Extracting prog: 23.447965661s
Minimizing prog: 22m11.412319678s
Simplifying prog options: 0s
Extracting C: 18.622887785s
Simplifying C: 7m29.740146153s


extracting reproducer from 31 programs
testing a last program of every proc
single: executing 6 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci-gettid-timer_create-timer_settime-syz_init_net_socket$bt_sco-add_key$fscrypt_v1-keyctl$KEYCTL_MOVE-bind$bt_sco-listen-accept4-bpf$MAP_CREATE-bpf$MAP_DELETE_ELEM-socket$nl_netfilter-syz_open_dev$sndpcmp-socket$inet6_dccp-ioctl$sock_ipv6_tunnel_SIOCGET6RD-ioctl$sock_inet6_SIOCSIFADDR-syz_emit_vhci-ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO-sendmsg$NFT_BATCH-openat$cuse
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)
r2 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x0) (async)
bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed}, 0x8) (async)
listen(r3, 0x0) (async)
accept4(r3, 0x0, 0x0, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r5, &(0x7f0000000c80), 0x20000000, 0x2}, 0x20) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) (async)
r8 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000080)={'sit0\x00', <r9=>0x0, 0x8, 0x20, 0x5, 0x114cb6d3, {{0x36, 0x4, 0x0, 0x5, 0xd8, 0x64, 0x0, 0xd, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x3, 0x0}, {[@noop, @timestamp_addr={0x44, 0x3c, 0xe4, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0x6}, {@private=0xa010101, 0x80000000}, {@empty, 0x2}, {@loopback, 0xfffffff9}, {@multicast1, 0x1}, {@private=0xa010101, 0x3}]}, @generic={0x83, 0x4, "9287"}, @ssrr={0x89, 0x17, 0x6f, [@multicast1, @local, @multicast1, @rand_addr=0x64010101, @broadcast]}, @rr={0x7, 0x7, 0xbb, [@remote]}, @timestamp_prespec={0x44, 0x44, 0x59, 0x3, 0xa, [{@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x63}, 0x5}, {@remote, 0x2}, {@private=0xa010100, 0x7}, {@local, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7}, {@local, 0xff}]}, @ssrr={0x89, 0x1f, 0x7d, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @broadcast]}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x64, r9}) (async)
syz_emit_vhci(&(0x7f0000000ec0)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xa}, "02ab2207d8d1aa4adedf"}}, 0xd) (async)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0xc0844123, &(0x7f0000002180)) (async)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
single: successfully extracted reproducer
found reproducer with 30 syscalls
minimizing guilty program
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci-gettid-timer_create-timer_settime-syz_init_net_socket$bt_sco-add_key$fscrypt_v1-keyctl$KEYCTL_MOVE-bind$bt_sco-listen-accept4-bpf$MAP_CREATE-bpf$MAP_DELETE_ELEM-socket$nl_netfilter-syz_open_dev$sndpcmp-socket$inet6_dccp-ioctl$sock_ipv6_tunnel_SIOCGET6RD-ioctl$sock_inet6_SIOCSIFADDR-syz_emit_vhci-ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO-sendmsg$NFT_BATCH
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)
r2 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x0) (async)
bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed}, 0x8) (async)
listen(r3, 0x0) (async)
accept4(r3, 0x0, 0x0, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r5, &(0x7f0000000c80), 0x20000000, 0x2}, 0x20) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) (async)
r8 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000080)={'sit0\x00', <r9=>0x0, 0x8, 0x20, 0x5, 0x114cb6d3, {{0x36, 0x4, 0x0, 0x5, 0xd8, 0x64, 0x0, 0xd, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x3, 0x0}, {[@noop, @timestamp_addr={0x44, 0x3c, 0xe4, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0x6}, {@private=0xa010101, 0x80000000}, {@empty, 0x2}, {@loopback, 0xfffffff9}, {@multicast1, 0x1}, {@private=0xa010101, 0x3}]}, @generic={0x83, 0x4, "9287"}, @ssrr={0x89, 0x17, 0x6f, [@multicast1, @local, @multicast1, @rand_addr=0x64010101, @broadcast]}, @rr={0x7, 0x7, 0xbb, [@remote]}, @timestamp_prespec={0x44, 0x44, 0x59, 0x3, 0xa, [{@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x63}, 0x5}, {@remote, 0x2}, {@private=0xa010100, 0x7}, {@local, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7}, {@local, 0xff}]}, @ssrr={0x89, 0x1f, 0x7d, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @broadcast]}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x64, r9}) (async)
