last executing test programs: 3.993593701s ago: executing program 3 (id=4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c9", @ANYRES16=r0], 0x7) 3.742875759s ago: executing program 3 (id=5): socket(0xa, 0x2, 0xfffffffe) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x100) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x8040587f, &(0x7f00000000c0)={0x29, 0x300000000}) 3.462523608s ago: executing program 3 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000180)=ANY=[], 0x38}}], 0x1, 0x40000000) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000ac0)=""/102392, 0x18ff8) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 1.733162494s ago: executing program 3 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000ac0)=""/102392, 0x18ff8) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 1.22996515s ago: executing program 0 (id=1): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xfffffff8, 0x1, 0x4}) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af2", 0xca}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$dvb_frontend(&(0x7f0000000440), 0x59d14cbb, 0x882) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xfffffff8, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001240)={0x0, 0x5}, 0x8) 216.225913ms ago: executing program 1 (id=2): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002", 0x29}], 0x1}, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) listen(r1, 0x800) accept(r1, 0x0, &(0x7f00000000c0)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x0, @dev}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)='%pI4 \x00'}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x3c}}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 63.671189ms ago: executing program 2 (id=3): kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df349", 0xd9, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5cff90a", 0xee, 0x5, 0xffffffff}, {&(0x7f0000000200), 0x0, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd6b9bd0eac6bea1", 0xee, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78ad", 0x59}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 0 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000ac0)=""/102392, 0x18ff8) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. [ 79.198509][ T5757] cgroup: Unknown subsys name 'net' [ 79.333828][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.037993][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.701404][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.711419][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.720459][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.728434][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.747115][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.765597][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.786393][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.806093][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.813532][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.824340][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.825290][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.837321][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.841158][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.848543][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.860683][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.863514][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.875897][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.883370][ T5081] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.890702][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.900746][ T5081] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.909419][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.948753][ T5081] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.956900][ T5081] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.964507][ T5081] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.427276][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 83.459123][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 83.574030][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 83.600917][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 83.640821][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.648219][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.655800][ T5779] bridge_slave_0: entered allmulticast mode [ 83.663386][ T5779] bridge_slave_0: entered promiscuous mode [ 83.700328][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.707898][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.715174][ T5770] bridge_slave_0: entered allmulticast mode [ 83.722366][ T5770] bridge_slave_0: entered promiscuous mode [ 83.731661][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.738865][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.748856][ T5779] bridge_slave_1: entered allmulticast mode [ 83.756226][ T5779] bridge_slave_1: entered promiscuous mode [ 83.789729][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.797006][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.804164][ T5770] bridge_slave_1: entered allmulticast mode [ 83.811383][ T5770] bridge_slave_1: entered promiscuous mode [ 83.887188][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.904699][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.924784][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.946925][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.023904][ T5770] team0: Port device team_slave_0 added [ 84.042904][ T5770] team0: Port device team_slave_1 added [ 84.061649][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.071865][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.079203][ T5773] bridge_slave_0: entered allmulticast mode [ 84.087374][ T5773] bridge_slave_0: entered promiscuous mode [ 84.094696][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.101945][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.109915][ T5768] bridge_slave_0: entered allmulticast mode [ 84.117896][ T5768] bridge_slave_0: entered promiscuous mode [ 84.139299][ T5779] team0: Port device team_slave_0 added [ 84.148869][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.156152][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.163355][ T5773] bridge_slave_1: entered allmulticast mode [ 84.171363][ T5773] bridge_slave_1: entered