last executing test programs: 6.716987292s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000180)=ANY=[], 0x38}}], 0x1, 0x40000000) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000ac0)=""/102392, 0x18ff8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 4.676065745s ago: executing program 0 (id=5): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x51) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@local, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0xffffffff}}, 0xe8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_open_dev$media(0x0, 0xa, 0x41) unshare(0x62040200) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x40010, r0, 0xffffc000) r5 = socket(0x2b, 0x1, 0x1) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x8, 0x5, 0x1, 0x6, 0xd]}, &(0x7f0000000140)=0x54) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) sendmmsg$alg(r4, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c2e", 0x2}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="48000000000000001701000002000000330000002aa52517cc6b2518a3e28acdd9d52b604a30fa4c64d7531a3c92f0f0568c83e4ea19e7667397e93988bed27e11a12078071091000147f51913a4b2495c67a2c845e925284932a7b7a81c2cfeb6ea1be360837fc5d162a2bf43920e06e58843e02eaf90b34bca9f3decf3b9"], 0x48, 0x8010}], 0x1, 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000003c0)={0x0, 0x78, "a6ee7dec98be9583ca071020c09e4a2a714e97db73b44faf3e37a9adfeb5b3509855df3fbec291802d222b4e70d916a5dce8e008b4590425064dd9e945eb2b644a2f9fcb8d5838b59e4ff7f936aa74e36cbbbbd9b4076f0e8267aa2a561e3055a6bcd1064cd363d8f87e22c144f67752402017b237655891"}, &(0x7f0000000440)=0x80) 4.591175798s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000ac0)=""/102392, 0x18ff8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 4.419470313s ago: executing program 3 (id=4): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) read$midi(r0, 0x0, 0x3b) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 4.040390195s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000ac0)=""/102392, 0x18ff8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 2.237709211s ago: executing program 2 (id=6): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) getpgrp(0xffffffffffffffff) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2002b, 0x23, 0x0, 0x2, 0x2, 0x400a9, 0x8, 0x802, 0x1}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = io_uring_setup(0x2dfd, 0x0) r3 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x43ba, 0x80, 0x0, 0x34f}) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r2], 0x1) r4 = socket(0x2d, 0x2, 0x0) connect$qrtr(r4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000000240)="27050200340f3c00060f2f2fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b0000000001004057000000060000000000000080", 0x48}], 0x1}, 0x9cdc2384056f013d) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r5, r6}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r7) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, 0x0) 2.213425822s ago: executing program 3 (id=7): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000280), 0x2, 0x20000) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xb6a, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x4) ioprio_set$uid(0x3, 0x0, 0x0) 256.791852ms ago: executing program 3 (id=8): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='io\x00') r1 = getpgrp(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x17, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x3, 0x2}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 0s ago: executing program 1 (id=9): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002", 0x29}], 0x1}, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) listen(r1, 0x800) accept(r1, 0x0, &(0x7f00000000c0)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x0, @dev}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)='%pI4 \x00'}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 57.460024][ T5434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.481365][ T5434] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.76' (ED25519) to the list of known hosts. syzkaller login: [ 79.663811][ T5760] cgroup: Unknown subsys name 'net' [ 79.798768][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.485183][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.195445][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.206811][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.215602][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.225180][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.234501][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.242692][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.250717][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.259890][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.268983][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.277458][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.299187][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.307193][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.318911][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.341121][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.346496][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.355460][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.356458][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.366432][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.377234][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.388058][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.395460][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.410280][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.425063][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.433646][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.939163][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 