syz_emit_vhci(&(0x7f0000000ec0)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xa}, "02ab2207d8d1aa4adedf"}}, 0xd) (async)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0xc0844123, &(0x7f0000002180)) (async)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci-gettid-timer_create-timer_settime-syz_init_net_socket$bt_sco-add_key$fscrypt_v1-keyctl$KEYCTL_MOVE-bind$bt_sco-listen-accept4-bpf$MAP_CREATE-bpf$MAP_DELETE_ELEM-socket$nl_netfilter-syz_open_dev$sndpcmp-socket$inet6_dccp-ioctl$sock_ipv6_tunnel_SIOCGET6RD-ioctl$sock_inet6_SIOCSIFADDR-syz_emit_vhci-ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)
r2 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x0) (async)
bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed}, 0x8) (async)
listen(r3, 0x0) (async)
accept4(r3, 0x0, 0x0, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r5, &(0x7f0000000c80), 0x20000000, 0x2}, 0x20) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) (async)
r7 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000080)={'sit0\x00', <r8=>0x0, 0x8, 0x20, 0x5, 0x114cb6d3, {{0x36, 0x4, 0x0, 0x5, 0xd8, 0x64, 0x0, 0xd, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x3, 0x0}, {[@noop, @timestamp_addr={0x44, 0x3c, 0xe4, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0x6}, {@private=0xa010101, 0x80000000}, {@empty, 0x2}, {@loopback, 0xfffffff9}, {@multicast1, 0x1}, {@private=0xa010101, 0x3}]}, @generic={0x83, 0x4, "9287"}, @ssrr={0x89, 0x17, 0x6f, [@multicast1, @local, @multicast1, @rand_addr=0x64010101, @broadcast]}, @rr={0x7, 0x7, 0xbb, [@remote]}, @timestamp_prespec={0x44, 0x44, 0x59, 0x3, 0xa, [{@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x63}, 0x5}, {@remote, 0x2}, {@private=0xa010100, 0x7}, {@local, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7}, {@local, 0xff}]}, @ssrr={0x89, 0x1f, 0x7d, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @broadcast]}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x64, r8}) (async)
syz_emit_vhci(&(0x7f0000000ec0)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xa}, "02ab2207d8d1aa4adedf"}}, 0xd) (async)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0xc0844123, &(0x7f0000002180)) (async)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci-gettid-timer_create-timer_settime-syz_init_net_socket$bt_sco-add_key$fscrypt_v1-keyctl$KEYCTL_MOVE-bind$bt_sco-listen-accept4-bpf$MAP_CREATE-bpf$MAP_DELETE_ELEM-socket$nl_netfilter-syz_open_dev$sndpcmp-socket$inet6_dccp-ioctl$sock_ipv6_tunnel_SIOCGET6RD-ioctl$sock_inet6_SIOCSIFADDR-syz_emit_vhci
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)
r2 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x0) (async)
bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed}, 0x8) (async)
listen(r3, 0x0) (async)
accept4(r3, 0x0, 0x0, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r5, &(0x7f0000000c80), 0x20000000, 0x2}, 0x20) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) (async)
r6 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000080)={'sit0\x00', <r7=>0x0, 0x8, 0x20, 0x5, 0x114cb6d3, {{0x36, 0x4, 0x0, 0x5, 0xd8, 0x64, 0x0, 0xd, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x3, 0x0}, {[@noop, @timestamp_addr={0x44, 0x3c, 0xe4, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0x6}, {@private=0xa010101, 0x80000000}, {@empty, 0x2}, {@loopback, 0xfffffff9}, {@multicast1, 0x1}, {@private=0xa010101, 0x3}]}, @generic={0x83, 0x4, "9287"}, @ssrr={0x89, 0x17, 0x6f, [@multicast1, @local, @multicast1, @rand_addr=0x64010101, @broadcast]}, @rr={0x7, 0x7, 0xbb, [@remote]}, @timestamp_prespec={0x44, 0x44, 0x59, 0x3, 0xa, [{@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x63}, 0x5}, {@remote, 0x2}, {@private=0xa010100, 0x7}, {@local, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7}, {@local, 0xff}]}, @ssrr={0x89, 0x1f, 0x7d, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @broadcast]}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x64, r7}) (async)
