec-16 128KB 150KB [ 2437.902848] bio_integrity_payload 1KB 8KB [ 2437.925617] khugepaged_mm_slot 7KB 34KB [ 2437.945374] uid_cache 0KB 4KB [ 2437.950750] dmaengine-unmap-2 0KB 3KB [ 2437.977207] skbuff_fclone_cache 33KB 78KB [ 2437.982762] skbuff_head_cache 8135KB 8227KB [ 2438.005573] configfs_dir_cache 3KB 7KB [ 2438.011043] file_lock_cache 41KB 162KB [ 2438.038017] file_lock_ctx 9KB 11KB [ 2438.043400] fsnotify_mark_connector 6KB 27KB [ 2438.065562] net_namespace 78KB 78KB [ 2438.070941] shmem_inode_cache 8148KB 8469KB [ 2438.097225] task_delay_info 234KB 407KB [ 2438.102609] taskstats 22KB 80KB [ 2438.198252] proc_dir_entry 892KB 900KB [ 2438.203689] pde_opener 14KB 69KB [ 2438.254010] seq_file 221KB 456KB [ 2438.259388] sigqueue 58KB 86KB [ 2438.293899] kernfs_node_cache 18115KB 18281KB [ 2438.299313] mnt_cache 226KB 232KB [ 2438.321608] filp 7171KB 7282KB [ 2438.331969] names_cache 115991KB 115991KB [ 2438.337443] iint_cache 28KB 39KB [ 2438.350070] key_jar 4KB 7KB [ 2438.355531] uts_namespace 4KB 11KB [ 2438.360894] nsproxy 17KB 59KB [ 2438.372195] vm_area_struct 3075KB 4396KB [ 2438.377638] mm_struct 453KB 663KB [ 2438.382996] fs_cache 248KB 304KB [ 2438.393363] files_cache 935KB 956KB [ 2438.398797] signal_cache 1824KB 1883KB [ 2438.408924] sighand_cache 564KB 638KB [ 2438.414337] task_struct 8010KB 8029KB [ 2438.419690] cred_jar 2188KB 2500KB [ 2438.468827] anon_vma_chain 1037KB 1732KB [ 2438.474736] anon_vma 157KB 319KB [ 2438.480101] pid 154KB 248KB [ 2438.508746] Acpi-Operand 156KB 194KB [ 2438.514168] Acpi-ParseExt 9KB 11KB [ 2438.519524] Acpi-Parse 41KB 47KB [ 2438.538572] Acpi-State 52KB 63KB [ 2438.550570] Acpi-Namespace 20KB 27KB [ 2438.568722] numa_policy 0KB 3KB [ 2438.579943] debug_objects_cache 1612KB 2143KB [ 2438.594269] trace_event_file 297KB 298KB [ 2438.599643] ftrace_event_field 398KB 401KB [ 2438.639606] pool_workqueue 142KB 156KB [ 2438.668801] page->ptl 437KB 766KB [ 2438.688797] kmalloc-2097152 2050KB 2050KB [ 2438.702559] kmalloc-524288 2056KB 2056KB [ 2438.734479] kmalloc-262144 1290KB 1290KB [ 2438.739863] kmalloc-131072 650KB 650KB [ 2438.767257] kmalloc-65536 2640KB 2706KB [ 2438.772633] kmalloc-32768 2145KB 2145KB [ 2438.803397] kmalloc-16384 1287KB 1369KB [ 2438.821952] kmalloc-8192 5494KB 5494KB [ 2438.835099] kmalloc-4096 27833KB 27833KB [ 2438.840466] kmalloc-2048 16844KB 16951KB [ 2438.884572] kmalloc-1024 11993KB 11993KB [ 2438.890586] kmalloc-512 15916KB 15922KB [ 2438.906885] kmalloc-256 5447KB 5940KB [ 2438.923882] kmalloc-128 1310KB 1575KB [ 2438.929264] kmalloc-96 3374KB 4292KB [ 2438.953816] kmalloc-64 2604KB 3428KB [ 2438.971961] kmalloc-32 1928KB 2460KB [ 2438.993852] kmalloc-192 2151KB 2820KB [ 2438.999235] kmem_cache 177KB 183KB [ 2439.027937] Out of memory (oom_kill_allocating_task): Kill process 8111 (syz-fuzzer) score 0 or sacrifice child [ 2439.039108] Killed process 12048 (syz-executor.0) total-vm:48480kB, anon-rss:356kB, file-rss:4kB, shmem-rss:0kB 06:35:04 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000080)="916568c51dc83698b7f9cdeda822dcd4d8e036bf3c15af84b50c4d77ff03948657ef4547bfb6e98753be76222dc4f260c06321e309fe019a9edae748ba033a522da3344f9e85088a4e282241c4f69fa71335317c1443e3e08cc511cae40d9b63afdd4b2249cc072b7ab2319c330febc8c0195ad81e971093b4b239") 06:35:06 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000080)={{0x2, 0xc20b}, {0x1, 0x4}, 0x3}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0xfffffffd, 0x3, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0x2000002}) 06:35:06 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, r2, 0x0], &(0x7f0000000240)=[0x4], 0x10000, 0x6, 0x6}) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000080)=0x80000) 06:35:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000001780)=ANY=[@ANYBLOB="50030000", @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="caabc00680265c15befb874b3359ff1d0bd771613c84f5f14c7be6e06f2e312f88f030f0749d1c92dc1e196610dcf34899a422ccd9d7515977ceea61bc1da69d1408687d31e22d246d20ddcb9e765a0fbce02816fcb08967b0854c0b14c9323d219eb9193fd133d6e08150166597a17302830edb23b345408d1324e904cf096d0762176c503f0187d43b1c3e4092c76cc5219fc377fed6eea8d19261384421409ecc75f055ce8e0cc4829803fbdf4a091cabb8ae4440a5794adf930664caebb425a5bd103fae5d7db25c8b65b2fdd97f8fd0", @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="3c03028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ffffffff08000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040006000901050000000100eb066c0000007f0001ec010000803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040002000000"], 0x350}, 0x1, 0x0, 0x0, 0x800}, 0x4008007) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000f00)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) r11 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f0000000700)) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000f40)=ANY=[@ANYBLOB="64060000", @ANYRES16=r1, @ANYBLOB="000125bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400020000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004000700f8010100010008000100", @ANYRES32=r4, @ANYBLOB="7c0102803c0001626c6564000000000000000000000000000000000000000000000400040008000600"/60, @ANYRES32=r5, @ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="d000028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400010000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c000400ff00810101000000ffff6c8000100000ff071c026a0d0000060005030400000004000105010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0401028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff0000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c01028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400040000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES8=r8, @ANYBLOB="54000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000024000400010001000900000013c70805f4000000ff00810807000000020081ff0101000008000100", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x664}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r12 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$vim2m_VIDIOC_CREATE_BUFS(r12, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x8, 0x6, 0xba9, 0x4}, 'syz0\x00', 0x24}) 06:35:06 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f00000001c0)={0x0, 0xf6b, 0x2, '\x00', &(0x7f0000000080)=0x3f}) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000200)={0x2, "5af54295907a91db538c379c492d8ae085ba6cef5ad5cb890eef1cb676bc4cef", 0x1, 0x20, 0x1, 0xc54, 0x4, 0x2, 0x6, 0x7}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f00000001c0)={0x0, 0xf6b, 0x2, '\x00', &(0x7f0000000080)=0x3f}) (async) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000200)={0x2, "5af54295907a91db538c379c492d8ae085ba6cef5ad5cb890eef1cb676bc4cef", 0x1, 0x20, 0x1, 0xc54, 0x4, 0x2, 0x6, 0x7}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) 06:35:06 executing program 1: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x4, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:35:06 executing program 1: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x4, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) [ 2447.035730] device hsr_slave_1 left promiscuous mode [ 2447.046856] device hsr_slave_0 left promiscuous mode [ 2447.066273] team0 (unregistering): Port device team_slave_1 removed [ 2447.078149] team0 (unregistering): Port device team_slave_0 removed [ 2447.089709] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2447.102545] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2447.149081] bond0 (unregistering): Released all slaves [ 2447.828592] IPVS: ftp: loaded support on port[0] = 21 [ 2447.828607] IPVS: ftp: loaded support on port[0] = 21 [ 2447.839676] IPVS: ftp: loaded support on port[0] = 21 [ 2447.931582] IPVS: ftp: loaded support on port[0] = 21 [ 2448.348702] chnl_net:caif_netlink_parms(): no params data found [ 2448.556137] chnl_net:caif_netlink_parms(): no params data found [ 2448.578684] chnl_net:caif_netlink_parms(): no params data found [ 2448.683666] Bluetooth: hci0: command 0x0409 tx timeout [ 2448.697348] chnl_net:caif_netlink_parms(): no params data found 06:35:09 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) [ 2448.861063] bridge0: port 1(bridge_slave_0) entered blocking state [ 2448.893343] bridge0: port 1(bridge_slave_0) entered disabled state [ 2448.914608] device bridge_slave_0 entered promiscuous mode [ 2448.928824] bridge0: port 1(bridge_slave_0) entered blocking state [ 2448.938649] bridge0: port 1(bridge_slave_0) entered disabled state [ 2448.956357] device bridge_slave_0 entered promiscuous mode [ 2448.970973] bridge0: port 1(bridge_slave_0) entered blocking state [ 2448.980588] bridge0: port 1(bridge_slave_0) entered disabled state [ 2448.996921] device bridge_slave_0 entered promiscuous mode [ 2449.010610] bridge0: port 2(bridge_slave_1) entered blocking state [ 2449.020950] bridge0: port 2(bridge_slave_1) entered disabled state [ 2449.042372] device bridge_slave_1 entered promiscuous mode [ 2449.057394] bridge0: port 2(bridge_slave_1) entered blocking state [ 2449.068042] bridge0: port 2(bridge_slave_1) entered disabled state [ 2449.085747] device bridge_slave_1 entered promiscuous mode [ 2449.102533] bridge0: port 2(bridge_slave_1) entered blocking state [ 2449.126532] bridge0: port 2(bridge_slave_1) entered disabled state [ 2449.144179] device bridge_slave_1 entered promiscuous mode [ 2449.229588] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2449.248152] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2449.280095] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2449.308324] bridge0: port 1(bridge_slave_0) entered blocking state [ 2449.319716] bridge0: port 1(bridge_slave_0) entered disabled state [ 2449.332989] device bridge_slave_0 entered promiscuous mode [ 2449.341527] bridge0: port 2(bridge_slave_1) entered blocking state [ 2449.349273] bridge0: port 2(bridge_slave_1) entered disabled state [ 2449.363288] device bridge_slave_1 entered promiscuous mode [ 2449.385484] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2449.402688] team0: Port device team_slave_0 added [ 2449.421684] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2449.437943] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2449.469497] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2449.478110] team0: Port device team_slave_1 added [ 2449.501896] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2449.548250] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2449.565670] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2449.580926] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2449.597425] team0: Port device team_slave_0 added [ 2449.610810] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2449.622509] team0: Port device team_slave_1 added [ 2449.633810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2449.640056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2449.676634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2449.699397] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2449.707049] team0: Port device team_slave_0 added [ 2449.719382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2449.727207] Bluetooth: hci1: command 0x0409 tx timeout [ 2449.733287] Bluetooth: hci3: command 0x0409 tx timeout [ 2449.742066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2449.776166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2449.797240] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2449.809559] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2449.821612] team0: Port device team_slave_1 added [ 2449.849021] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2449.860033] team0: Port device team_slave_0 added [ 2449.870832] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2449.889640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2449.896435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2449.931968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2449.950756] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2449.959183] team0: Port device team_slave_1 added [ 2449.974320] Bluetooth: hci5: command 0x0409 tx timeout [ 2449.986643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2449.992887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2450.028302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2450.041951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2450.057465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2450.091829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2450.103810] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2450.129221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2450.136822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2450.171835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2450.191608] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2450.202851] device hsr_slave_0 entered promiscuous mode [ 2450.219799] device hsr_slave_1 entered promiscuous mode [ 