84.041574][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 84.107590][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 84.125934][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 84.210265][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.218109][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.225709][ T5773] bridge_slave_0: entered allmulticast mode [ 84.233408][ T5773] bridge_slave_0: entered promiscuous mode [ 84.272031][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.279440][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.286618][ T5775] bridge_slave_0: entered allmulticast mode [ 84.294280][ T5775] bridge_slave_0: entered promiscuous mode [ 84.302383][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.312547][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.319854][ T5773] bridge_slave_1: entered allmulticast mode [ 84.326904][ T5773] bridge_slave_1: entered promiscuous mode [ 84.368862][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.376066][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.387629][ T5775] bridge_slave_1: entered allmulticast mode [ 84.394743][ T5775] bridge_slave_1: entered promiscuous mode [ 84.482933][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.522315][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.533961][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.543598][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.551150][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.558424][ T5771] bridge_slave_0: entered allmulticast mode [ 84.566292][ T5771] bridge_slave_0: entered promiscuous mode [ 84.573926][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.581555][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.591989][ T5781] bridge_slave_0: entered allmulticast mode [ 84.599285][ T5781] bridge_slave_0: entered promiscuous mode [ 84.610984][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.644512][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.653962][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.661700][ T5771] bridge_slave_1: entered allmulticast mode [ 84.669106][ T5771] bridge_slave_1: entered promiscuous mode [ 84.686947][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.694297][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.701783][ T5781] bridge_slave_1: entered allmulticast mode [ 84.709002][ T5781] bridge_slave_1: entered promiscuous mode [ 84.730414][ T5773] team0: Port device team_slave_0 added [ 84.751322][ T5773] team0: Port device team_slave_1 added [ 84.780146][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.792999][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.838575][ T5775] team0: Port device team_slave_0 added [ 84.865937][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.880316][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.887297][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.914079][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.927448][ T5775] team0: Port device team_slave_1 added [ 84.955295][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.965410][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.973090][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.999464][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.029566][ T5771] team0: Port device team_slave_0 added [ 85.064696][ T5781] team0: Port device team_slave_0 added [ 85.073346][ T5771] team0: Port device team_slave_1 added [ 85.092924][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.100353][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.126973][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.140708][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.147710][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.174026][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.198568][ T5781] team0: Port device team_slave_1 added [ 85.245115][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.253723][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.282661][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.310800][ T5773] hsr_slave_0: entered promiscuous mode [ 85.317547][ T5773] hsr_slave_1: entered promiscuous mode [ 85.336760][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.344487][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.370610][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.412634][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.419714][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.446381][ T5783] Bluetooth: hci1: command tx timeout [ 85.446463][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.465726][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.472997][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.499320][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.510551][ T5783] Bluetooth: hci3: command tx timeout [ 85.510703][ T5783] Bluetooth: hci0: command tx timeout [ 85.510920][ T5783] Bluetooth: hci2: command tx timeout [ 85.532556][ T5775] hsr_slave_0: entered promiscuous mode [ 