syz_emit_vhci(&(0x7f0000000ec0)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0xa}, "02ab2207d8d1aa4adedf"}}, 0xd) (async)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci-gettid-timer_create-timer_settime-syz_init_net_socket$bt_sco-add_key$fscrypt_v1-keyctl$KEYCTL_MOVE-bind$bt_sco-listen-accept4-bpf$MAP_CREATE-bpf$MAP_DELETE_ELEM-socket$nl_netfilter-syz_open_dev$sndpcmp-socket$inet6_dccp-ioctl$sock_ipv6_tunnel_SIOCGET6RD-ioctl$sock_inet6_SIOCSIFADDR
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)
r2 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x0) (async)
bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed}, 0x8) (async)
listen(r3, 0x0) (async)
accept4(r3, 0x0, 0x0, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r5, &(0x7f0000000c80), 0x20000000, 0x2}, 0x20) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) (async)
r6 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000080)={'sit0\x00', <r7=>0x0, 0x8, 0x20, 0x5, 0x114cb6d3, {{0x36, 0x4, 0x0, 0x5, 0xd8, 0x64, 0x0, 0xd, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x3, 0x0}, {[@noop, @timestamp_addr={0x44, 0x3c, 0xe4, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0x6}, {@private=0xa010101, 0x80000000}, {@empty, 0x2}, {@loopback, 0xfffffff9}, {@multicast1, 0x1}, {@private=0xa010101, 0x3}]}, @generic={0x83, 0x4, "9287"}, @ssrr={0x89, 0x17, 0x6f, [@multicast1, @local, @multicast1, @rand_addr=0x64010101, @broadcast]}, @rr={0x7, 0x7, 0xbb, [@remote]}, @timestamp_prespec={0x44, 0x44, 0x59, 0x3, 0xa, [{@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x63}, 0x5}, {@remote, 0x2}, {@private=0xa010100, 0x7}, {@local, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7}, {@local, 0xff}]}, @ssrr={0x89, 0x1f, 0x7d, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @broadcast]}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x64, r7}) (async)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci-gettid-timer_create-timer_settime-syz_init_net_socket$bt_sco-add_key$fscrypt_v1-keyctl$KEYCTL_MOVE-bind$bt_sco-listen-accept4-bpf$MAP_CREATE-bpf$MAP_DELETE_ELEM-socket$nl_netfilter-syz_open_dev$sndpcmp-socket$inet6_dccp-ioctl$sock_ipv6_tunnel_SIOCGET6RD
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)
r2 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x0) (async)
bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed}, 0x8) (async)
listen(r3, 0x0) (async)
accept4(r3, 0x0, 0x0, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r5, &(0x7f0000000c80), 0x20000000, 0x2}, 0x20) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) (async)
socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x8, 0x20, 0x5, 0x114cb6d3, {{0x36, 0x4, 0x0, 0x5, 0xd8, 0x64, 0x0, 0xd, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x3, 0x0}, {[@noop, @timestamp_addr={0x44, 0x3c, 0xe4, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0x6}, {@private=0xa010101, 0x80000000}, {@empty, 0x2}, {@loopback, 0xfffffff9}, {@multicast1, 0x1}, {@private=0xa010101, 0x3}]}, @generic={0x83, 0x4, "9287"}, @ssrr={0x89, 0x17, 0x6f, [@multicast1, @local, @multicast1, @rand_addr=0x64010101, @broadcast]}, @rr={0x7, 0x7, 0xbb, [@remote]}, @timestamp_prespec={0x44, 0x44, 0x59, 0x3, 0xa, [{@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x63}, 0x5}, {@remote, 0x2}, {@private=0xa010100, 0x7}, {@local, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7}, {@local, 0xff}]}, @ssrr={0x89, 0x1f, 0x7d, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @broadcast]}]}}}}})

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci-gettid-timer_create-timer_settime-syz_init_net_socket$bt_sco-add_key$fscrypt_v1-keyctl$KEYCTL_MOVE-bind$bt_sco-listen-accept4-bpf$MAP_CREATE-bpf$MAP_DELETE_ELEM-socket$nl_netfilter-syz_open_dev$sndpcmp-socket$inet6_dccp
