last executing test programs: 1.075159154s ago: executing program 0 (id=1): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000400), &(0x7f0000000440)=r3}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000740)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.03541587s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000440)=@framed={{}, [@cb_func={0x18, 0xc, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x840) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) 948.139548ms ago: executing program 0 (id=5): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=ANY=[@ANYBLOB="15000000080000003c"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x98}}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="c48a570389e85e8182eab41a2f16", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_submit(0x0, 0x1, &(0x7f00000009c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x4000, 0xffffffffffffffff, 0x0, 0x300, 0x0, 0x0, 0x3}]) syz_usb_connect(0x0, 0x5b, 0x0, 0x0) r6 = socket(0x3, 0x5, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000001c0)={0x0, 0x0, 0xb, 0x9, 0x0, 0x2, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) 782.332432ms ago: executing program 3 (id=4): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2c0, 0x2a8, 0x2a8, 0x2c0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@rand_addr=0x64010101, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xff000000, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x12}, 0x0, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x4000000000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x80, 0x6, 0x8, '\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) socketpair$unix(0x1, 0x1, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1003f91, &(0x7f0000000300)={[0x5faa]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 723.09962ms ago: executing program 1 (id=2): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="3666450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 80.054803ms ago: executing program 2 (id=6): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000020c0)=0x1, 0x4) 79.890621ms ago: executing program 2 (id=7): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) 283.364µs ago: executing program 1 (id=8): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 166.593µs ago: executing program 2 (id=9): getpid() r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200, 0x101001) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8008550e, &(0x7f00000001c0)) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 0s ago: executing program 1 (id=10): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:51507' (ED25519) to the list of known hosts. [ 46.039350][ T40] audit: type=1400 audit(1769427481.630:62): avc: denied { name_bind } for pid=5850 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.067329][ T40] audit: type=1400 audit(1769427481.660:63): avc: denied { execute } for pid=5851 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.075937][ T40] audit: type=1400 audit(1769427481.660:64): avc: denied { execute_no_trans } for pid=5851 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.104426][ T40] audit: type=1400 audit(1769427483.700:65): avc: denied { mounton } for pid=5851 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.112504][ T40] audit: type=1400 audit(1769427483.710:66): avc: denied { mount } for pid=5851 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.114257][ T5851] cgroup: Unknown subsys name 'net' [ 48.227100][ T5851] cgroup: Unknown subsys name 'cpuset' [ 48.231054][ T5851] cgroup: Unknown subsys name 'rlimit' [ 48.417733][ T5892] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.154424][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.281821][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 52.281834][ T40] audit: type=1400 audit(1769427487.850:85): avc: denied { execmem } for pid=5922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.438939][ T40] audit: type=1400 audit(1769427488.030:86): avc: denied { create } for pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.448433][ T40] audit: type=1400 audit(1769427488.030:87): avc: denied { create } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.456908][ T40] audit: type=1400 audit(1769427488.030:89): avc: denied { read write } for pid=5926 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.464292][ T40] audit: type=1400 audit(1769427488.030:88): avc: denied { read write } for pid=5925 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.468282][ T5931] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.471648][ T40] audit: type=1400 audit(1769427488.030:90): avc: denied { open } for pid=5925 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.482154][ T40] audit: type=1400 audit(1769427488.030:91): avc: denied { open } for pid=5926 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.489553][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.491840][ T40] audit: type=1400 audit(1769427488.040:92): avc: denied { ioctl } for pid=5925 comm="syz-executor" path="socket:[3947]" dev="sockfs" ino=3947 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.498401][ T5936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.500167][ T5932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.504523][ T5936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.505639][ T5932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.509990][ T5932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.510315][ T5936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.512385][ T5932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.512509][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.513108][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.513674][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.514858][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.517471][ T5936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.517597][ T5932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.518015][ T5932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.518261][ T5932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.519793][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.519848][ T5931] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.523102][ T5936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.527449][ T40] audit: type=1400 audit(1769427488.120:93): avc: denied { read } for pid=5934 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.554011][ T40] audit: type=1400 audit(1769427488.120:94): avc: denied { open } for pid=5934 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.833989][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 52.859972][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 52.885660][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 52.894286][ T5925] chnl_net:caif_netlink_parms(): no params data found [ 53.027883][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.030655][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.033939][ T5926] bridge_slave_0: entered allmulticast mode [ 53.036686][ T5926] bridge_slave_0: entered promiscuous mode [ 53.047400][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.049602][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.051951][ T5926] bridge_slave_1: entered allmulticast mode [ 53.054555][ T5926] bridge_slave_1: entered promiscuous mode [ 53.100974][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.103514][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.105744][ T5934] bridge_slave_0: entered allmulticast mode [ 53.108305][ T5934] bridge_slave_0: entered promiscuous mode [ 53.121561][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.123950][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.126240][ T5934] bridge_slave_1: entered allmulticast mode [ 53.128852][ T5934] bridge_slave_1: entered promiscuous mode [ 53.173649][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.176659][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.179498][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.182387][ T5925] bridge_slave_0: entered allmulticast mode [ 53.185699][ T5925] bridge_slave_0: entered promiscuous mode [ 53.191501][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.195551][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.198507][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.201301][ T5933] bridge_slave_0: entered allmulticast mode [ 53.205130][ T5933] bridge_slave_0: entered promiscuous mode [ 53.209736][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.212826][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.215869][ T5933] bridge_slave_1: entered allmulticast mode [ 53.219720][ T5933] bridge_slave_1: entered promiscuous mode [ 53.225418][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.229510][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.232094][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.234420][ T5925] bridge_slave_1: entered allmulticast mode [ 53.237117][ T5925] bridge_slave_1: entered promiscuous mode [ 53.242208][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.292172][ T5934] team0: Port device team_slave_0 added [ 53.305834][ T5934] team0: Port device team_slave_1 added [ 53.341320][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.347088][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.351038][ T5926] team0: Port device team_slave_0 added [ 53.353675][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.356656][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.367193][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.373635][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.379122][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.384105][ T5926] team0: Port device team_slave_1 added [ 53.386486][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.389370][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.400353][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.440139][ T5933] team0: Port device team_slave_0 added [ 53.448691][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.450937][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.459103][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.463885][ T5925] team0: Port device team_slave_0 added [ 53.466666][ T5933] team0: Port device team_slave_1 added [ 53.479621][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.482089][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.490122][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.495001][ T5925] team0: Port device team_slave_1 added [ 53.525955][ T5934] hsr_slave_0: entered promiscuous mode [ 53.528281][ T5934] hsr_slave_1: entered promiscuous mode [ 53.530951][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.533269][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.541219][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.554019][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.556240][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.564442][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.572805][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.576209][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.587001][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.597794][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.600463][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.610761][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.654879][ T5926] hsr_slave_0: entered promiscuous mode [ 53.657577][ T5926] hsr_slave_1: entered promiscuous mode [ 53.659805][ T5926] debugfs: 'hsr0' already exists in 'hsr' [ 53.661854][ T5926] Cannot create hsr debugfs directory [ 53.667115][ T5933] hsr_slave_0: entered promiscuous mode [ 53.670004][ T5933] hsr_slave_1: entered promiscuous mode [ 53.673255][ T5933] debugfs: 'hsr0' already exists in 'hsr' [ 53.675688][ T5933] Cannot create hsr debugfs directory [ 53.722479][ T5925] hsr_slave_0: entered promiscuous mode [ 53.725899][ T5925] hsr_slave_1: entered promiscuous mode [ 53.728772][ T5925] debugfs: 'hsr0' already exists in 'hsr' [ 53.731124][ T5925] Cannot create hsr debugfs directory [ 54.014336][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.023033][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.029821][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.041639][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.089870][ T5933] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.097285][ T5933] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.104088][ T5933] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.111439][ T5933] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.164315][ T5926] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.172412][ T5926] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.186275][ T5926] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.203378][ T5926] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.267540][ T5925] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.274828][ T5925] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.283807][ T5925] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.291982][ T5925] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.341647][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.382128][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.385436][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.396519][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.404824][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.410348][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.413125][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.425049][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.427353][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.437941][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.440929][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.457938][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.461243][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.463724][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.481823][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.484110][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.505024][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.507301][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.528320][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.533380][ T5291] Bluetooth: hci2: command tx timeout [ 54.533389][ T5939] Bluetooth: hci1: command tx timeout [ 54.538929][ T5925] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.566249][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.569339][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.576337][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.579392][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.612008][ T5939] Bluetooth: hci3: command tx timeout [ 54.612018][ T5291] Bluetooth: hci0: command tx timeout [ 54.615976][ T5925] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.621221][ T5925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.628428][ T5926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.657416][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.670943][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.693925][ T5934] veth0_vlan: entered promiscuous mode [ 54.702670][ T5934] veth1_vlan: entered promiscuous mode [ 54.711168][ T5933] veth0_vlan: entered promiscuous mode [ 54.716753][ T5933] veth1_vlan: entered promiscuous mode [ 54.730346][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.761992][ T5934] veth0_macvtap: entered promiscuous mode [ 54.781236][ T5934] veth1_macvtap: entered promiscuous mode [ 54.792279][ T5933] veth0_macvtap: entered promiscuous mode [ 54.804830][ T5925] veth0_vlan: entered promiscuous mode [ 54.809875][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.816442][ T5933] veth1_macvtap: entered promiscuous mode [ 54.820833][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.827643][ T5925] veth1_vlan: entered promiscuous mode [ 54.832163][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.847759][ T94] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.851261][ T94] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.859241][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.862747][ T94] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.865553][ T94] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.885142][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.904948][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.913263][ T5925] veth0_macvtap: entered promiscuous mode [ 54.919543][ T5925] veth1_macvtap: entered promiscuous mode [ 54.922414][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.925282][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.950434][ T1245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.953942][ T1245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.955166][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.963922][ T5926] veth0_vlan: entered promiscuous mode [ 54.986694][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.987740][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.989814][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.992542][ T5926] veth1_vlan: entered promiscuous mode [ 55.018631][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.025105][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.032129][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.044650][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.048254][ T5934] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.050846][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.056914][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.061637][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.065410][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.069295][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.091414][ T5926] veth0_macvtap: entered promiscuous mode [ 55.102937][ T5926] veth1_macvtap: entered promiscuous mode [ 55.165614][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.169975][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.192770][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.197002][ T1245] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.201924][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.205660][ T1245] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.221334][ T1245] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.225366][ T1245] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.233357][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.236116][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.333700][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.336220][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.358319][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.360889][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.613898][ T6034] xt_hashlimit: max too large, truncated to 1048576 [ 56.150395][ T6049] [ 56.151442][ T6049] ============================= [ 56.153864][ T6049] WARNING: suspicious RCU usage [ 56.155802][ T6049] syzkaller #0 Not tainted [ 56.157474][ T6049] ----------------------------- [ 56.159418][ T6049] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 56.164210][ T6049] [ 56.164210][ T6049] other info that might help us debug this: [ 56.164210][ T6049] [ 56.168392][ T6049] [ 56.168392][ T6049] rcu_scheduler_active = 2, debug_locks = 1 [ 56.171671][ T6049] 1 lock held by syz.1.10/6049: [ 56.173807][ T6049] #0: ffffffff8e5e2940 (rcu_read_lock_trace){....}-{0:0}, at: bpf_prog_test_run_syscall+0x33e/0xad0 [ 56.178525][ T6049] [ 56.178525][ T6049] stack backtrace: [ 56.181060][ T6049] CPU: 1 UID: 0 PID: 6049 Comm: syz.1.10 Not tainted syzkaller #0 PREEMPT(full) [ 56.181085][ T6049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.181096][ T6049] Call Trace: [ 56.181103][ T6049] [ 56.181112][ T6049] dump_stack_lvl+0x100/0x190 [ 56.181141][ T6049] lockdep_rcu_suspicious.cold+0x4f/0xb1 [ 56.181174][ T6049] get_callchain_entry+0x278/0x3f0 [ 56.181199][ T6049] get_perf_callchain+0x2d6/0x990 [ 56.181220][ T6049] ? __pfx_get_perf_callchain+0x10/0x10 [ 56.181238][ T6049] ? __schedule+0xf65/0x5e10 [ 56.181259][ T6049] ? __lock_acquire+0x4a5/0x2630 [ 56.181284][ T6049] __bpf_get_stack+0x531/0xa90 [ 56.181308][ T6049] ? __pfx___bpf_get_stack+0x10/0x10 [ 56.181335][ T6049] bpf_get_stack+0x32/0x40 [ 56.181353][ T6049] bpf_get_stack_raw_tp+0x1dd/0x280 [ 56.181385][ T6049] bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 56.181404][ T6049] bpf_prog_test_run_syscall+0x6b7/0xad0 [ 56.181434][ T6049] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 56.181461][ T6049] ? fput+0x79/0x100 [ 56.181485][ T6049] ? __bpf_prog_get+0x97/0x2a0 [ 56.181511][ T6049] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 56.181538][ T6049] __sys_bpf+0x1e56/0x5050 [ 56.181562][ T6049] ? __pfx___sys_bpf+0x10/0x10 [ 56.181582][ T6049] ? __pfx_futex_wait+0x10/0x10 [ 56.181616][ T6049] ? __lock_acquire+0x4a5/0x2630 [ 56.181637][ T6049] ? do_futex+0x192/0x350 [ 56.181673][ T6049] ? xfd_validate_state+0x129/0x190 [ 56.181716][ T6049] __x64_sys_bpf+0x7b/0xc0 [ 56.181743][ T6049] ? lockdep_hardirqs_on+0x78/0x100 [ 56.181764][ T6049] do_syscall_64+0xc9/0xf80 [ 56.181787][ T6049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.181806][ T6049] RIP: 0033:0x7f6aacd9acb9 [ 56.181822][ T6049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.181840][ T6049] RSP: 002b:00007f6aadc95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 56.181858][ T6049] RAX: ffffffffffffffda RBX: 00007f6aad015fa0 RCX: 00007f6aacd9acb9 [ 56.181869][ T6049] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 56.181880][ T6049] RBP: 00007f6aace08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 56.181891][ T6049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.181901][ T6049] R13: 00007f6aad016038 R14: 00007f6aad015fa0 R15: 00007fff39b94f18 [ 56.181926][ T6049] [ 56.612554][ T5939] Bluetooth: hci2: command tx timeout [ 56.621818][ T5939] Bluetooth: hci1: command tx timeout [ 56.692577][ T5939] Bluetooth: hci3: command tx timeout [ 56.694067][ T5291] Bluetooth: hci0: command tx timeout [ 58.691861][ T5291] Bluetooth: hci1: command tx timeout [ 58.692552][ T5939] Bluetooth: hci2: command tx timeout [ 58.771877][ T5939] Bluetooth: hci0: command tx timeout [ 58.781844][ T5939] Bluetooth: hci3: command tx timeout [ 60.771892][ T5939] Bluetooth: hci2: command tx timeout [ 60.772244][ T5291] Bluetooth: hci1: command tx timeout [ 60.852111][ T5291] Bluetooth: hci3: command tx timeout [ 60.852142][ T5939] Bluetooth: hci0: command tx timeout