2450.231869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2450.245945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2450.279820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2450.292084] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2450.317511] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2450.330006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2450.341846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2450.377044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2450.393492] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2450.409092] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2450.426676] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2450.437874] device hsr_slave_0 entered promiscuous mode [ 2450.445148] device hsr_slave_1 entered promiscuous mode [ 2450.457753] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2450.481130] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2450.490442] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2450.502346] device hsr_slave_0 entered promiscuous mode [ 2450.509073] device hsr_slave_1 entered promiscuous mode [ 2450.552258] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2450.566006] device hsr_slave_0 entered promiscuous mode [ 2450.576217] device hsr_slave_1 entered promiscuous mode [ 2450.592817] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2450.614374] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2450.657582] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2450.763127] Bluetooth: hci0: command 0x041b tx timeout [ 2451.802945] Bluetooth: hci3: command 0x041b tx timeout [ 2451.808327] Bluetooth: hci1: command 0x041b tx timeout [ 2451.850737] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 06:35:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 06:35:12 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, r2, 0x0], &(0x7f0000000240)=[0x4], 0x10000, 0x6, 0x6}) (async) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000080)=0x80000) 06:35:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) [ 2452.042948] Bluetooth: hci5: command 0x041b tx timeout 06:35:13 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x4, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) [ 2452.544990] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2452.852895] Bluetooth: hci0: command 0x040f tx timeout [ 2453.629082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2453.666405] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2453.695007] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2453.711454] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2453.728163] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2453.745116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2453.752510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2453.764975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2453.796848] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2453.803822] 8021q: adding VLAN 0 to HW filter on device team0 [ 2453.824646] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2453.842655] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2453.849305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2453.865887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2453.879777] bridge0: port 1(bridge_slave_0) entered blocking state [ 2453.886193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2453.893004] Bluetooth: hci1: command 0x040f tx timeout [ 2453.898439] Bluetooth: hci3: command 0x040f tx timeout [ 2453.902997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2453.924220] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2453.933745] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2453.950050] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2453.956215] 8021q: adding VLAN 0 to HW filter on device team0 [ 2454.123372] Bluetooth: hci5: command 0x040f tx timeout [ 2454.520249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2454.532211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2454.551757] bridge0: port 2(bridge_slave_1) entered blocking state [ 2454.558192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2454.574514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2454.581682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2454.598138] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2454.619631] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2454.645871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2454.655973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2454.665237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2454.674343] bridge0: port 1(bridge_slave_0) entered blocking state [ 2454.680715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2454.693477] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2454.932850] Bluetooth: hci0: command 0x0419 tx timeout [ 2455.201456] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2455.211977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2455.230046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2455.242040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2455.249456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2455.257789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2455.266433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2455.274827] bridge0: port 2(bridge_slave_1) entered blocking state [ 2455.281209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2455.290992] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2455.301798] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2455.318181] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2455.962679] Bluetooth: hci3: command 0x0419 tx timeout [ 2455.968151] Bluetooth: hci1: command 0x0419 tx timeout [ 2456.008837] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2456.023352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2456.031243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2456.039348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2456.049612] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2456.061375] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2456.075534] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2456.212690] Bluetooth: hci5: command 0x0419 tx timeout [ 2456.637454] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2456.644763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2456.660128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2456.667977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2456.677693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2456.685063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2456.694628] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2456.705848] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2456.721325] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2456.728791] 8021q: adding VLAN 0 to HW filter on device team0 [ 2457.341387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2457.348535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2457.364026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2457.371646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2457.403486] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2457.414007] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2457.429098] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2457.442876] 8021q: adding VLAN 0 to HW filter on device team0 [ 2457.451257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2457.460793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2457.469838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2457.478051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2457.490515] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2457.498054] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2457.505250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2457.512913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2457.521450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2457.631423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2457.640721] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2457.648521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2457.655920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2457.664843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2457.672212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2457.680744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2457.688775] bridge0: port 1(bridge_slave_0) entered blocking state [ 2457.695161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2457.705094] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2457.716741] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2457.865331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2457.872391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2457.881519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2457.889890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2457.899211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2457.907644] bridge0: port 2(bridge_slave_1) entered blocking state [ 2457.914308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2457.922790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2457.937328] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2457.951459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2457.959981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2457.970078] bridge0: port 1(bridge_slave_0) entered blocking state [ 2457.976493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2457.984868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2457.993697] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2457.999736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2458.009356] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2458.020431] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2458.029102] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2458.141472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2458.148651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2458.156957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2458.164990] bridge0: port 2(bridge_slave_1) entered blocking state [ 2458.171326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2458.179180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2458.191833] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2458.201809] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2458.211394] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2458.225563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2458.233680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2458.240341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2458.248552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2458.257463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2458.268467] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2458.276450] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2458.284498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2458.295704] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2458.406435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2458.416990] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2458.427160] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2458.435891] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2458.443186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2458.450967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2458.458810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2458.467059] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2458.475080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2458.481722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2458.491204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2458.501146] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2458.522782] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2458.529944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2458.538518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2458.546631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2458.554528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2458.564953] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2458.574995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2458.684520] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2458.691507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2458.699514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2458.707504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2458.716755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2458.727112] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2458.850564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2458.858242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2458.870367] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2458.876616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2458.885180] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2458.891216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2458.905310] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2458.938247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2458.948351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2458.956561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2458.963331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2458.970893] device