promiscuous mode [ 84.178566][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.186126][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.193359][ T5768] bridge_slave_1: entered allmulticast mode [ 84.200797][ T5768] bridge_slave_1: entered promiscuous mode [ 84.220389][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.227492][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.253740][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.267860][ T5779] team0: Port device team_slave_1 added [ 84.305964][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.313080][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.342756][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.382430][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.395891][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.439058][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.460607][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.467893][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.494817][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.523420][ T5770] hsr_slave_0: entered promiscuous mode [ 84.529969][ T5770] hsr_slave_1: entered promiscuous mode [ 84.540792][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.560335][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.572335][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.601719][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.628070][ T5773] team0: Port device team_slave_0 added [ 84.657317][ T5773] team0: Port device team_slave_1 added [ 84.677078][ T5768] team0: Port device team_slave_0 added [ 84.686952][ T5768] team0: Port device team_slave_1 added [ 84.732421][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.741725][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.768045][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.812423][ T5779] hsr_slave_0: entered promiscuous mode [ 84.819028][ T5779] hsr_slave_1: entered promiscuous mode [ 84.825603][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.833549][ T5779] Cannot create hsr debugfs directory [ 84.850722][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.857864][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.884282][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.922852][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.930069][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.956752][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.968150][ T5772] Bluetooth: hci0: command tx timeout [ 84.968170][ T5776] Bluetooth: hci2: command tx timeout [ 84.980095][ T5081] Bluetooth: hci1: command tx timeout [ 84.993231][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.000710][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.027068][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.045437][ T5081] Bluetooth: hci3: command tx timeout [ 85.129047][ T5773] hsr_slave_0: entered promiscuous mode [ 85.135598][ T5773] hsr_slave_1: entered promiscuous mode [ 85.141846][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.149605][ T5773] Cannot create hsr debugfs directory [ 85.203976][ T5768] hsr_slave_0: entered promiscuous mode [ 85.211068][ T5768] hsr_slave_1: entered promiscuous mode [ 85.218495][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.226683][ T5768] Cannot create hsr debugfs directory [ 85.559530][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.599691][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.616784][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.627819][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.688132][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.714266][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.726176][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.753028][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.833529][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.847452][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.880403][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.891780][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.978540][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.989854][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.002054][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.024376][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.048911][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.070281][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.088736][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.096205][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.147103][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.154329][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.277209][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.292096][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.357100][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.394863][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.437923][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.445070][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.457572][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.464755][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.483063][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.502301][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.509527][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.557104][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.564283][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.594159][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.689620][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.696782][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.713694][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.720853][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.849819][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.053227][ T5770] veth0_vlan: entered promiscuous mode [ 87.060511][ T5081] Bluetooth: hci1: command tx timeout [ 87.066521][ T5776] Bluetooth: hci0: command tx timeout [ 87.070328][ T5772] Bluetooth: hci2: command tx timeout [ 87.126704][ T5772] Bluetooth: hci3: command tx timeout [ 87.160092][ T5770] veth1_vlan: entered promiscuous mode [ 87.252941][ T5770] veth0_macvtap: entered promiscuous mode [ 87.281023][ T5770] veth1_macvtap: entered promiscuous mode [ 