85.540757][ T5775] hsr_slave_1: entered promiscuous mode [ 85.546996][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.555161][ T5775] Cannot create hsr debugfs directory [ 85.618119][ T5771] hsr_slave_0: entered promiscuous mode [ 85.624961][ T5771] hsr_slave_1: entered promiscuous mode [ 85.631661][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.639380][ T5771] Cannot create hsr debugfs directory [ 85.723497][ T5781] hsr_slave_0: entered promiscuous mode [ 85.730658][ T5781] hsr_slave_1: entered promiscuous mode [ 85.737202][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.745065][ T5781] Cannot create hsr debugfs directory [ 86.144023][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.165161][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.176927][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.192410][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.260791][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.279550][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.295658][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.308357][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.412091][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.426618][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.438247][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.454708][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.533559][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.544217][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.555785][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.567126][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.615414][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.691974][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.731413][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.738854][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.777295][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.784529][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.842918][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.898110][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.907201][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.943651][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.954902][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.962074][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.993419][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.000625][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.070009][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.132948][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.155955][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.163196][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.182498][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.189752][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.274679][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.281938][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.303766][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.311015][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.481709][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.508945][ T5783] Bluetooth: hci1: command tx timeout [ 87.589650][ T5783] Bluetooth: hci0: command tx timeout [ 87.595767][ T5783] Bluetooth: hci3: command tx timeout [ 87.596478][ T5776] Bluetooth: hci2: command tx timeout [ 87.811111][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.967516][ T5773] veth0_vlan: entered promiscuous mode [ 88.035774][ T5773] veth1_vlan: entered promiscuous mode [ 88.125316][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.180372][ T5773] veth0_macvtap: entered promiscuous mode [ 88.217877][ T5773] veth1_macvtap: entered promiscuous mode [ 88.243589][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.267499][ T5775] veth0_vlan: entered promiscuous mode [ 88.283843][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.314160][ T5775] veth1_vlan: entered promiscuous mode [ 88.356038][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.373465][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.414794][ T5781] veth0_vlan: entered promiscuous mode [ 88.431234][ T5781] veth1_vlan: entered promiscuous mode [ 88.450175][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.461859][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.472004][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.480968][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.535027][ T5771] veth0_vlan: entered promiscuous mode [ 88.564913][ T5775] veth0_macvtap: entered promiscuous mode [ 88.576514][ T5771] veth1_vlan: entered promiscuous mode [ 88.605818][ T5775] veth1_macvtap: entered promiscuous mode [ 88.631211][ T5781] veth0_macvtap: entered promiscuous mode [ 88.660071][ T5781] veth1_macvtap: entered promiscuous mode [ 88.734417][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.746335][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.759960][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.771178][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.785125][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.794390][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.807963][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.818435][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.830131][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.842624][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.854996][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.865807][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.877439][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.906840][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.917229][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.926465][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.935882][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.951084][ T5771] veth0_macvtap: entered promiscuous mode [ 88.958518][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.969559][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.980847][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.992970][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.004783][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.042862][ T5771] veth1_macvtap: entered promiscuous mode [ 89.059463][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.068229][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.077622][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.087953][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.117846][ T1315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.132726][ T1315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.218208][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.243190][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.253792][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.264647][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.283294][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.294067][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.306667][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.340922][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.353009][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.363861][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.375407][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.387446][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.398719][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.412123][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.479883][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.493231][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.507423][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.529105][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.537877][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.565977][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.589740][ T5783] Bluetooth: hci1: command tx timeout [ 89.669320][ T5783] Bluetooth: hci3: command tx timeout [ 89.669860][ T5776] Bluetooth: hci0: command tx timeout [ 89.680443][ T5783] Bluetooth: hci2: command tx timeout [ 89.688410][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.691683][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.716265][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.299231][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.472345][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.513656][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.572169][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.619156][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.668847][ T5776] Bluetooth: hci1: command tx timeout [ 91.701760][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.740206][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.748923][ T5776] Bluetooth: hci2: command tx timeout [ 91.755018][ T5776] Bluetooth: hci3: command tx timeout [ 91.760674][ T5783] Bluetooth: hci0: command tx timeout [ 92.159997][ T8] cfg80211: failed to load regulatory.db [ 93.690992][ T5847] sched: RT throttling activated [ 96.635524][ T5865] netlink: 'syz.1.9': attribute type 2 has an invalid length. [ 96.977761][ C0] [ 96.980164][ C0] ================================ [ 96.985305][ C0] WARNING: inconsistent lock state [ 96.990467][ C0] syzkaller #0 Not tainted [ 96.994928][ C0] -------------------------------- [ 97.000080][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 97.006997][ C0] syz.1.9/5863 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 97.013116][ C0] ffff88807cbb86f0 (slock-AF_PHONET/1){+.?.}-{2:2}, at: __sk_receive_skb+0x180/0x990 [ 97.022713][ C0] {SOFTIRQ-ON-W} state was registered at: [ 97.028461][ C0] lock_acquire+0x19e/0x420 [ 97.033102][ C0] _raw_spin_lock_nested+0x32/0x50 [ 97.038352][ C0] __sk_receive_skb+0x180/0x990 [ 97.043349][ C0] pep_do_rcv+0x682/0xa90 [ 97.047799][ C0] __release_sock+0x1e5/0x460 [ 97.052610][ C0] release_sock+0x5f/0x1c0 [ 97.057221][ C0] pep_sock_accept+0xd58/0x12d0 [ 97.062189][ C0] pn_socket_accept+0x12a/0x370 [ 97.068484][ C0] do_accept+0x4d8/0x6c0 [ 97.072858][ C0] __sys_accept4+0x9b/0x100 [ 97.077478][ C0] __x64_sys_accept+0x7d/0x90 [ 97.082269][ C0] do_syscall_64+0x55/0xb0 [ 97.087065][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.094824][ C0] irq event stamp: 5268 [ 97.099001][ C0] hardirqs last enabled at (5268): [] _raw_spin_unlock_irq+0x23/0x50 [ 97.108897][ C0] hardirqs last disabled at (5267): [] _raw_spin_lock_irq+0x8a/0xf0 [ 97.118680][ C0] softirqs last enabled at (5262): [] netif_rx+0x79/0x90 [ 97.127510][ C0] softirqs last disabled at (5263): [] do_softirq+0xfa/0x1a0 [ 97.136500][ C0] [ 97.136500][ C0] other info that might help us debug this: [ 97.144598][ C0] Possible unsafe locking scenario: [ 97.144598][ C0] [ 97.152343][ C0] CPU0 [ 97.155641][ C0] ---- [ 97.159027][ C0] lock(slock-AF_PHONET/1); [ 97.163663][ C0] [ 97.167140][ C0] lock(slock-AF_PHONET/1); [ 97.171945][ C0] [ 97.171945][ C0] *** DEADLOCK *** [ 97.171945][ C0] [ 97.180116][ C0] 5 locks held by syz.1.9/5863: [ 97.184996][ C0] #0: ffff8880775a5c20 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 97.195234][ C0] #1: ffff88807cbb8130 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x86/0x5b0 [ 97.204923][ C0] #2: ffffffff8d132120 (rcu_read_lock){....