bridge_slave_1 left promiscuous mode [ 2458.977067] bridge0: port 2(bridge_slave_1) entered disabled state [ 2458.984378] device bridge_slave_0 left promiscuous mode [ 2458.989821] bridge0: port 1(bridge_slave_0) entered disabled state [ 2458.998620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2459.005750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2459.014197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2459.020964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2459.029394] device bridge_slave_1 left promiscuous mode [ 2459.035265] bridge0: port 2(bridge_slave_1) entered disabled state [ 2459.042255] device bridge_slave_0 left promiscuous mode [ 2459.048217] bridge0: port 1(bridge_slave_0) entered disabled state [ 2459.057330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2459.064252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2459.071853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2459.078898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2459.087811] device bridge_slave_1 left promiscuous mode [ 2459.093804] bridge0: port 2(bridge_slave_1) entered disabled state [ 2459.100865] device bridge_slave_0 left promiscuous mode [ 2459.106598] bridge0: port 1(bridge_slave_0) entered disabled state [ 2459.118794] device veth1_macvtap left promiscuous mode [ 2459.124210] device veth0_macvtap left promiscuous mode [ 2459.129509] device veth1_vlan left promiscuous mode [ 2459.134840] device veth0_vlan left promiscuous mode [ 2459.140125] device veth1_macvtap left promiscuous mode [ 2459.145767] device veth0_macvtap left promiscuous mode [ 2459.151068] device veth1_vlan left promiscuous mode [ 2459.156251] device veth0_vlan left promiscuous mode [ 2459.161525] device veth1_macvtap left promiscuous mode [ 2459.167397] device veth0_macvtap left promiscuous mode [ 2459.172928] device veth1_vlan left promiscuous mode [ 2459.177962] device veth0_vlan left promiscuous mode [ 2468.523937] ieee802154 phy0 wpan0: encryption failed: -22 [ 2468.529520] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.742761] device hsr_slave_1 left promiscuous mode [ 2468.751064] device hsr_slave_0 left promiscuous mode [ 2468.773010] team0 (unregistering): Port device team_slave_1 removed [ 2468.783654] team0 (unregistering): Port device team_slave_0 removed [ 2468.793351] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2468.804112] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2468.836796] bond0 (unregistering): Released all slaves [ 2468.882385] device hsr_slave_1 left promiscuous mode [ 2468.889735] device hsr_slave_0 left promiscuous mode [ 2468.906718] team0 (unregistering): Port device team_slave_1 removed [ 2468.917649] team0 (unregistering): Port device team_slave_0 removed [ 2468.929320] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2468.939758] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2468.972754] bond0 (unregistering): Released all slaves [ 2469.014099] device hsr_slave_1 left promiscuous mode [ 2469.021528] device hsr_slave_0 left promiscuous mode [ 2469.039156] team0 (unregistering): Port device team_slave_1 removed [ 2469.048944] team0 (unregistering): Port device team_slave_0 removed [ 2469.058671] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2469.068943] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2469.104960] bond0 (unregistering): Released all slaves [ 2469.126460] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2469.137633] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2469.146885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2469.156100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2469.173364] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2469.180402] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2469.190683] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2469.200434] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2469.216301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2469.225427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2469.236947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2469.244467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2469.256683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2469.266897] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2469.278755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2469.286354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2469.294732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2469.344517] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2469.358557] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2469.366014] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2469.376321] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2469.384309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2469.395532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2469.408598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2469.416326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2469.425107] device veth0_vlan entered promiscuous mode [ 2469.434549] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2469.441585] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2469.448732] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2469.459282] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2469.470396] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2469.485015] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2469.492530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2469.500256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2469.510768] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2469.519377] device veth1_vlan entered promiscuous mode [ 2469.525606] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2469.534783] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2469.543150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2469.550712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2469.564825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2469.573546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2469.581268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2469.590270] device veth0_vlan entered promiscuous mode [ 2469.600874] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2469.608573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2469.618528] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2469.634487] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2469.645116] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2469.653932] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2469.660431] device veth1_vlan entered promiscuous mode [ 2469.666852] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2469.678315] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2469.692339] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2469.701387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2469.709890] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2469.717600] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2469.725079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2469.733395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2469.741048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2469.748408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2469.756973] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2469.766789] device veth0_vlan entered promiscuous mode [ 2469.775501] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2469.782788] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2469.789367] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2469.797619] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2469.808561] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2469.819809] device veth1_vlan entered promiscuous mode [ 2469.826777] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2469.836015] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2469.844478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2469.852769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2469.863252] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2469.873429] device veth0_macvtap entered promiscuous mode [ 2469.880587] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2469.890569] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2469.901240] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2469.908863] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2469.917401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2469.928713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2469.940086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2469.950838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2469.966365] device veth0_macvtap entered promiscuous mode [ 2469.973303] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2469.983092] device veth1_macvtap entered promiscuous mode [ 2469.994972] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2470.006915] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2470.015831] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2470.024171] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2470.031453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2470.040103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2470.048340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2470.056277] device veth0_vlan entered promiscuous mode [ 2470.064715] device veth1_macvtap entered promiscuous mode [ 2470.071124] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2470.082810] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2470.098418] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2470.109881] device veth1_vlan entered promiscuous mode [ 2470.123858] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2470.130420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2470.144605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2470.155872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2470.165335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2470.184859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2470.197429] device veth0_macvtap entered promiscuous mode [ 2470.208754] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2470.224193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2470.233825] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2470.242049] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2470.249377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2470.268012] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2470.283076] device veth1_macvtap entered promiscuous mode [ 2470.300314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2470.310483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2470.325815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2470.337162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2470.353529] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2470.360496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2470.378537] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2470.401266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2470.408517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2470.449271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2470.460017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2470.470447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2470.480744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2470.491746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2470.509036] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2470.516056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2470.525172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2470.536095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2470.545853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2470.565832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2470.576318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2470.590668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2470.602028] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2470.608956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2470.618033] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2470.626404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2470.634389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2470.642355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2470.650046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2470.658168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2470.666107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2470.687325] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2470.697014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2470.709918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2470.726256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2470.736739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2470.746339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2470.756519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2470.767659] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2470.775358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2470.786529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2470.796630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2470.805871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2470.815756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2470.824919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2470.834673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2470.843921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2470.853854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2470.864048] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2470.870980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2470.878599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2470.886826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2470.895319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2470.904192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2470.913115] device