87.364896][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.391361][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.434753][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.488289][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.506756][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.520119][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.530409][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.660475][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.699566][ T5779] veth0_vlan: entered promiscuous mode [ 87.741753][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.867718][ T5779] veth1_vlan: entered promiscuous mode [ 87.913899][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.935237][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.977212][ T5773] veth0_vlan: entered promiscuous mode [ 87.984930][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.006384][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.083788][ T5768] veth0_vlan: entered promiscuous mode [ 88.122355][ T5779] veth0_macvtap: entered promiscuous mode [ 88.131083][ T5773] veth1_vlan: entered promiscuous mode [ 88.151065][ T5779] veth1_macvtap: entered promiscuous mode [ 88.164566][ T5768] veth1_vlan: entered promiscuous mode [ 88.250756][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.263629][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.276978][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.287677][ T5773] veth0_macvtap: entered promiscuous mode [ 88.305010][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.316477][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.330835][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.343747][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.353099][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.363269][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.372544][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.453971][ T5773] veth1_macvtap: entered promiscuous mode [ 88.528523][ T5768] veth0_macvtap: entered promiscuous mode [ 88.542574][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.554549][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.567876][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.579409][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.591219][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.613292][ T5768] veth1_macvtap: entered promiscuous mode [ 88.650035][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.670081][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.670100][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.701341][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.744804][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.756027][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.766390][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.778973][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.791188][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.813428][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.824989][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.835888][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.847210][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.860538][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.386462][ T5772] Bluetooth: hci2: command tx timeout [ 90.391970][ T5081] Bluetooth: hci1: command tx timeout [ 90.397630][ T5772] Bluetooth: hci0: command tx timeout [ 90.403075][ T5772] Bluetooth: hci3: command tx timeout [ 90.437220][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.447126][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.456176][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.464909][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.491902][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.524812][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.542983][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.554716][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.575196][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.585815][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.598592][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.632483][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.661976][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.671151][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.684786][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.713853][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.734011][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.884868][ T1069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.905662][ T1069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.024876][ T1069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.060547][ T1069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.336023][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.418550][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.716899][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.755183][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.063696][ T1188] cfg80211: failed to load regulatory.db [ 92.134933][ T5855] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 92.264868][ T5859] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.288710][ C0] [ 92.291101][ C0] ================================ [ 92.296236][ C0] WARNING: inconsistent lock state [ 92.301384][ C0] syzkaller #0 Not tainted [ 92.305828][ C0] -------------------------------- [ 92.310969][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 92.317854][ C0] syz.1.2/5853 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 92.323965][ C0] ffff888024e286f0 (slock-AF_PHONET/1){+.?.