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)
r2 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x0) (async)
bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed}, 0x8) (async)
listen(r3, 0x0) (async)
accept4(r3, 0x0, 0x0, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r5, &(0x7f0000000c80), 0x20000000, 0x2}, 0x20) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) (async)
socket$inet6_dccp(0xa, 0x6, 0x0)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci-gettid-timer_create-timer_settime-syz_init_net_socket$bt_sco-add_key$fscrypt_v1-keyctl$KEYCTL_MOVE-bind$bt_sco-listen-accept4-bpf$MAP_CREATE-bpf$MAP_DELETE_ELEM-socket$nl_netfilter-syz_open_dev$sndpcmp
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)
r2 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x0) (async)
bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed}, 0x8) (async)
listen(r3, 0x0) (async)
accept4(r3, 0x0, 0x0, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r5, &(0x7f0000000c80), 0x20000000, 0x2}, 0x20) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) (async)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci-gettid-timer_create-timer_settime-syz_init_net_socket$bt_sco-add_key$fscrypt_v1-keyctl$KEYCTL_MOVE-bind$bt_sco-listen-accept4-bpf$MAP_CREATE-bpf$MAP_DELETE_ELEM-socket$nl_netfilter
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)
r2 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x0) (async)
bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed}, 0x8) (async)
listen(r3, 0x0) (async)
accept4(r3, 0x0, 0x0, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r5, &(0x7f0000000c80), 0x20000000, 0x2}, 0x20) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci-gettid-timer_create-timer_settime-syz_init_net_socket$bt_sco-add_key$fscrypt_v1-keyctl$KEYCTL_MOVE-bind$bt_sco-listen-accept4-bpf$MAP_CREATE-bpf$MAP_DELETE_ELEM
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)
r2 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x0) (async)
bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed}, 0x8) (async)
listen(r3, 0x0) (async)
accept4(r3, 0x0, 0x0, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r5, &(0x7f0000000c80), 0x20000000, 0x2}, 0x20) (async)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci-gettid-timer_create-timer_settime-syz_init_net_socket$bt_sco-add_key$fscrypt_v1-keyctl$KEYCTL_MOVE-bind$bt_sco-listen-accept4-bpf$MAP_CREATE
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)
r2 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x0) (async)
bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed}, 0x8) (async)
listen(r3, 0x0) (async)
accept4(r3, 0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci-gettid-timer_create-timer_settime-syz_init_net_socket$bt_sco-add_key$fscrypt_v1-keyctl$KEYCTL_MOVE-bind$bt_sco-listen-accept4
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)
r2 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x0) (async)
bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed}, 0x8) (async)
listen(r3, 0x0) (async)
accept4(r3, 0x0, 0x0, 0x0) (async)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci-gettid-timer_create-timer_settime-syz_init_net_socket$bt_sco-add_key$fscrypt_v1-keyctl$KEYCTL_MOVE-bind$bt_sco-listen
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)
r2 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x0) (async)
bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed}, 0x8) (async)
listen(r3, 0x0) (async)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci-gettid-timer_create-timer_settime-syz_init_net_socket$bt_sco-add_key$fscrypt_v1-keyctl$KEYCTL_MOVE-bind$bt_sco
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)
r2 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0x0, 0x0) (async)
bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed}, 0x8) (async)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci-gettid-timer_create-timer_settime-syz_init_net_socket$bt_sco-add_key$fscrypt_v1-keyctl$KEYCTL_MOVE
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)