veth0_macvtap entered promiscuous mode [ 2470.919260] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2470.930144] device veth1_macvtap entered promiscuous mode [ 2470.936552] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2470.944705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2470.954774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2470.963943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2470.973713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2470.982889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2470.993002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2471.002208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2471.012586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2471.023108] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2471.029967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2471.050272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2471.057899] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2471.065680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2471.073801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2471.093580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2471.104122] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2471.132965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2471.156751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2471.166506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2471.176518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2471.190943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2471.200934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2471.216195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2471.226196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2471.240624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2471.250716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2471.268530] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2471.276044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2471.293016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2471.300894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2471.324614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2471.346079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2471.356462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2471.366501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2471.376037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2471.386045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2471.395371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2471.405555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2471.415595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2471.425388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2471.435738] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2471.443701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2471.456617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2471.469738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2471.715835] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2471.750656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2471.776271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2471.776334] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2471.796178] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2471.814739] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2471.827551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2471.838110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2471.848331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2471.862563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2471.882491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2471.888010] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2471.889789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2471.903505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2471.910660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2471.913930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2471.930669] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2471.939803] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2471.948222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2471.964948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2471.980046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2471.986351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2472.001113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2472.005897] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2472.016895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 06:35:33 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 64) r0 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) bind$can_raw(r0, &(0x7f0000000040), 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000080)="916568c51dc83698b7f9cdeda822dcd4d8e036bf3c15af84b50c4d77ff03948657ef4547bfb6e98753be76222dc4f260c06321e309fe019a9edae748ba033a522da3344f9e85088a4e282241c4f69fa71335317c1443e3e08cc511cae40d9b63afdd4b2249cc072b7ab2319c330febc8c0195ad81e971093b4b239") [ 2472.034220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2472.035533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2472.100332] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2472.116500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2472.124904] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2472.140911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2472.172524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2478.920245] oom_reaper: reaped process 19719 (syz-executor.3), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB [ 2478.957871] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2478.977818] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 2478.982719] CPU: 0 PID: 10280 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 2478.990247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2478.999597] Call Trace: [ 2479.002209] dump_stack+0x1fc/0x2ef [ 2479.005844] dump_header+0x15d/0xc3f [ 2479.009562] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2479.014688] ? ___ratelimit+0x319/0x590 [ 2479.018663] oom_kill_process.cold+0x10/0x692 [ 2479.023149] ? check_preemption_disabled+0x41/0x280 [ 2479.028161] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2479.033436] out_of_memory+0x1072/0x1390 [ 2479.037653] ? oom_killer_disable+0x270/0x270 [ 2479.042133] ? mutex_trylock+0x15f/0x1a0 [ 2479.046245] __alloc_pages_nodemask+0x23a2/0x2890 [ 2479.051077] ? find_get_entry+0x4cd/0x8a0 [ 2479.055213] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2479.060050] alloc_pages_current+0x193/0x2a0 [ 2479.064707] filemap_fault+0x146e/0x2180 [ 2479.068756] ext4_filemap_fault+0x84/0xb0 [ 2479.072886] __do_fault+0x10b/0x4b0 [ 2479.076508] __handle_mm_fault+0x273b/0x41c0 [ 2479.080915] ? vm_insert_page+0x9c0/0x9c0 [ 2479.085044] ? __fget+0x356/0x510 [ 2479.088490] ? check_preemption_disabled+0x41/0x280 [ 2479.093502] handle_mm_fault+0x436/0xb10 [ 2479.097559] __do_page_fault+0x68e/0xd60 [ 2479.101616] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2479.106627] ? spurious_fault+0x840/0x840 [ 2479.110843] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2479.115667] ? page_fault+0x8/0x30 [ 2479.119186] page_fault+0x1e/0x30 [ 2479.122624] RIP: 0033:0x466ae0 [ 2479.125810] Code: Bad RIP value. [ 2479.129151] RSP: 002b:000000c0002437e8 EFLAGS: 00010246 [ 2479.134502] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000466ae0 [ 2479.141770] RDX: 0000000000000080 RSI: 000000c000243840 RDI: 0000000000000003 [ 2479.149026] RBP: 000000c000243e40 R08: 0000000000000000 R09: 0000024135b2c913 [ 2479.156293] R10: 00000000000003bf R11: 0000000000000246 R12: 000000c000243870 [ 2479.163542] R13: 0000000000000000 R14: 000000c0006f2d00 R15: 00007f47ac0078b0 [ 2479.174601] Mem-Info: [ 2479.177040] active_anon:16197 inactive_anon:36560 isolated_anon:0 [ 2479.177040] active_file:13 inactive_file:13 isolated_file:0 [ 2479.177040] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2479.177040] slab_reclaimable:13456 slab_unreclaimable:114677 [ 2479.177040] mapped:22565 shmem:38039 pagetables:563 bounce:0 [ 2479.177040] free:13860 free_pcp:845 free_cma:0 [ 2479.184405] syz-executor.3: vmalloc: allocation failure, allocated 1720070144 of 2128986112 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2479.215132] Node 0 active_anon:63608kB inactive_anon:79468kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82236kB dirty:0kB writeback:0kB shmem:85064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2479.235702] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2479.255048] Node 1 active_anon:1180kB inactive_anon:66772kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8024kB dirty:0kB writeback:0kB shmem:67092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2479.267307] CPU: 1 PID: 19719 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2479.287348] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:2860kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2479.292104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2479.292110] Call Trace: [ 2479.292131] dump_stack+0x1fc/0x2ef [ 2479.292150] warn_alloc.cold+0x7b/0x18f [ 2479.292167] ? zone_watermark_ok_safe+0x260/0x260 [ 2479.292186] ? rcu_nmi_exit+0xb3/0x180 [ 2479.327881] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2479.328074] __vmalloc_area_node+0x4fd/0x780 [ 2479.330613] Node 0 DMA32 free:17752kB min:35996kB low:44992kB high:53988kB active_anon:63484kB inactive_anon:76608kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:2096kB bounce:0kB free_pcp:2884kB local_pcp:1352kB free_cma:0kB [ 2479.334232] ? __vmalloc_node_range+0x180/0x180 [ 2479.334247] ? _raw_spin_unlock+0x29/0x40 [ 2479.334259] ? __get_vm_area_node+0x2e2/0x3a0 [ 2479.334279] __vmalloc_node_range+0xed/0x180 [ 2479.338240] lowmem_reserve[]: 0 0 1 1 1 [ 2479.343071] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2479.343087] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2479.343099] vmalloc_user+0x70/0xe0 [ 2479.343113] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2479.343127] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2479.343142] __vb2_queue_alloc+0x472/0xe60 [ 2479.343167] vb2_core_create_bufs+0x273/0x7e0 [ 2479.353110] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2479.356410] ? __vb2_queue_free+0x870/0x870 [ 2479.392145] lowmem_reserve[]: 0 0 0 0 0 [ 2479.394487] ? __video_do_ioctl+0x632/0xcd0 [ 2479.398951] Node 1 Normal free:26812kB min:53876kB low:67344kB high:80812kB active_anon:1180kB inactive_anon:66772kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:156kB bounce:0kB free_pcp:496kB local_pcp:248kB free_cma:0kB [ 2479.403363] ? pi_state_update_owner+0x450/0x450 [ 2479.403379] ? __mutex_lock+0x368/0x1190 [ 2479.403398] vb2_create_bufs+0x332/0x620 [ 2479.403414] ? mark_held_locks+0xf0/0xf0 [ 2479.403427] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2479.403439] ? futex_wait_queue_me+0x404/0x5e0 [ 2479.403454] ? pi_state_update_owner+0x450/0x450 [ 2479.403468] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2479.403482] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2479.403503] v4l_create_bufs+0xb2/0x160 [ 2479.403523] __video_do_ioctl+0x49a/0xcd0 [ 2479.403542] ? v4l_querycap+0x340/0x340 [ 2479.403561] ? __might_fault+0x192/0x1d0 [ 2479.403579] ? v4l_querycap+0x340/0x340 [ 2479.403595] video_usercopy+0x13f/0xfa0 [ 2479.403616] ? v4l_enumstd+0x60/0x60 [ 2479.403631] ? do_futex+0x171/0x1880 [ 2479.403647] ? mark_held_locks+0xf0/0xf0 [ 2479.403667] ? debug_check_no_obj_freed+0x201/0x490 [ 2479.403697] ? video_usercopy+0xfa0/0xfa0 [ 2479.403711] v4l2_ioctl+0x147/0x1a0 [ 2479.403724] ? video_devdata+0xa0/0xa0 [ 2479.403740] do_vfs_ioctl+0xcdb/0x12e0 [ 2479.403756] ? lock_downgrade+0x720/0x720 [ 