}-{2:2}, at: __sk_receive_skb+0x180/0x990 [ 92.333536][ C0] {SOFTIRQ-ON-W} state was registered at: [ 92.339252][ C0] lock_acquire+0x19e/0x420 [ 92.343862][ C0] _raw_spin_lock_nested+0x32/0x50 [ 92.349093][ C0] __sk_receive_skb+0x180/0x990 [ 92.354075][ C0] pep_do_rcv+0x682/0xa90 [ 92.358530][ C0] __release_sock+0x1e5/0x460 [ 92.363321][ C0] release_sock+0x5f/0x1c0 [ 92.367853][ C0] pep_sock_accept+0xd58/0x12d0 [ 92.372825][ C0] pn_socket_accept+0x12a/0x370 [ 92.377864][ C0] do_accept+0x4d8/0x6c0 [ 92.382199][ C0] __sys_accept4+0x9b/0x100 [ 92.386827][ C0] __x64_sys_accept+0x7d/0x90 [ 92.391601][ C0] do_syscall_64+0x55/0xb0 [ 92.396114][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.402108][ C0] irq event stamp: 6374 [ 92.406301][ C0] hardirqs last enabled at (6374): [] _raw_spin_unlock_irq+0x23/0x50 [ 92.416084][ C0] hardirqs last disabled at (6373): [] _raw_spin_lock_irq+0x8a/0xf0 [ 92.425646][ C0] softirqs last enabled at (6368): [] netif_rx+0x79/0x90 [ 92.434352][ C0] softirqs last disabled at (6369): [] do_softirq+0xfa/0x1a0 [ 92.443294][ C0] [ 92.443294][ C0] other info that might help us debug this: [ 92.451358][ C0] Possible unsafe locking scenario: [ 92.451358][ C0] [ 92.458811][ C0] CPU0 [ 92.462121][ C0] ---- [ 92.465401][ C0] lock(slock-AF_PHONET/1); [ 92.470006][ C0] [ 92.473468][ C0] lock(slock-AF_PHONET/1); [ 92.478254][ C0] [ 92.478254][ C0] *** DEADLOCK *** [ 92.478254][ C0] [ 92.486399][ C0] 5 locks held by syz.1.2/5853: [ 92.491253][ C0] #0: ffff88805e256820 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 92.496200][ T5772] Bluetooth: hci3: command tx timeout [ 92.501449][ C0] #1: ffff88805d2d8130 (sk_lock-AF_PHONET){+.+.}-{0:0} [ 92.506895][ T5081] Bluetooth: hci1: command tx timeout [ 92.506890][ C0] , at: pep_sock_close+0x86/0x5b0 [ 92.513962][ T5081] Bluetooth: hci0: command tx timeout [ 92.519214][ C0] #2: ffffffff8d132120 (rcu_read_lock){....}-{1:2}, at: process_backlog+0x2cf/0x6f0 [ 92.524327][ T5081] Bluetooth: hci2: command tx timeout [ 92.529636][ C0] #3: ffff888024e280b0 (slock-AF_PHONET){+.-.}-{2:2}, at: __sk_receive_skb+0x18f/0x990 [ 92.554329][ C0] #4: ffff888024e28130 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x78f/0xc80 [ 92.563751][ C0] [ 92.563751][ C0] stack backtrace: [ 92.569679][ C0] CPU: 0 PID: 5853 Comm: syz.1.2 Not tainted syzkaller #0 [ 92.576793][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 92.586881][ C0] Call Trace: [ 92.590181][ C0] [ 92.593049][ C0] dump_stack_lvl+0x18c/0x250 [ 92.597757][ C0] ? show_regs_print_info+0x20/0x20 [ 92.602991][ C0] ? __kernel_text_address+0xd/0x30 [ 92.608230][ C0] ? unwind_get_return_address+0x91/0xc0 [ 92.613885][ C0] valid_state+0x13b/0x1d0 [ 92.618328][ C0] mark_lock_irq+0xad/0x900 [ 92.622851][ C0] ? stack_trace_save+0xaa/0x100 [ 92.627809][ C0] ? save_trace+0xcd0/0xcd0 [ 92.632334][ C0] ? mark_lock+0x94/0x320 [ 92.636691][ C0] ? save_trace+0x5d/0xcd0 [ 92.641123][ C0] ? verify_lock_unused+0x140/0x140 [ 92.646353][ C0] mark_lock+0x208/0x320 [ 92.650630][ C0] __lock_acquire+0xd1a/0x7d40 [ 92.655433][ C0] ? verify_lock_unused+0x140/0x140 [ 92.660660][ C0] ? mark_lock+0x94/0x320 [ 92.665018][ C0] ? verify_lock_unused+0x140/0x140 [ 92.670244][ C0] ? sk_filter_trim_cap+0x18a/0x900 [ 92.675467][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 92.680515][ C0] lock_acquire+0x19e/0x420 [ 92.685039][ C0] ? __sk_receive_skb+0x180/0x990 [ 92.690091][ C0] ? read_lock_is_recursive+0x20/0x20 [ 92.695494][ C0] ? sk_filter_trim_cap+0x18a/0x900 [ 92.700725][ C0] ? copy_bpf_fprog_from_user+0x2d0/0x2d0 [ 92.706472][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 92.711518][ C0] ? __lock_acquire+0x1273/0x7d40 [ 92.716562][ C0] _raw_spin_lock_nested+0x32/0x50 [ 92.721701][ C0] ? __sk_receive_skb+0x180/0x990 [ 92.726752][ C0] __sk_receive_skb+0x180/0x990 [ 92.731631][ C0] pep_do_rcv+0x682/0xa90 [ 92.735983][ C0] ? pep_recvmsg+0x600/0x600 [ 92.740599][ C0] ? phonet_rcv+0x78f/0xc80 [ 92.745120][ C0] __sk_receive_skb+0x436/0x990 [ 92.750017][ C0] phonet_rcv+0x78f/0xc80 [ 92.754472][ C0] ? phonet_proto_unregister+0x130/0x130 [ 92.760127][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 92.766132][ C0] ? read_lock_is_recursive+0x20/0x20 [ 92.771522][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 92.776572][ C0] ? phonet_proto_unregister+0x130/0x130 [ 92.782224][ C0] __netif_receive_skb+0xcc/0x290 [ 92.787278][ C0] ? process_backlog+0x2cf/0x6f0 [ 92.792238][ C0] process_backlog+0x391/0x6f0 [ 92.797033][ C0] ? trigger_rx_softirq+0x60/0x60 [ 92.802116][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 92.808123][ C0] ? lock_chain_count+0x20/0x20 [ 92.812996][ C0] __napi_poll+0xc0/0x460 [ 92.817350][ C0] ? net_rx_action+0x3a0/0xc40 [ 92.822136][ C0] net_rx_action+0x616/0xc40 [ 92.826749][ C0] ? net_tx_action+0x980/0x980 [ 92.831531][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 92.837560][ C0] ? lock_chain_count+0x20/0x20 [ 92.842439][ C0] handle_softirqs+0x280/0x820 [ 92.847238][ C0] ? do_softirq+0xfa/0x1a0 [ 92.851679][ C0] ? do_softirq+0x1a0/0x1a0 [ 92.856202][ C0] ? netif_rx+0x79/0x90 [ 92.860378][ C0] do_softirq+0xfa/0x1a0 [ 92.864638][ C0] [ 92.867584][ C0] [ 92.870535][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 92.875953][ C0] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 92.881961][ C0] ? rcu_is_watching+0x15/0xb0 [ 92.886754][ C0] __local_bh_enable_ip+0x184/0x1c0 [ 92.891973][ C0] ? _local_bh_enable+0xa0/0xa0 [ 92.896854][ C0] netif_rx+0x83/0x90 [ 92.900868][ C0] pn_send+0x553/0x7f0 [ 92.904966][ C0] pn_skb_send+0x218/0x510 [ 92.909501][ C0] pep_sock_close+0x2c1/0x5b0 [ 92.914201][ C0] pn_socket_release+0x95/0xb0 [ 92.918992][ C0] sock_close+0xbd/0x230 [ 92.923258][ C0] ? sock_mmap+0xa0/0xa0 [ 92.927518][ C0] __fput+0x234/0x970 [ 92.931524][ C0] task_work_run+0x1d4/0x260 [ 92.936143][ C0] ? task_work_cancel+0x220/0x220 [ 92.941193][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 92.946681][ C0] exit_to_user_mode_loop+0xe6/0x110 [ 92.951994][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 92.957563][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 92.963045][ C0] do_syscall_64+0x61/0xb0 [ 92.967481][ C0] ? clear_bhb_loop+0x40/0x90 [ 92.972184][ C0] ? clear_bhb_loop+0x40/0x90 [ 92.976886][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.982800][ C0] RIP: 0033:0x7f3130f9ce59 [ 92.987247][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.006898][ C0] RSP: 002b:00007ffd8ecab308 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 93.015332][ C0] RAX: 0000000000000000 RBX: 00007ffd8ecab3f0 RCX: 00007f3130f9ce59 [ 93.023322][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 93.031307][ C0] RBP: 0000000000016753 R08: 0000000000000001 R09: 0000000000000000 [ 93.039290][ C0] R10: 0000001b2c520000 R11: 0000000000000246 R12: 00007ffd8ecab430 [ 93.047278][ C0] R13: 00007f3131215fac R14: 0000000000016881 R15: 00007f3131215fa0 [ 93.055272][ C0] [ 94.095268][ T5853] gprs0: detached [ 95.355410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!