r2 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r3, 0x0, 0x0, 0x0) (async)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci-gettid-timer_create-timer_settime-syz_init_net_socket$bt_sco-add_key$fscrypt_v1
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)
r2 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci-gettid-timer_create-timer_settime-syz_init_net_socket$bt_sco
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)
r2 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci-gettid-timer_create-timer_settime
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)
r2 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci-gettid-timer_create
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)
r2 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci-gettid
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)
gettid()

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-syz_emit_vhci-syz_emit_vhci
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-pselect6-listen-syz_emit_vhci-syz_emit_vhci
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-syz_init_net_socket$bt_sco-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_genetlink_get_family_id$devlink-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000200), 0x8) (async)
listen(0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-socket$nl_generic-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
detailed listing:
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r1, &(0x7f0000000200), 0x8) (async)
listen(r1, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r0, &(0x7f0000000200), 0x8) (async)
listen(r0, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r0, &(0x7f0000000200), 0x8) (async)
listen(r0, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd) (async)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r0, &(0x7f0000000200), 0x8)
listen(r0, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)

program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r0, 0x0, 0x0)
listen(r0, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r0, &(0x7f0000000200), 0x8)
listen(r0, 0x0)
syz_emit_vhci(0x0, 0xd)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r0, &(0x7f0000000200), 0x8)
listen(r0, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB], 0xd)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_sco(r0, &(0x7f0000000200), 0x8)
listen(r0, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0404"], 0xd)
syz_emit_vhci(0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
simplifying C reproducer
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
program did not crash
testing compiled C program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing compiled C program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
program did not crash
testing compiled C program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing compiled C program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing compiled C program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing compiled C program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing compiled C program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing compiled C program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
program did not crash
testing compiled C program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing compiled C program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing compiled C program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing compiled C program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing compiled C program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
testing compiled C program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_sco-pselect6-bind$bt_sco-listen-syz_emit_vhci-syz_emit_vhci
program crashed: BUG: sleeping function called from invalid context in lock_sock_nested
reproducing took 30m23.223336291s
repro crashed as (corrupted=false):
BUG: sleeping function called from invalid context at net/core/sock.c:3647