2479.403772] ? check_preemption_disabled+0x41/0x280 [ 2479.403786] ? ioctl_preallocate+0x200/0x200 [ 2479.403804] ? __fget+0x356/0x510 [ 2479.403821] ? do_dup2+0x450/0x450 [ 2479.403836] ? __se_sys_futex+0x298/0x3b0 [ 2479.403859] ksys_ioctl+0x9b/0xc0 [ 2479.403876] __x64_sys_ioctl+0x6f/0xb0 [ 2479.403892] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2479.403905] do_syscall_64+0xf9/0x620 [ 2479.403924] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2479.403936] RIP: 0033:0x7fbb9ff54209 [ 2479.403951] Code: Bad RIP value. [ 2479.403958] RSP: 002b:00007fbb9e8c9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2479.403972] RAX: ffffffffffffffda RBX: 00007fbba0066f60 RCX: 00007fbb9ff54209 [ 2479.403980] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 2479.403989] RBP: 00007fbb9ffae161 R08: 0000000000000000 R09: 0000000000000000 [ 2479.403996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2479.404005] R13: 00007fffc2200b1f R14: 00007fbb9e8c9300 R15: 0000000000022000 [ 2479.410741] Mem-Info: [ 2479.426923] lowmem_reserve[]: 0 0 0 0 0 [ 2479.437294] active_anon:16197 inactive_anon:36560 isolated_anon:0 [ 2479.437294] active_file:13 inactive_file:13 isolated_file:0 [ 2479.437294] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2479.437294] slab_reclaimable:13456 slab_unreclaimable:114677 [ 2479.437294] mapped:22565 shmem:38039 pagetables:563 bounce:0 [ 2479.437294] free:13860 free_pcp:845 free_cma:0 [ 2479.444120] Node 0 DMA: 1*4kB (E) 2*8kB (ME) 4*16kB (ME) 5*32kB (UME) 2*64kB (ME) 4*128kB (UME) 7*256kB (UME) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10868kB [ 2479.472820] Node 0 active_anon:63608kB inactive_anon:79468kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82236kB dirty:0kB writeback:0kB shmem:85064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2479.481947] Node 0 DMA32: 1142*4kB (UMEH) 524*8kB (MEH) 238*16kB (MEH) 86*32kB (MEH) 15*64kB (UMEH) 10*128kB (UMH) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17816kB [ 2479.514048] Node 1 active_anon:1180kB inactive_anon:66772kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8024kB dirty:0kB writeback:0kB shmem:67092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2479.514056] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:2860kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2479.526389] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2479.537737] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2479.540682] Node 1 Normal: 303*4kB (UME) 254*8kB (UME) 139*16kB (ME) 65*32kB (ME) 15*64kB (ME) 5*128kB (UM) 5*256kB (M) 4*512kB (UM) 4*1024kB (UME) 1*2048kB (M) 2*4096kB (U) = 26812kB [ 2479.545824] Node 0 DMA32 free:17752kB min:35996kB low:44992kB high:53988kB active_anon:63484kB inactive_anon:76608kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:2096kB bounce:0kB free_pcp:2884kB local_pcp:1532kB free_cma:0kB [ 2479.545858] lowmem_reserve[]: 0 0 1 1 1 [ 2479.558578] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2479.564093] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2479.569324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2479.573307] lowmem_reserve[]: 0 0 0 0 0 [ 2479.582466] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2479.586303] Node 1 Normal free:26812kB min:53876kB low:67344kB high:80812kB active_anon:1180kB inactive_anon:66772kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:156kB bounce:0kB free_pcp:496kB local_pcp:248kB free_cma:0kB [ 2479.587237] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2479.595361] lowmem_reserve[]: 0 0 0 0 0 [ 2479.600545] 38065 total pagecache pages [ 2479.607242] Node 0 DMA: 1*4kB (E) 2*8kB (ME) 4*16kB (ME) 5*32kB (UME) 2*64kB (ME) 4*128kB (UME) 7*256kB (UME) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10868kB [ 2479.617740] 0 pages in swap cache [ 2479.627908] Node 0 DMA32: 1142*4kB (UMEH) 524*8kB (MEH) 238*16kB (MEH) 86*32kB (MEH) 15*64kB (UMEH) 10*128kB (UMH) 1*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17816kB [ 2479.629191] Swap cache stats: add 0, delete 0, find 0/0 [ 2479.632622] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2479.641837] Free swap = 0kB [ 2479.650780] Node 1 Normal: 303*4kB (UME) 254*8kB (UME) 139*16kB (ME) 65*32kB (ME) 15*64kB (ME) 5*128kB (UM) 5*256kB (M) 4*512kB (UM) 4*1024kB (UME) 1*2048kB (M) 2*4096kB (U) = 26812kB [ 2479.657879] Total swap = 0kB [ 2479.660572] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2479.668267] 2097051 pages RAM [ 2479.668273] 0 pages HighMem/MovableOnly [ 2479.668277] 369649 pages reserved [ 2479.668281] 0 pages cma reserved [ 2479.668287] Unreclaimable slab info: [ 2479.668294] Name Used Total [ 2479.681808] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2479.690426] pid_2 12KB 88KB [ 2479.703739] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2479.714434] batadv_tt_change_cache 3KB 3KB [ 2479.747648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2479.772096] batadv_tl_cache 8KB 16KB [ 2479.791137] 38065 total pagecache pages [ 2479.811418] TIPC 16KB 30KB [ 2479.841452] 0 pages in swap cache [ 2479.868036] SCTPv6 22KB 30KB [ 2479.871639] Swap cache stats: add 0, delete 0, find 0/0 [ 2479.876647] DCCPv6 17KB 37KB [ 2479.893312] Free swap = 0kB [ 2479.932192] DCCP 16KB 35KB [ 2479.961120] Total swap = 0kB [ 2479.977375] RXRPC 17KB 26KB [ 2479.982713] 2097051 pages RAM [ 2480.026249] rxrpc_call_jar 123KB 141KB [ 2480.040246] 0 pages HighMem/MovableOnly [ 2480.040252] 369649 pages reserved [ 2480.040257] 0 pages cma reserved [ 2480.242079] can_receiver 0KB 3KB [ 2480.247437] bridge_fdb_cache 15KB 23KB [ 2480.252865] fib6_nodes 261KB 268KB [ 2480.258225] ip6_dst_cache 723KB 723KB [ 2480.263898] RAWv6 113KB 128KB [ 2480.269262] UDPv6 41KB 45KB [ 2480.274719] TCPv6 39KB 42KB [ 2480.280087] nf_conntrack 9KB 11KB [ 2480.285543] t10_alua_lu_gp_cache 0KB 3KB [ 2480.291218] sd_ext_cdb 0KB 7KB [ 2480.296577] scsi_sense_cache 1056KB 1060KB [ 2480.302008] virtio_scsi_cmd 16KB 16KB [ 2480.307377] sgpool-128 8KB 8KB [ 2480.312769] sgpool-64 4KB 12KB [ 2480.318126] sgpool-32 2KB 15KB [ 2480.325481] sgpool-16 1KB 7KB [ 2480.330843] sgpool-8 0KB 7KB [ 2480.336269] mqueue_inode_cache 16KB 37KB [ 2480.341767] bio_post_read_ctx 14KB 15KB [ 2480.347189] bio-2 14KB 15KB [ 2480.356006] jfs_mp 7KB 7KB [ 2480.361472] cifs_small_rq 15KB 16KB [ 2480.366858] cifs_request 67KB 67KB [ 2480.375864] cifs_mpx_ids 0KB 7KB [ 2480.381302] nfs_commit_data 3KB 14KB [ 2480.386690] nfs_write_data 34KB 44KB [ 2480.395549] ext4_system_zone 1KB 7KB [ 2480.401146] bio-1 1KB 7KB [ 2480.406503] pid_namespace 3KB 15KB [ 2480.415303] rpc_buffers 17KB 25KB [ 2480.420668] rpc_tasks 2KB 7KB [ 2480.427787] UNIX 1873KB 1875KB [ 2480.436802] tcp_bind_bucket 1KB 4KB [ 2480.442272] ip_fib_trie 38KB 47KB [ 2480.447633] ip_fib_alias 184KB 189KB [ 2480.456454] ip_dst_cache 14KB 24KB [ 2480.461863] RAW 66KB 75KB [ 2480.467238] UDP 60KB 74KB [ 2480.476101] TCP 14KB 16KB [ 2480.481505] hugetlbfs_inode_cache 3KB 15KB [ 2480.487213] fscache_cookie_jar 1KB 7KB [ 2480.496276] eventpoll_pwq 29KB 51KB [ 2480.501674] eventpoll_epi 45KB 74KB [ 2480.507032] inotify_inode_mark 18KB 43KB [ 2480.515866] request_queue 199KB 199KB [ 2480.521270] blkdev_requests 1KB 3KB [ 2480.528437] blkdev_ioc 17KB 30KB [ 2480.537147] bio-0 740KB 832KB [ 2480.542582] biovec-max 1493KB 1534KB [ 2480.547943] biovec-64 725KB 834KB [ 2480.560436] biovec-16 118KB 153KB [ 2480.566126] bio_integrity_payload 1KB 8KB [ 2480.578659] khugepaged_mm_slot 6KB 34KB [ 2480.584159] uid_cache 0KB 4KB [ 2480.589517] dmaengine-unmap-2 0KB 3KB [ 2480.601799] skbuff_fclone_cache 21KB 56KB [ 2480.607346] skbuff_head_cache 9459KB 9461KB [ 2480.612748] configfs_dir_cache 3KB 7KB [ 2480.618196] file_lock_cache 37KB 106KB [ 2480.631939] file_lock_ctx 9KB 11KB [ 2480.637314] fsnotify_mark_connector 9KB 27KB [ 2480.643237] net_namespace 87KB 87KB [ 2480.648598] shmem_inode_cache 8109KB 8392KB [ 2480.660665] task_delay_info 264KB 407KB [ 2480.666622] taskstats 17KB 68KB [ 2480.678669] proc_dir_entry 957KB 971KB [ 2480.685491] pde_opener 15KB 66KB [ 2480.692475] seq_file 227KB 456KB [ 2480.697840] sigqueue 48KB 86KB [ 2480.703856] kernfs_node_cache 18262KB 18632KB [ 2480.709219] mnt_cache 243KB 260KB [ 2480.714998] filp 6860KB 7293KB [ 2480.721103] names_cache 102586KB 102624KB [ 2480.726533] iint_cache 23KB 39KB [ 2480.733613] key_jar 4KB 7KB [ 2480.738983] uts_namespace 4KB 11KB [ 2480.744385] nsproxy 7KB 51KB [ 2480.749746] vm_area_struct 3032KB 4338KB [ 2480.755776] mm_struct 451KB 663KB [ 2480.761797] fs_cache 300KB 352KB [ 2480.767880] files_cache 1114KB 1200KB [ 2480.773926] signal_cache 2139KB 2371KB [ 2480.780185] sighand_cache 555KB 631KB [ 2480.786254] task_struct 9172KB 9203KB [ 2480.791837] cred_jar 2189KB 2492KB [ 2480.797532] anon_vma_chain 950KB 1724KB [ 2480.803585] anon_vma 145KB 319KB [ 2480.808945] pid 173KB 248KB [ 2480.814438] Acpi-Operand 156KB 194KB [ 2480.819875] Acpi-ParseExt 9KB 11KB [ 2480.825476] Acpi-Parse 41KB 47KB [ 2480.830998] Acpi-State 52KB 63KB [ 2480.838613] Acpi-Namespace 20KB 27KB [ 2480.844167] numa_policy 0KB 3KB [ 2480.849582] debug_objects_cache 1668KB 2143KB [ 2480.855395] trace_event_file 297KB 298KB [ 2480.860806] ftrace_event_field 398KB 401KB [ 2480.866332] pool_workqueue 150KB 160KB [ 2480.871867] page->ptl 423KB 766KB [ 2480.877321] kmalloc-2097152 2050KB 2050KB [ 2480.883437] kmalloc-524288 2056KB 2056KB [ 2480.889314] kmalloc-262144 1290KB 1290KB [ 2480.896004] kmalloc-131072 650KB 650KB [ 2480.902526] kmalloc-65536 2904KB 2970KB [ 2480.911712] kmalloc-32768 2310KB 2310KB [ 2480.918190] kmalloc-16384 1402KB 1485KB [ 2480.925018] kmalloc-8192 6006KB 6006KB [ 2480.934316] kmalloc-4096 31076KB 31131KB [ 2480.942315] kmalloc-2048 18740KB 18755KB [ 2480.955340] kmalloc-1024 13998KB 14041KB [ 2480.965982] kmalloc-512 17822KB 17823KB [ 2480.986177] kmalloc-256 5969KB 5981KB [ 2480.991828] kmalloc-128 1416KB 1575KB [ 2481.001503] kmalloc-96 3449KB 4292KB [ 2481.006868] kmalloc-64 2766KB 3428KB [ 2481.022531] kmalloc-32 2013KB 2460KB [ 2481.027900] kmalloc-192 2342KB 2816KB [ 2481.065739] kmem_cache 177KB 183KB [ 2481.071282] Out of memory (oom_kill_allocating_task): Kill process 10280 (syz-fuzzer) score 0 or sacrifice child [ 2481.081922] Killed process 18672 (syz-executor.0) total-vm:48480kB, anon-rss:360kB, file-rss:4kB, shmem-rss:0kB [ 2481.092535] oom_reaper: reaped process 18672 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 2484.499187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2484.517933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2484.538230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2484.545684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2484.561707] device bridge_slave_1 left promiscuous mode [ 2484.567211] bridge0: port 2(bridge_slave_1) entered disabled state [ 2484.581035] device bridge_slave_0 left promiscuous mode [ 2484.586520] bridge0: port 1(bridge_slave_0) entered disabled state [ 2484.603128] device veth1_macvtap left promiscuous mode [ 2484.608430] device veth0_macvtap left promiscuous mode [ 2484.619806] device veth1_vlan left promiscuous mode [ 2484.626069] device veth0_vlan left promiscuous mode 06:35:46 executing program 2: r0 = socket(0xa, 0x4, 0x1f) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @sdr={0x34324948}}}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x383102, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r2, 0xc4c03d09, &(0x7f00000001c0)={0xa}) write$bt_hci(r0, &(0x7f00000006c0)={0x1, @le_create_cis={{0x2064, 0x11}, {0x4, [{0x0, 0x88c}, {0x5, 0xfffa}, {0x4, 0x2}, {0x81, 0x6e32}]}}}, 0x15) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000680)={{0x4, 0x6}, {0x7, 0xa4f}, 0x20, 0x1}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 06:35:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x4, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:35:46 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000080)={{0x2, 0xc20b}, {0x1, 0x4}, 0x3}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0xfffffffd, 0x3, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}, 0x2000002}) 06:35:46 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x2001, 0x4) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), &(0x7f00000000c0)=0xffffffffffffffce) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000040)) socket(0x30, 0x80d, 0x1000) 06:35:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000001780)=ANY=[@ANYBLOB="50030000", @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="caabc00680265c15befb874b3359ff1d0bd771613c84f5f14c7be6e06f2e312f88f030f0749d1c92dc1e196610dcf34899a422ccd9d7515977ceea61bc1da69d1408687d31e22d246d20ddcb9e765a0fbce02816fcb08967b0854c0b14c9323d219eb9193fd133d6e08150166597a17302830edb23b345408d1324e904cf096d0762176c503f0187d43b1c3e4092c76cc5219fc377fed6eea8d19261384421409ecc75f055ce8e0cc4829803fbdf4a091cabb8ae4440a5794adf930664caebb425a5bd103fae5d7db25c8b65b2fdd97f8fd0", @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="3c03028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ffffffff08000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040006000901050000000100eb066c0000007f0001ec010000803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040002000000"], 