}-{1:2}, at: process_backlog+0x2cf/0x6f0 [ 97.214436][ C0] #3: ffff8880243b00b0 (slock-AF_PHONET){+.-.}-{2:2}, at: __sk_receive_skb+0x18f/0x990 [ 97.224222][ C0] #4: ffff8880243b0130 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x78f/0xc80 [ 97.233679][ C0] [ 97.233679][ C0] stack backtrace: [ 97.239615][ C0] CPU: 0 PID: 5863 Comm: syz.1.9 Not tainted syzkaller #0 [ 97.246756][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 97.257150][ C0] Call Trace: [ 97.260460][ C0] [ 97.263324][ C0] dump_stack_lvl+0x18c/0x250 [ 97.268034][ C0] ? show_regs_print_info+0x20/0x20 [ 97.273269][ C0] ? __kernel_text_address+0xd/0x30 [ 97.278517][ C0] ? unwind_get_return_address+0x91/0xc0 [ 97.284198][ C0] valid_state+0x13b/0x1d0 [ 97.288658][ C0] mark_lock_irq+0xad/0x900 [ 97.293832][ C0] ? stack_trace_save+0xaa/0x100 [ 97.298845][ C0] ? save_trace+0xcd0/0xcd0 [ 97.303378][ C0] ? mark_lock+0x94/0x320 [ 97.307738][ C0] ? save_trace+0x5d/0xcd0 [ 97.312358][ C0] mark_lock+0x208/0x320 [ 97.316631][ C0] __lock_acquire+0xd1a/0x7d40 [ 97.321440][ C0] ? verify_lock_unused+0x140/0x140 [ 97.326674][ C0] ? mark_lock+0x94/0x320 [ 97.331025][ C0] ? verify_lock_unused+0x140/0x140 [ 97.336252][ C0] ? sk_filter_trim_cap+0x18a/0x900 [ 97.341580][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 97.346684][ C0] lock_acquire+0x19e/0x420 [ 97.351214][ C0] ? __sk_receive_skb+0x180/0x990 [ 97.356360][ C0] ? read_lock_is_recursive+0x20/0x20 [ 97.361781][ C0] ? sk_filter_trim_cap+0x18a/0x900 [ 97.367031][ C0] ? copy_bpf_fprog_from_user+0x2d0/0x2d0 [ 97.372801][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 97.377951][ C0] ? __lock_acquire+0x1273/0x7d40 [ 97.383095][ C0] _raw_spin_lock_nested+0x32/0x50 [ 97.388242][ C0] ? __sk_receive_skb+0x180/0x990 [ 97.393307][ C0] __sk_receive_skb+0x180/0x990 [ 97.398190][ C0] pep_do_rcv+0x682/0xa90 [ 97.402544][ C0] ? pep_recvmsg+0x600/0x600 [ 97.407157][ C0] ? phonet_rcv+0x78f/0xc80 [ 97.411769][ C0] __sk_receive_skb+0x436/0x990 [ 97.416657][ C0] phonet_rcv+0x78f/0xc80 [ 97.421020][ C0] ? phonet_proto_unregister+0x130/0x130 [ 97.426678][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 97.432683][ C0] ? read_lock_is_recursive+0x20/0x20 [ 97.438252][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 97.443337][ C0] ? phonet_proto_unregister+0x130/0x130 [ 97.448997][ C0] __netif_receive_skb+0xcc/0x290 [ 97.454076][ C0] ? process_backlog+0x2cf/0x6f0 [ 97.459146][ C0] process_backlog+0x391/0x6f0 [ 97.463936][ C0] ? trigger_rx_softirq+0x60/0x60 [ 97.468992][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 97.475102][ C0] ? lock_chain_count+0x20/0x20 [ 97.479991][ C0] __napi_poll+0xc0/0x460 [ 97.484358][ C0] ? net_rx_action+0x3a0/0xc40 [ 97.489242][ C0] net_rx_action+0x616/0xc40 [ 97.493863][ C0] ? net_tx_action+0x980/0x980 [ 97.498654][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 97.504657][ C0] ? lock_chain_count+0x20/0x20 [ 97.509624][ C0] ? lapic_next_event+0x11/0x20 [ 97.514503][ C0] handle_softirqs+0x280/0x820 [ 97.519288][ C0] ? do_softirq+0xfa/0x1a0 [ 97.523748][ C0] ? do_softirq+0x1a0/0x1a0 [ 97.528301][ C0] ? netif_rx+0x79/0x90 [ 97.532511][ C0] do_softirq+0xfa/0x1a0 [ 97.536784][ C0] [ 97.539745][ C0] [ 97.542744][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 97.548136][ C0] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 97.554146][ C0] ? rcu_is_watching+0x15/0xb0 [ 97.558954][ C0] __local_bh_enable_ip+0x184/0x1c0 [ 97.564169][ C0] ? _local_bh_enable+0xa0/0xa0 [ 97.569048][ C0] netif_rx+0x83/0x90 [ 97.573056][ C0] pn_send+0x553/0x7f0 [ 97.577241][ C0] pn_skb_send+0x218/0x510 [ 97.581686][ C0] pep_sock_close+0x2c1/0x5b0 [ 97.586386][ C0] pn_socket_release+0x95/0xb0 [ 97.591169][ C0] sock_close+0xbd/0x230 [ 97.595429][ C0] ? sock_mmap+0xa0/0xa0 [ 97.599694][ C0] __fput+0x234/0x970 [ 97.603711][ C0] task_work_run+0x1d4/0x260 [ 97.608326][ C0] ? task_work_cancel+0x220/0x220 [ 97.613382][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 97.618872][ C0] exit_to_user_mode_loop+0xe6/0x110 [ 97.624279][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 97.629857][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 97.635352][ C0] do_syscall_64+0x61/0xb0 [ 97.639792][ C0] ? clear_bhb_loop+0x40/0x90 [ 97.644504][ C0] ? clear_bhb_loop+0x40/0x90 [ 97.649203][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.655211][ C0] RIP: 0033:0x7f5d7039ce59 [ 97.659660][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.679321][ C0] RSP: 002b:00007fff6d260058 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 97.687761][ C0] RAX: 0000000000000000 RBX: 00007fff6d260140 RCX: 00007f5d7039ce59 [ 97.695749][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 97.703843][ C0] RBP: 000000000001789e R08: 0000000000000001 R09: 0000000000000000 [ 97.711839][ C0] R10: 0000001b2c820000 R11: 0000000000000246 R12: 00007fff6d260180 [ 97.719837][ C0] R13: 00007f5d70615fac R14: 0000000000017aa3 R15: 00007f5d70615fa0 [ 97.727843][ C0] [ 98.326175][ T5863] gprs0: detached