in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 66, name: kworker/u33:0
preempt_count: 1, expected: 0
RCU nest depth: 0, expected: 0
5 locks held by kworker/u33:0/66:
 #0: ffff88802924d148 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3211
 #1: ffffc90000d3fd18 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3212
 #2: ffff888031c74078 (&hdev->lock){+.+.}-{4:4}, at: hci_sync_conn_complete_evt+0x199/0xa80 net/bluetooth/hci_event.c:4931
 #3: ffff88802b79d620 (&conn->lock#2){+.+.}-{3:3}, at: spin_lock include/linux/spinlock.h:351 [inline]
 #3: ffff88802b79d620 (&conn->lock#2){+.+.}-{3:3}, at: sco_conn_ready net/bluetooth/sco.c:1328 [inline]
 #3: ffff88802b79d620 (&conn->lock#2){+.+.}-{3:3}, at: sco_connect_cfm+0x29f/0xc00 net/bluetooth/sco.c:1415
 #4: ffff888032af8258 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1624 [inline]
 #4: ffff888032af8258 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_conn_ready net/bluetooth/sco.c:1341 [inline]
 #4: ffff888032af8258 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_connect_cfm+0x3bc/0xc00 net/bluetooth/sco.c:1415
Preemption disabled at:
[<0000000000000000>] 0x0
CPU: 3 UID: 0 PID: 66 Comm: kworker/u33:0 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: hci0 hci_rx_work
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120
 __might_resched+0x3c0/0x5e0 kernel/sched/core.c:8766
 lock_sock_nested+0x4b/0xf0 net/core/sock.c:3647
 lock_sock include/net/sock.h:1624 [inline]
 sco_conn_ready net/bluetooth/sco.c:1341 [inline]
 sco_connect_cfm+0x3bc/0xc00 net/bluetooth/sco.c:1415
 hci_connect_cfm include/net/bluetooth/hci_core.h:2051 [inline]
 hci_sync_conn_complete_evt+0x421/0xa80 net/bluetooth/hci_event.c:5014
 hci_event_func net/bluetooth/hci_event.c:7473 [inline]
 hci_event_packet+0x9eb/0x1180 net/bluetooth/hci_event.c:7525
 hci_rx_work+0x2c5/0x16b0 net/bluetooth/hci_core.c:4015
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>

final repro crashed as (corrupted=false):
BUG: sleeping function called from invalid context at net/core/sock.c:3647
in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 66, name: kworker/u33:0
preempt_count: 1, expected: 0
RCU nest depth: 0, expected: 0
5 locks held by kworker/u33:0/66:
 #0: ffff88802924d148 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3211
 #1: ffffc90000d3fd18 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3212
 #2: ffff888031c74078 (&hdev->lock){+.+.}-{4:4}, at: hci_sync_conn_complete_evt+0x199/0xa80 net/bluetooth/hci_event.c:4931
 #3: ffff88802b79d620 (&conn->lock#2){+.+.}-{3:3}, at: spin_lock include/linux/spinlock.h:351 [inline]
 #3: ffff88802b79d620 (&conn->lock#2){+.+.}-{3:3}, at: sco_conn_ready net/bluetooth/sco.c:1328 [inline]
 #3: ffff88802b79d620 (&conn->lock#2){+.+.}-{3:3}, at: sco_connect_cfm+0x29f/0xc00 net/bluetooth/sco.c:1415
 #4: ffff888032af8258 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1624 [inline]
 #4: ffff888032af8258 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_conn_ready net/bluetooth/sco.c:1341 [inline]
 #4: ffff888032af8258 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_connect_cfm+0x3bc/0xc00 net/bluetooth/sco.c:1415
Preemption disabled at:
[<0000000000000000>] 0x0
CPU: 3 UID: 0 PID: 66 Comm: kworker/u33:0 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: hci0 hci_rx_work
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120
 __might_resched+0x3c0/0x5e0 kernel/sched/core.c:8766
 lock_sock_nested+0x4b/0xf0 net/core/sock.c:3647
 lock_sock include/net/sock.h:1624 [inline]
 sco_conn_ready net/bluetooth/sco.c:1341 [inline]
 sco_connect_cfm+0x3bc/0xc00 net/bluetooth/sco.c:1415
 hci_connect_cfm include/net/bluetooth/hci_core.h:2051 [inline]
 hci_sync_conn_complete_evt+0x421/0xa80 net/bluetooth/hci_event.c:5014
 hci_event_func net/bluetooth/hci_event.c:7473 [inline]
 hci_event_packet+0x9eb/0x1180 net/bluetooth/hci_event.c:7525
 hci_rx_work+0x2c5/0x16b0 net/bluetooth/hci_core.c:4015
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>