0x350}, 0x1, 0x0, 0x0, 0x800}, 0x4008007) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000f00)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) (async) r11 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f0000000700)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000f40)=ANY=[@ANYBLOB="64060000", @ANYRES16=r1, @ANYBLOB="000125bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400020000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004000700f8010100010008000100", @ANYRES32=r4, @ANYBLOB="7c0102803c0001626c6564000000000000000000000000000000000000000000000400040008000600"/60, @ANYRES32=r5, @ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="d000028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400010000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c000400ff00810101000000ffff6c8000100000ff071c026a0d0000060005030400000004000105010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0401028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff0000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c01028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400040000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES8=r8, @ANYBLOB="54000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000024000400010001000900000013c70805f4000000ff00810807000000020081ff0101000008000100", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x664}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) r12 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r12, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x8, 0x6, 0xba9, 0x4}, 'syz0\x00', 0x24}) 06:35:46 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x1ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:35:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000001780)=ANY=[@ANYBLOB="50030000", @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="caabc00680265c15befb874b3359ff1d0bd771613c84f5f14c7be6e06f2e312f88f030f0749d1c92dc1e196610dcf34899a422ccd9d7515977ceea61bc1da69d1408687d31e22d246d20ddcb9e765a0fbce02816fcb08967b0854c0b14c9323d219eb9193fd133d6e08150166597a17302830edb23b345408d1324e904cf096d0762176c503f0187d43b1c3e4092c76cc5219fc377fed6eea8d19261384421409ecc75f055ce8e0cc4829803fbdf4a091cabb8ae4440a5794adf930664caebb425a5bd103fae5d7db25c8b65b2fdd97f8fd0", @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="3c03028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ffffffff08000100", @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040006000901050000000100eb066c0000007f0001ec010000803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040002000000"], 0x350}, 0x1, 0x0, 0x0, 0x800}, 0x4008007) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000f00)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) (async) r11 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f0000000700)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000f40)=ANY=[@ANYBLOB="64060000", @ANYRES16=r1, @ANYBLOB="000125bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400020000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004000700f8010100010008000100", @ANYRES32=r4, @ANYBLOB="7c0102803c0001626c6564000000000000000000000000000000000000000000000400040008000600"/60, @ANYRES32=r5, @ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="d000028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400010000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c000400ff00810101000000ffff6c8000100000ff071c026a0d0000060005030400000004000105010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0401028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff0000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c01028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400040000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES8=r8, @ANYBLOB="54000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000024000400010001000900000013c70805f4000000ff00810807000000020081ff0101000008000100", @ANYRES32=r9, @ANYBLOB="4400028097c45a78240001006c625f706f72745f7374617473000000000000000000008e00a370b1a40000000500031f0b000000080004000200000008000600abbc3254a24c1df4679001b05b2677653e5fc8b9e1b7f1c0b62650a80b74845197b152de2690f9900eaed8b9ae67f69334f325562692735a77e19b17679e33adefc37e2610ad4cf56394bc61cccf07b6a18ab14aec8b076a7a3983bdb7f2e116e980b81bf3951b8ac6d4da50c3ee2e24bb4d56b1e222fb6562a901b829303ae6b3e583ae78eec586c3beeb444e5f02ad5274ae87124e75a619a5aeaafaddd068738653acc475dd017542acc3877740e9d069235692f9d337cb7aafc61da959ac016286f83b67cb871965c2", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x664}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) r12 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r12, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x8, 0x6, 0xba9, 0x4}, 'syz0\x00', 0x24}) 06:35:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x4, {0x1, @raw_data="b49aac648f5732f8fce11cc246ca2a907813e1cb2bafe57e5a1ce697526c723dd5a525c4095b2c718b39733b3f41d9d00b5a83e6c37cb19efa49e6c9d7b3debc7f44da0b84e459b4df4f1ed509bfdb5d3b1e1299fba89d148877c768da822c099fe18f0e8d5d35efb1eb532eb8ee6845830c4326211cb051615339298040a38f9ff74db5931bbfb8e48857c31e8205038a7451589247b113a7fc744dbc17eea1e438b952e99c9a5861efbac84cc9034ca61d40dd63c405982733bde758cb87014504e4689c724cab"}}) 06:35:47 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x2001, 0x4) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), &(0x7f00000000c0)=0xffffffffffffffce) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000040)) (async) socket(0x30, 0x80d, 0x1000) 06:35:48 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x2001, 0x4) (async, rerun: 64) r0 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000580), &(0x7f0000000600)=0x4) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), &(0x7f00000000c0)=0xffffffffffffffce) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000040)) (async) socket(0x30, 0x80d, 0x1000) [ 2487.721036] Bluetooth: hci0: command 0x0c1a tx timeout 06:35:49 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000080)={0x0, 0x1, @start={0x8001, 0x1}}) 06:35:50 executing program 5: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000080)={0x0, 0x1, @start={0x8001, 0x1}}) [ 2489.800377] Bluetooth: hci0: command 0x0c1a tx timeout [ 2490.040414] Bluetooth: hci3: command 0x0409 tx timeout [ 2490.280484] Bluetooth: hci1: command 0x0c1a tx timeout 06:35:51 executing program 2: r0 = socket(0xa, 0x4, 0x1f) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x1, {0x1, @sdr={0x34324948}}}) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x383102, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r2, 0xc4c03d09, &(0x7f00000001c0)={0xa}) (async) write$bt_hci(r0, &(0x7f00000006c0)={0x1, @le_create_cis={{0x2064, 0x11}, {0x4, [{0x0, 0x88c}, {0x5, 0xfffa}, {0x4, 0x2}, {0x81, 0x6e32}]}}}, 0x15) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f00000000c0)) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4) (async) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000680)={{0x4, 0x6}, {0x7, 0xa4f}, 0x20, 0x1}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 2491.880295] Bluetooth: hci0: command 0x0c1a tx timeout [ 2492.120164] Bluetooth: hci3: command 0x041b tx timeout [ 2492.360148] Bluetooth: hci1: command 0x0c1a tx timeout [ 2494.200026] Bluetooth: hci3: command 0x040f tx timeout [ 2495.664729] device hsr_slave_1 left promiscuous mode [ 2495.678329] device hsr_slave_0 left promiscuous mode [ 2495.706977] team0 (unregistering): Port device team_slave_1 removed [ 2495.724587] team0 (unregistering): Port device team_slave_0 removed [ 2495.736945] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2495.753442] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2495.795115] bond0 (unregistering): Released all slaves [ 2495.816032] IPVS: ftp: loaded support on port[0] = 21 [ 2496.279848] Bluetooth: hci3: command 0x0419 tx timeout [ 2496.318102] chnl_net:caif_netlink_parms(): no params data found [ 2496.435505] oom_reaper: reaped process 19796 (syz-executor.3), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB [ 2496.451235] modprobe invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 2496.479800] modprobe cpuset=/ mems_allowed=0-1 [ 2496.484410] CPU: 1 PID: 19972 Comm: modprobe Not tainted 4.19.211-syzkaller #0 [ 2496.491758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2496.501104] Call Trace: [ 2496.503695] dump_stack+0x1fc/0x2ef [ 2496.507325] dump_header+0x15d/0xc3f [ 2496.511039] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2496.516135] ? ___ratelimit+0x319/0x590 [ 2496.520108] oom_kill_process.cold+0x10/0x692 [ 2496.524599] ? check_preemption_disabled+0x41/0x280 [ 2496.529621] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2496.534900] out_of_memory+0x1072/0x1390 [ 2496.538964] ? oom_killer_disable+0x270/0x270 [ 2496.543456] ? mutex_trylock+0x15f/0x1a0 [ 2496.547515] __alloc_pages_nodemask+0x23a2/0x2890 [ 2496.552369] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2496.557211] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2496.562060] ? should_fail+0x142/0x7b0 [ 2496.565954] ? lock_downgrade+0x720/0x720 [ 2496.570102] alloc_pages_current+0x193/0x2a0 [ 2496.574507] pte_alloc_one+0x16/0x190 [ 2496.578303] __pte_alloc+0x21/0x340 [ 2496.581929] move_page_tables+0x165d/0x1b50 [ 2496.586258] shift_arg_pages+0x1a7/0x450 [ 2496.590312] ? mprotect_fixup+0x54c/0x9b0 [ 2496.594455] ? put_arg_page+0x210/0x210 [ 2496.598422] ? get_random_u32+0xf3/0x1e0 [ 2496.602489] ? change_protection+0xc0/0xc0 [ 2496.606721] ? lock_downgrade+0x720/0x720 [ 2496.610862] ? lock_acquire+0x170/0x3c0 [ 2496.614831] ? get_random_u32+0x46/0x1e0 [ 2496.618896] ? lock_acquire+0x170/0x3c0 [ 2496.622862] ? setup_arg_pages+0x297/0x790 [ 2496.627106] setup_arg_pages+0x62a/0x790 [ 2496.631167] ? shift_arg_pages+0x450/0x450 [ 2496.635395] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2496.639972] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2496.645077] load_elf_binary+0xba0/0x5050 [ 2496.649240] ? do_raw_read_unlock+0x3b/0x70 [ 2496.653559] ? _raw_read_unlock+0x29/0x40 [ 2496.657709] ? elf_core_dump+0x4c10/0x4c10 [ 2496.661938] ? lock_acquire+0x170/0x3c0 [ 2496.665912] ? search_binary_handler.part.0+0x108/0x4e0 [ 2496.671275] ? ima_file_mmap+0x130/0x130 [ 2496.675335] search_binary_handler.part.0+0xf9/0x4e0 [ 2496.680442] __do_execve_file+0x1357/0x2360 [ 2496.684770] ? open_exec+0x70/0x70 [ 2496.688314] ? check_preemption_disabled+0x41/0x280 [ 2496.693337] do_execve+0x35/0x50 [ 2496.696703] call_usermodehelper_exec_async+0x50e/0x6a0 [ 2496.702062] ? umh_complete+0x90/0x90 [ 2496.705863] ret_from_fork+0x24/0x30 [ 2496.717026] Mem-Info: [ 2496.719459] active_anon:16172 inactive_anon:36558 isolated_anon:0 [ 2496.719459] active_file:50 inactive_file:15 isolated_file:0 [ 2496.719459] unevictable:0 dirty:19 writeback:0 unstable:0 [ 2496.719459] slab_reclaimable:13320 slab_unreclaimable:112592 [ 2496.719459] mapped:22625 shmem:38035 pagetables:562 bounce:0 [ 2496.719459] free:18845 free_pcp:62 free_cma:0 [ 2496.760030] Node 0 active_anon:63184kB inactive_anon:79432kB active_file:132kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82308kB dirty:48kB writeback:0kB shmem:85016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2496.794911] Node 1 active_anon:1504kB inactive_anon:66800kB active_file:68kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8192kB dirty:28kB writeback:0kB shmem:67124kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2496.829209] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:2860kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2496.863302] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2496.868333] Node 0 DMA32 free:17756kB min:35996kB low:44992kB high:53988kB active_anon:62972kB inactive_anon:76572kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:2096kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 2496.899919] syz-executor.3: vmalloc: allocation failure, allocated 1731866624 of 2128986112 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2496.904243] lowmem_reserve[]: 0 0 1 1 1 [ 2496.917716] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2496.943580] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 2496.948769] CPU: 0 PID: 19796 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 2496.956644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2496.962941] lowmem_reserve[]: 0 0 0 0 0 [ 2496.965990] Call Trace: [ 2496.969977] Node 1 Normal free:26864kB min:53876kB low:67344kB high:80812kB active_anon:1544kB inactive_anon:66800kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:156kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 2496.972532] dump_stack+0x1fc/0x2ef [ 2497.000899] lowmem_reserve[]: 0 0 0 0 0 [ 2497.004486] warn_alloc.cold+0x7b/0x18f [ 2497.008423] Node 0 DMA: 2*4kB (UE) 2*8kB (ME) 4*16kB (ME) 5*32kB (UME) 2*64kB (ME) 4*128kB (UME) 7*256kB (UME) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10872kB [ 2497.012385] ? zone_watermark_ok_safe+0x260/0x260 [ 2497.012422] __vmalloc_area_node+0x4fd/0x780 [ 2497.027830] Node 0 DMA32: 1293*4kB (UMEH) 541*8kB (UME) 240*16kB (UME) 80*32kB (UMEH) 15*64kB (UMEH) 3*128kB (U) 0*256kB 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 17756kB [ 2497.032649] ? __vmalloc_node_range+0x180/0x180 [ 2497.032667] ? _raw_spin_unlock+0x29/0x40 [ 2497.037041] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2497.052283] ? __get_vm_area_node+0x2e2/0x3a0 [ 2497.052302] __vmalloc_node_range+0xed/0x180 [ 2497.052320] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2497.056958] Node 1 Normal: 378*4kB (UME) 285*8kB (UME) 166*16kB (UME) 88*32kB (UME) 21*64kB (ME) 5*128kB (M) 1*256kB (M) 0*512kB 3*1024kB (ME) 2*2048kB (UM) 2*4096kB (U) = 26864kB [ 2497.061100] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 2497.061113] vmalloc_user+0x70/0xe0 [ 2497.061129] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 2497.072127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2497.076586] vb2_vmalloc_alloc+0xb3/0x2f0 [ 2497.080986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2497.085268] __vb2_queue_alloc+0x472/0xe60 [ 2497.101418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2497.106754] vb2_core_create_bufs+0x273/0x7e0 [ 2497.110362] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2497.114648] ? __vb2_queue_free+0x870/0x870 [ 2497.123476] 38069 total pagecache pages [ 2497.127596] ? __video_do_ioctl+0x632/0xcd0 [ 2497.136171] 0 pages in swap cache [ 2497.140367] ? __mutex_lock+0x368/0x1190 [ 2497.140385] vb2_create_bufs+0x332/0x620 [ 2497.149194] Swap cache stats: add 0, delete 0, find 0/0 [ 2497.153672] ? mark_held_locks+0xf0/0xf0 [ 2497.153686] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 2497.153703] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 2497.162266] Free swap = 0kB [ 2497.166556] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 2497.170513] Total swap = 0kB [ 2497.174805] v4l_create_bufs+0xb2/0x160 [ 2497.178225] 2097051 pages RAM [ 2497.182273] __video_do_ioctl+0x49a/0xcd0 [ 2497.182294] ? v4l_querycap+0x340/0x340 [ 2497.186328] 0 pages HighMem/MovableOnly [ 2497.191674] ? __might_fault+0x192/0x1d0 [ 2497.191694] ? v4l_querycap+0x340/0x340 [ 2497.195721] 369649 pages reserved [ 2497.200824] video_usercopy+0x13f/0xfa0 [ 2497.200846] ? v4l_enumstd+0x60/0x60 [ 2497.205926] 0 pages cma reserved [ 2497.208940] ? do_futex+0x171/0x1880 [ 2497.214137] Unreclaimable slab info: [ 2497.217124] ? mark_held_locks+0xf0/0xf0 [ 2497.221091] Name Used Total [ 2497.224166] ? debug_check_no_obj_freed+0x201/0x490 [ 2497.228285] pid_2 14KB 76KB [ 2497.232248] ? video_usercopy+0xfa0/0xfa0 [ 2497.232264] v4l2_ioctl+0x147/0x1a0 [ 2497.236265] batadv_tt_change_cache 5KB 7KB [ 2497.240253] ? video_devdata+0xa0/0xa0 [ 2497.240269] do_vfs_ioctl+0xcdb/0x12e0 [ 2497.240285] ? lock_downgrade+0x720/0x720 [ 2497.244234] batadv_tl_cache 16KB 16KB [ 2497.247669] ? check_preemption_disabled+0x41/0x280 [ 2497.251643] TIPC 30KB 30KB [ 2497.255304] ? ioctl_preallocate+0x200/0x200 [ 2497.258652] SCTPv6 30KB 30KB [ 2497.262346] ? __fget+0x356/0x510 [ 2497.262366] ? do_dup2+0x450/0x450 [ 2497.266058] DCCPv6 32KB 37KB [ 2497.270093] ? __se_sys_futex+0x298/0x3b0 [ 2497.270118] ksys_ioctl+0x9b/0xc0 [ 2497.275628] DCCP 35KB 35KB [ 2497.280622] __x64_sys_ioctl+0x6f/0xb0 [ 2497.280636] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2497.280651] do_syscall_64+0xf9/0x620 [ 2497.286015] RXRPC 26KB 26KB [ 2497.290121] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2497.290132] RIP: 0033:0x7fbb9ff54209 [ 2497.290146] Code: Bad RIP value. [ 2497.293747] rxrpc_call_jar 126KB 141KB [ 2497.299513] RSP: 002b:00007fbb9e8c9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2497.303409] can_receiver 0KB 3KB [ 2497.307246] RAX: ffffffffffffffda RBX: 00007fbba0066f60 RCX: 00007fbb9ff54209 [ 2497.307257] RDX: 00000000200000c0 RSI: 00000000c100565c RDI: 0000000000000004 [ 2497.311404] bridge_fdb_cache 18KB 23KB [ 2497.316725] RBP: 00007fbb9ffae161 R08: 0000000000000000 R09: 0000000000000000 [ 2497.321745] fib6_nodes 256KB 268KB [ 2497.327052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2497.327064] R13: 00007fffc2200b1f R14: 00007fbb9e8c9300 R15: 0000000000022000 [ 2497.331467] ip6_dst_cache 743KB 750KB [ 2497.355860] Mem-Info: [ 2497.384256] RAWv6 128KB 128KB [ 2497.393731] active_anon:16160 inactive_anon:36558 isolated_anon:0 [ 2497.393731] active_file:17 inactive_file:17 isolated_file:0 [ 2497.393731] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2497.393731] slab_reclaimable:13320 slab_unreclaimable:112643 [ 2497.393731] mapped:22600 shmem:38035 pagetables:563 bounce:0 [ 2497.393731] free:13875 free_pcp:125 free_cma:0 [ 2497.422976] UDPv6 45KB 45KB [ 2497.437456] Node 0 active_anon:63096kB inactive_anon:79432kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82236kB dirty:0kB writeback:0kB shmem:85016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2497.486056] TCPv6 48KB 48KB [ 2497.515507] Node 1 active_anon:1544kB inactive_anon:66800kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8164kB dirty:0kB writeback:0kB shmem:67124kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2497.582458] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:2860kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2497.617710] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2497.622916] Node 0 DMA32 free:17756kB min:35996kB low:44992kB high:53988kB active_anon:62972kB inactive_anon:76572kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:2096kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 2497.663413] nf_conntrack 9KB 11KB [ 2497.668839] t10_alua_lu_gp_cache 0KB 3KB [ 2497.683080] sd_ext_cdb 0KB 7KB [ 2497.688448] scsi_sense_cache 1056KB 1060KB [ 2497.695609] virtio_scsi_cmd 16KB 16KB [ 2497.707874] sgpool-128 8KB 8KB [ 2497.714917] lowmem_reserve[]: 0 0 1 1 1 [ 2497.718899] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2497.755449] sgpool-64 4KB 12KB [ 2497.760881] sgpool-32 2KB 15KB [ 2497.766237] sgpool-16 1KB 7KB [ 2497.780164] sgpool-8 0KB 7KB [ 2497.785535] mqueue_inode_cache 15KB 37KB [ 2497.796408] bio_post_read_ctx 14KB 15KB [ 2497.805429] lowmem_reserve[]: 0 0 0 0 0 [ 2497.809417] Node 1 Normal free:26864kB min:53876kB low:67344kB high:80812kB active_anon:1544kB inactive_anon:66800kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:156kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2497.845202] bio-2 14KB 15KB [ 2497.850617] jfs_mp 7KB 7KB [ 2497.856003] cifs_small_rq 15KB 16KB [ 2497.861494] cifs_request 67KB 67KB [ 2497.866848] cifs_mpx_ids 0KB 7KB [ 2497.872278] nfs_commit_data 3KB 14KB [ 2497.877635] nfs_write_data 34KB 44KB [ 2497.883261] lowmem_reserve[]: 0 0 0 0 0 [ 2497.887254] Node 0 DMA: 2*4kB (UE) 2*8kB (ME) 4*16kB (ME) 5*32kB (UME) 2*64kB (ME) 4*128kB (UME) 7*256kB (UME) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10872kB [ 2497.902874] ext4_system_zone 1KB 7KB [ 2497.908248] bio-1 1KB 7KB [ 2497.913644] pid_namespace 3KB 15KB [ 2497.919011] rpc_buffers 17KB 25KB [ 2497.924417] Node 0 DMA32: 1293*4kB (UMEH) 541*8kB (UME) 240*16kB (UME) 80*32kB (UMEH) 15*64kB (UMEH) 3*128kB (U) 0*256kB 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 17756kB [ 2497.941701] rpc_tasks 2KB 7KB [ 2497.947070] UNIX 1875KB 1875KB [ 2497.957324] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2497.977153] tcp_bind_bucket 3KB 4KB [ 2497.982655] ip_fib_trie 38KB 47KB [ 2497.988015] ip_fib_alias 180KB 189KB [ 2497.998483] Node 1 Normal: 378*4kB (UME) 285*8kB (UME) 166*16kB (UME) 88*32kB (UME) 21*64kB (ME) 5*128kB (M) 1*256kB (M) 0*512kB 3*1024kB (ME) 2*2048kB (UM) 2*4096kB (U) = 26864kB [ 2498.020085] ip_dst_cache 11KB 24KB [ 2498.025458] RAW 78KB 82KB [ 2498.035709] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2498.045458] UDP 74KB 74KB [ 2498.054941] TCP 8KB 22KB [ 2498.061177] hugetlbfs_inode_cache 3KB 15KB [ 2498.066886] fscache_cookie_jar 1KB 7KB [ 2498.076506] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2498.085967] eventpoll_pwq 26KB 51KB [ 2498.095439] eventpoll_epi 50KB 74KB [ 2498.101672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2498.114714] inotify_inode_mark 12KB 39KB [ 2498.121076] request_queue 199KB 199KB [ 2498.126434] blkdev_requests 1KB 3KB [ 2498.135683] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2498.135778] blkdev_ioc 25KB 30KB [ 2498.156756] bio-0 669KB 776KB [ 2498.158130] 38069 total pagecache pages [ 2498.162181] biovec-max 1501KB 1518KB [ 2498.162194] biovec-64 663KB 724KB [ 2498.162204] biovec-16 124KB 153KB [ 2498.162218] bio_integrity_payload 1KB 8KB [ 2498.171767] 0 pages in swap cache [ 2498.183503] khugepaged_mm_slot 6KB 34KB [ 2498.198490] uid_cache 0KB 4KB [ 2498.202117] Swap cache stats: add 0, delete 0, find 0/0 [ 2498.208322] dmaengine-unmap-2 0KB 3KB [ 2498.209189] Free swap = 0kB [ 2498.217929] skbuff_fclone_cache 21KB 41KB [ 2498.228717] skbuff_head_cache 9429KB 9431KB [ 2498.234010] Total swap = 0kB [ 2498.237078] 2097051 pages RAM [ 2498.237324] configfs_dir_cache 3KB 7KB [ 2498.253209] file_lock_cache 43KB 99KB [ 2498.256811] 0 pages HighMem/MovableOnly [ 2498.258567] file_lock_ctx 9KB 11KB [ 2498.268964] 369649 pages reserved [ 2498.275927] fsnotify_mark_connector 6KB 27KB [ 2498.282458] 0 pages cma reserved [ 2498.283389] net_namespace 96KB 96KB [ 2498.298029] shmem_inode_cache 8101KB 8368KB [ 2498.304934] task_delay_info 293KB 407KB [ 2498.317292] taskstats 18KB 65KB [ 2498.324339] proc_dir_entry 1003KB 1005KB [ 2498.336203] pde_opener 16KB 66KB [ 2498.343637] seq_file 233KB 456KB [ 2498.348996] sigqueue 48KB 86KB [ 2498.365474] kernfs_node_cache 17485KB 17695KB [ 2498.375049] mnt_cache 230KB 248KB [ 2498.384673] filp 6708KB 7278KB [ 2498.394689] names_cache 97048KB 97048KB [ 2498.404105] iint_cache 23KB 39KB [ 2498.409470] key_jar 4KB 7KB [ 2498.419097] uts_namespace 4KB 11KB [ 2498.428428] nsproxy 5KB 43KB [ 2498.438370] vm_area_struct 3202KB 4315KB [ 2498.449178] mm_struct 476KB 663KB [ 2498.458806] fs_cache 342KB 352KB [ 2498.468238] files_cache 1230KB 1230KB [ 2498.485707] signal_cache 2301KB 2371KB [ 2498.491909] sighand_cache 661KB 666KB [ 2498.497278] task_struct 9973KB 9973KB [ 2498.514659] cred_jar 2069KB 2492KB [ 2498.524176] anon_vma_chain 1027KB 1724KB [ 2498.529543] anon_vma 151KB 315KB [ 2498.547526] pid 192KB 248KB [ 2498.552929] Acpi-Operand 156KB 194KB [ 2498.558292] Acpi-ParseExt 9KB 11KB [ 2498.575793] Acpi-Parse 41KB 47KB [ 2498.582039] Acpi-State 52KB 63KB [ 2498.587396] Acpi-Namespace 20KB 27KB [ 2498.599692] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2498.599711] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2498.606206] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2498.619197] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2498.634176] numa_policy 0KB 3KB [ 2498.639548] debug_objects_cache 1652KB 2143KB [ 2498.646688] trace_event_file 297KB 298KB [ 2498.664397] ftrace_event_field 398KB 401KB [ 2498.676839] pool_workqueue 160KB 160KB [ 2498.687674] page->ptl 443KB 766KB [ 2498.705300] kmalloc-2097152 2050KB 2050KB [ 2498.714184] kmalloc-524288 2056KB 2056KB [ 2498.719550] kmalloc-262144 1290KB 1290KB [ 2498.737056] kmalloc-131072 650KB 650KB [ 2498.744845] kmalloc-65536 3168KB 3234KB [ 2498.764134] kmalloc-32768 2442KB 2442KB [ 2498.769506] kmalloc-16384 1386KB 1468KB [ 2498.786980] kmalloc-8192 5824KB 5824KB [ 2498.794753] kmalloc-4096 32776KB 32776KB [ 2498.809349] kmalloc-2048 19297KB 19297KB [ 2498.817099] kmalloc-1024 14251KB 14269KB [ 2498.834453] kmalloc-512 17628KB 17628KB [ 2498.843286] kmalloc-256 5995KB 6007KB [ 2498.848654] kmalloc-128 1463KB 1575KB [ 2498.866698] kmalloc-96 3351KB 4292KB [ 2498.877069] kmalloc-64 2811KB 3428KB [ 2498.889295] kmalloc-32 2038KB 2460KB [ 2498.907279] kmalloc-192 2422KB 2816KB [ 2498.916583] kmem_cache 177KB 183KB [ 2498.934165] Out of memory (oom_kill_allocating_task): Kill process 19972 (modprobe) score 0 or sacrifice child [ 2498.948716] Killed process 19972 (modprobe) total-vm:4kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB [ 2498.969274] modprobe: page allocation failure: order:0, mode:0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 2498.971572] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2498.986596] modprobe cpuset=/ mems_allowed=0-1 [ 2498.996913] CPU: 0 PID: 19972 Comm: modprobe Not tainted 4.19.211-syzkaller #0 [ 2499.004264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2499.013609] Call Trace: [ 2499.016204] dump_stack+0x1fc/0x2ef [ 2499.019835] warn_alloc.cold+0x7b/0x18f [ 2499.023811] ? zone_watermark_ok_safe+0x260/0x260 [ 2499.028654] ? mark_oom_victim+0x68/0x420 [ 2499.032812] ? wait_for_completion_io+0x10/0x10 [ 2499.037496] __alloc_pages_nodemask+0x232f/0x2890 [ 2499.039639] systemd-journal cpuset=/ mems_allowed=0-1 [ 2499.042351] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2499.052334] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2499.057182] ? should_fail+0x142/0x7b0 [ 2499.061073] ? lock_downgrade+0x720/0x720 [ 2499.065214] alloc_pages_current+0x193/0x2a0 [ 2499.069617] pte_alloc_one+0x16/0x190 [ 2499.073429] __pte_alloc+0x21/0x340 [ 2499.077067] move_page_tables+0x165d/0x1b50 [ 2499.081406] shift_arg_pages+0x1a7/0x450 [ 2499.085462] ? mprotect_fixup+0x54c/0x9b0 [ 2499.089616] ? put_arg_page+0x210/0x210 [ 2499.093627] ? get_random_u32+0xf3/0x1e0 [ 2499.097686] ? change_protection+0xc0/0xc0 [ 2499.101920] ? lock_downgrade+0x720/0x720 [ 2499.106055] ? lock_acquire+0x170/0x3c0 [ 2499.110020] ? get_random_u32+0x46/0x1e0 [ 2499.114090] ? lock_acquire+0x170/0x3c0 [ 2499.118065] ? setup_arg_pages+0x297/0x790 [ 2499.122304] setup_arg_pages+0x62a/0x790 [ 2499.126364] ? shift_arg_pages+0x450/0x450 [ 2499.130590] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2499.135170] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2499.140281] load_elf_binary+0xba0/0x5050 [ 2499.144426] ? do_raw_read_unlock+0x3b/0x70 [ 2499.148746] ? _raw_read_unlock+0x29/0x40 [ 2499.152892] ? elf_core_dump+0x4c10/0x4c10 [ 2499.157132] ? lock_acquire+0x170/0x3c0 [ 2499.161102] ? search_binary_handler.part.0+0x108/0x4e0 [ 2499.166457] ? ima_file_mmap+0x130/0x130 [ 2499.170511] search_binary_handler.part.0+0xf9/0x4e0 [ 2499.175617] __do_execve_file+0x1357/0x2360 [ 2499.179939] ? open_exec+0x70/0x70 [ 2499.183471] ? check_preemption_disabled+0x41/0x280 [ 2499.188482] do_execve+0x35/0x50 [ 2499.191837] call_usermodehelper_exec_async+0x50e/0x6a0 [ 2499.197185] ? umh_complete+0x90/0x90 [ 2499.200975] ret_from_fork+0x24/0x30 [ 2499.204719] CPU: 1 PID: 17609 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 2499.212277] Mem-Info: [ 2499.212689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2499.215098] active_anon:16160 inactive_anon:36558 isolated_anon:0 [ 2499.215098] active_file:42 inactive_file:0 isolated_file:0 [ 2499.215098] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2499.215098] slab_reclaimable:13319 slab_unreclaimable:112653 [ 2499.215098] mapped:22600 shmem:38035 pagetables:563 bounce:0 [ 2499.215098] free:13875 free_pcp:118 free_cma:0 [ 2499.224406] Call Trace: [ 2499.224424] dump_stack+0x1fc/0x2ef [ 2499.224442] dump_header+0x15d/0xc3f [ 2499.224458] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2499.224490] ? ___ratelimit+0x319/0x590 [ 2499.257691] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2499.260174] oom_kill_process.cold+0x10/0x692 [ 2499.260189] ? check_preemption_disabled+0x41/0x280 [ 2499.260212] ? has_intersects_mems_allowed+0x1d6/0x290 [ 2499.264132] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2499.267510] out_of_memory+0x1072/0x1390 [ 2499.272649] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2499.276544] ? oom_killer_disable+0x270/0x270 [ 2499.283079] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2499.287496] ? mutex_trylock+0x15f/0x1a0 [ 2499.292540] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2499.297741] __alloc_pages_nodemask+0x23a2/0x2890 [ 2499.304264] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 2499.308250] ? find_get_entry+0x4cd/0x8a0 [ 2499.351042] Node 0 active_anon:63096kB inactive_anon:79432kB active_file:164kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82236kB dirty:0kB writeback:0kB shmem:85016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2499.351597] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2499.384014] alloc_pages_current+0x193/0x2a0 [ 2499.388424] filemap_fault+0x146e/0x2180 [ 2499.392499] ext4_filemap_fault+0x84/0xb0 [ 2499.396654] __do_fault+0x10b/0x4b0 [ 2499.400280] ? do_raw_spin_unlock+0x171/0x230 [ 2499.404781] __handle_mm_fault+0x273b/0x41c0 [ 2499.409201] ? vm_insert_page+0x9c0/0x9c0 [ 2499.409660] Node 1 active_anon:1544kB inactive_anon:66800kB active_file:4kB inactive_file:304kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8264kB dirty:0kB writeback:0kB shmem:67124kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2499.413359] ? check_preemption_disabled+0x41/0x280 [ 2499.445402] handle_mm_fault+0x436/0xb10 [ 2499.449466] __do_page_fault+0x68e/0xd60 [ 2499.453533] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2499.458555] ? spurious_fault+0x840/0x840 [ 2499.462704] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2499.467551] ? page_fault+0x8/0x30 [ 2499.471091] page_fault+0x1e/0x30 [ 2499.474539] RIP: 0033:0x7f919aa259c0 [ 2499.478249] Code: Bad RIP value. [ 2499.479662] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:2860kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2499.481602] RSP: 002b:00007ffe13a65308 EFLAGS: 00010246 [ 2499.481613] RAX: 0000000000000000 RBX: 00007ffe13a68220 RCX: 0000000000000001 [ 2499.481620] RDX: 00007f919b496a00 RSI: 0000000000000000 RDI: 0000556b443ac9a3 [ 2499.481631] RBP: 00007ffe13a65340 R08: 0000000000000000 R09: 0000000000000000 [ 2499.535290] R10: 0000000000000069 R11: 0000000000000202 R12: 0000000000000000 [ 2499.538569] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2499.542549] R13: 0000000000000000 R14: 00007ffe13a68220 R15: 00007ffe13a65830 [ 2499.572567] Mem-Info: [ 2499.575547] active_anon:16160 inactive_anon:36558 isolated_anon:0 [ 2499.575547] active_file:42 inactive_file:665 isolated_file:0 [ 2499.575547] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2499.575547] slab_reclaimable:13319 slab_unreclaimable:112264 [ 2499.575547] mapped:23050 shmem:38035 pagetables:563 bounce:0 [ 2499.575547] free:58095 free_pcp:520 free_cma:0 [ 2499.589592] Node 0 DMA32 free:19316kB min:35996kB low:44992kB high:53988kB active_anon:62972kB inactive_anon:76572kB active_file:164kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:2096kB bounce:0kB free_pcp:192kB local_pcp:180kB free_cma:0kB [ 2499.615435] Node 0 active_anon:63096kB inactive_anon:79432kB active_file:164kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82236kB dirty:0kB writeback:0kB shmem:85016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2499.693916] Node 1 active_anon:1544kB inactive_anon:66800kB active_file:4kB inactive_file:6504kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12864kB dirty:0kB writeback:0kB shmem:67124kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2499.727938] lowmem_reserve[]: 0 0 1 1 1 [ 2499.732709] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2499.765646] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:124kB inactive_anon:2860kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2499.799046] lowmem_reserve[]: 0 0 0 0 0 [ 2499.804231] Node 1 Normal free:310968kB min:53876kB low:67344kB high:80812kB active_anon:1608kB inactive_anon:66800kB active_file:24kB inactive_file:7860kB unevictable:0kB writepending:148kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:236kB bounce:0kB free_pcp:1740kB local_pcp:260kB free_cma:0kB [ 2499.839466] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 2499.845433] Node 0 DMA32 free:21028kB min:35996kB low:44992kB high:53988kB active_anon:62972kB inactive_anon:76572kB active_file:120kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:2096kB bounce:0kB free_pcp:192kB local_pcp:48kB free_cma:0kB [ 2499.886749] lowmem_reserve[]: 0 0 0 0 0 [ 2499.895672] Node 0 DMA: 2*4kB (UE) 2*8kB (ME) 4*16kB (ME) 5*32kB (UME) 2*64kB (ME) 4*128kB (UME) 7*256kB (UME) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10872kB [ 2499.916707] Node 0 DMA32: 1293*4kB (UMEH) 737*8kB (UMEH) 271*16kB (UMEH) 92*32kB (UMEH) 27*64kB (UMEH) 4*128kB (U) 0*256kB 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 21100kB [ 2499.937682] lowmem_reserve[]: 0 0 1 1 1 [ 2499.942052] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2499.974967] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2499.987557] Node 1 Normal: 27*4kB (UE) 14*8kB (ME) 13*16kB (UME) 10*32kB (UME) 30*64kB (UME) 2432*128kB (UM) 469*256kB (UM) 0*512kB 3*1024kB (ME) 2*2048kB (UM) 2*4096kB (U) = 449388kB [ 2500.009724] lowmem_reserve[]: 0 0 0 0 0 [ 2500.013717] Node 1 Normal free:473280kB min:53876kB low:67344kB high:80812kB active_anon:1572kB inactive_anon:66804kB active_file:96kB inactive_file:8568kB unevictable:0kB writepending:148kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:156kB bounce:0kB free_pcp:1648kB local_pcp:320kB free_cma:0kB [ 2500.048662] lowmem_reserve[]: 0 0 0 0 0 [ 2500.049578] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2500.053138] Node 0 DMA: 2*4kB (UE) 2*8kB (ME) 4*16kB (ME) 5*32kB (UME) 2*64kB (ME) 4*128kB (UME) 7*256kB (UME) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10872kB [ 2500.069567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2500.082137] Node 0 DMA32: 1293*4kB (UMEH) 737*8kB (UMEH) 271*16kB (UMEH) 92*32kB (UMEH) 27*64kB (UMEH) 4*128kB (U) 0*256kB 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 21100kB [ 2500.101472] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2500.105622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2500.112876] Node 1 Normal: 27*4kB (UE) 15*8kB (UME) 12*16kB (UME) 10*32kB (UME) 30*64kB (UME) 2432*128kB (UM) 714*256kB (UM) 98*512kB (U) 3*1024kB (ME) 2*2048kB (UM) 2*4096kB (U) = 562276kB [ 2500.138829] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2500.148013] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2500.156944] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2500.165809] 40253 total pagecache pages [ 2500.170048] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2500.178884] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2500.187761] 0 pages in swap cache [ 2500.191480] Swap cache stats: add 0, delete 0, find 0/0 [ 2500.196834] Free swap = 0kB [ 2500.204834] Total swap = 0kB [ 2500.207906] 2097051 pages RAM [ 2500.211335] 40253 total pagecache pages [ 2500.215317] 0 pages in swap cache [ 2500.218762] Swap cache stats: add 0, delete 0, find 0/0 [ 2500.229691] 0 pages HighMem/MovableOnly [ 2500.233668] 369649 pages reserved [ 2500.237117] 0 pages cma reserved [ 2500.245452] Free swap = 0kB [ 2500.248472] Total swap = 0kB [ 2500.253379] 2097051 pages RAM [ 2500.256484] 0 pages HighMem/MovableOnly [ 2500.265520] 369649 pages reserved [ 2500.268979] 0 pages cma reserved [ 2500.272650] Unreclaimable slab info: [ 2500.276359] Name Used Total [ 2500.286905] pid_2 14KB 76KB [ 2500.293316] batadv_tt_change_cache 5KB 7KB [ 2500.299131] batadv_tl_cache 16KB 16KB [ 2500.309456] TIPC 30KB 30KB [ 2500.315140] SCTPv6 30KB 30KB [ 2500.325523] DCCPv6 32KB 37KB [ 2500.331296] DCCP 35KB 35KB [ 2500.336706] RXRPC 26KB 26KB [ 2500.347332] rxrpc_call_jar 126KB 141KB [ 2500.353139] ------------[ cut here ]------------ [ 2500.358252] memory commitment underflow [ 2500.358377] WARNING: CPU: 1 PID: 19974 at mm/util.c:668 __vm_enough_memory+0x516/0x650 [ 2500.370374] Kernel panic - not syncing: panic_on_warn set ... [ 2500.370374] [ 2500.377734] CPU: 1 PID: 19974 Comm: kworker/u4:6 Not tainted 4.19.211-syzkaller #0 [ 2500.385430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2500.394774] Call Trace: [ 2500.397365] dump_stack+0x1fc/0x2ef [ 2500.400997] panic+0x26a/0x50e [ 2500.404186] ? __warn_printk+0xf3/0xf3 [ 2500.408073] ? __vm_enough_memory+0x516/0x650 [ 2500.412565] ? __probe_kernel_read+0x130/0x1b0 [ 2500.417144] ? __warn.cold+0x5/0x5a [ 2500.420767] ? __warn+0xe4/0x200 [ 2500.424138] ? __vm_enough_memory+0x516/0x650 [ 2500.428638] __warn.cold+0x20/0x5a [ 2500.432178] ? kvm_sched_clock_read+0x14/0x40 [ 2500.436673] ? __vm_enough_memory+0x516/0x650 [ 2500.439667] can_receiver 0KB 3KB [ 2500.441165] report_bug+0x262/0x2b0 [ 2500.446507] bridge_fdb_cache 18KB 23KB [ 2500.450120] do_error_trap+0x1d7/0x310 [ 2500.450134] ? math_error+0x310/0x310 [ 2500.450147] ? mark_held_locks+0xa6/0xf0 [ 2500.450160] ? vprintk_emit+0x22d/0x740 [ 2500.450178] ? error_entry+0x72/0xd0 [ 2500.469557] fib6_nodes 255KB 268KB [ 2500.471157] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2500.471172] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2500.471190] invalid_op+0x14/0x20 [ 2500.471203] RIP: 0010:__vm_enough_memory+0x516/0x650 [ 2500.471214] Code: 09 31 ff 89 de e8 aa e9 db ff 84 db 0f 85 a9 fb ff ff e8 6d e8 db ff 48 c7 c7 20 eb 71 88 c6 05 1c 0e 88 09 01 e8 3f 20 6c 06 <0f> 0b 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 0f b6 14 [ 2500.471220] RSP: 0018:ffff88818ae07d30 EFLAGS: 00010282 [ 2500.471229] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 2500.471236] RDX: 0000000000000000 RSI: ffffffff814dff01 RDI: ffffed10315c0f98 [ 2500.471242] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000009761 [ 2500.471252] R10: 0000000000000006 R11: 0000000000000000 R12: 0000000000000001 [ 2500.478434] ip6_dst_cache 750KB 750KB [ 2500.480287] R13: ffffffffffce2f47 R14: ffffffff8a009dc0 R15: 0000000000000d2b [ 2500.480308] ? vprintk_func+0x81/0x180 [ 2500.480329] insert_vm_struct+0x291/0x340 [ 2500.480352] __do_execve_file+0xdfe/0x2360 [ 2500.499546] RAWv6 128KB 128KB [ 2500.517575] ? open_exec+0x70/0x70 [ 2500.517589] ? do_raw_spin_unlock+0x171/0x230 [ 2500.517604] ? check_preemption_disabled+0x41/0x280 [ 2500.517624] do_execve+0x35/0x50 [ 2500.517641] call_usermodehelper_exec_async+0x50e/0x6a0 [ 2500.517652] ? umh_complete+0x90/0x90 [ 2500.517666] ret_from_fork+0x24/0x30 [ 2500.518325] Kernel Offset: disabled [ 2500.615550] Rebooting in 86400 seconds..