last executing test programs: 5.394912034s ago: executing program 1 (id=76): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5.308811838s ago: executing program 1 (id=78): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f00000000c0)='./file1\x00') acct(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) 5.251063905s ago: executing program 1 (id=80): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="1df8fc146279f9c7737b15e434f860b52d460c60f4c138", @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x88081}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000002"], 0x190) syz_emit_ethernet(0x52, &(0x7f0000000a00)=ANY=[@ANYBLOB="bbbbbbbbbbbb465e4243f09086dd60000000001c3afffe80e2000000000000000000000000bbff020000000000000000000000000001"], 0x0) 5.104881599s ago: executing program 1 (id=81): syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"76ed837b6f00", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmmsg$inet6(r2, &(0x7f0000002c00)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0xab5, @remote, 0x5}, 0x1c, &(0x7f0000002ac0)=[{&(0x7f0000000340)="d66ddb74d534380855ec027cabc24142633d23bf10db16a14abd57023f3beb94fc73672f1dd24e93a841950649dd90decba0315c790ce188433c811bf4088a11a2444f2c772cb6cbc4f763699fe333d0b8502566d48f60e02af4614a7d3c47b5830a471dd957b60c26fe22f0c08f03dcb94c6028ea5674904fa540bdaf847d9f9b", 0x81}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="e18e6edd23b00485b2b30bad43a8ede12f05c7eb9e9834f46b8c4cb281cd775818e69f8f3570ac5f0af14763531631bb5a8bc2b533a1d37a10838d4f89f0e610525f2cadc44344f1", 0x48}, {&(0x7f0000002980)="b08914aaeb91e8f29768bb9bab6f205657b528c18e71b1a57e7cdd832e05cf26ffddc728ec76b3f42c2983422642832005e39dd25ba82827f960826ef86571ebc88ff350bb6af15049a15d305ab9817554dccc00b18abfbd87ca8dfa37c7be0315ebfecc14b095f1652e74ae", 0x6c}, {&(0x7f0000002a00)="766754e8e7b71448132f683965504bbc66509c7152bb28b123ee2a7bf526ba35ab81f833d946a995081d2d03bc2a0d0aa5f9d3f5cb07e560c9d51100af14a8077020d0e0fad6dd0c0bfb80012c6876a3d2a80680e9a8969b1696c3f1678c2fc3a45eb18d25e1038c3fc910311177a0277eadf0a2696e123a1103048c72fdab6dae2b6a1b09b88d917353c6486c21e77c9f9a7b8780b6de948d2d0aa6c4f671a10ce5818fab1fa197", 0xa8}], 0x6, &(0x7f0000002b40)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffeff}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @flowinfo={{0x14}}], 0xa8}}], 0x1, 0xc002) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = dup(r4) bind$inet(r5, &(0x7f0000001ec0)={0x2, 0x4e22, @multicast2}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x15, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x28, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pwrite64(r1, &(0x7f0000000040)="0d0c2abb5b5f85556fe4a173db9940bf16a9b77bc345e49d42f0749a66c1aa413caa3709fe427eeb23e17c63267df2b379692c3f41b444166e3c", 0x3a, 0x81) 4.351297451s ago: executing program 0 (id=86): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="7032f8fe", 0x4, 0x40004, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240), 0xc) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 4.281114627s ago: executing program 0 (id=87): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000180)={0x5, &(0x7f0000000100)=[{0xc, 0x9, 0x6, 0xffffff2b}, {0x7ff, 0xbe, 0xc1, 0x5}, {0xfc01, 0x0, 0x1, 0xb}, {0x7, 0xff, 0xd, 0xb9}, {0x9, 0x9, 0x9b}]}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r1, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x840) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e23, 0x2, @private2, 0xa20}}, [0x250, 0x7, 0x6, 0x3, 0x194, 0x8, 0xf, 0x9, 0x7f, 0x14582e1, 0x4, 0xff, 0xfffffffffffffc01, 0xb, 0x3]}, &(0x7f00000005c0)=0x100) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) dup(r2) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) 3.952709825s ago: executing program 0 (id=89): r0 = socket(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f00000000c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x18, 0x64001}}], 0x2, 0x0) 3.952155998s ago: executing program 0 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x2, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 3.312808009s ago: executing program 0 (id=95): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x278, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, &(0x7f0000000280), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x27}, @multicast2, 0x0, 0xffffffff, 'pimreg0\x00', 'veth1_to_team\x00', {}, {}, 0x84, 0x0, 0x5}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x2}, {0x4, 0x3, 0x2}, 0x7, 0x400}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "7deb", 0x1}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x5, 0xfff, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, r5}}, 0x30) 2.313033533s ago: executing program 3 (id=100): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$ITER_CREATE(0x1d, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'bridge0\x00'}) write$cgroup_int(r0, &(0x7f0000000040)=0x1c8, 0xfdef) 2.312704528s ago: executing program 4 (id=101): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES8=r0], 0x0) 2.149734139s ago: executing program 0 (id=102): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0x0, 0x6, 0xfffffffffffffffc, 0x100fff}) ioctl$OCFS2_IOC_UNRESVSP64(0xffffffffffffffff, 0x4030582b, &(0x7f0000000300)={0x0, 0x2, 0x8, 0xd, 0x94, 0x3}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x40002b6, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x19) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x20000023896) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r8, 0x0, 0x7fffffffffffffff, 0x7fff}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x1, r8, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9}) r9 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r6, @ANYRESDEC=r4], 0x0) syz_usb_control_io$printer(r9, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="20451100000007eccb52332f8c578658960139d1f4901f372a894ede442e307976ade6492b4e38d6a8a47f6fc9c1b169a2c16c90015d19d84665da8723080b6e09967ff2a674a52e6dc06ac4ec6c40a6844b3d086142a5d608c900b2137f1ecabe6f62785b6ab92829680eb53d9f61ac789642ee6ff4e9c82962afb09973e92d9eacdaaf7a4ff6e031e45108579327361fbee6676c0cc6ad5b7b0c005ed70048d5f41425f434380f143e5fbdf67d433bca70cb9f1f9e020d14"], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) 2.037150102s ago: executing program 1 (id=104): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000380)={0x0, 0xe, 0x2, '#\t'}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0xe, 0x2, "9c53"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.036815908s ago: executing program 2 (id=105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x34, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="e5"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac0d]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x810) 1.113296532s ago: executing program 2 (id=106): openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x200, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x30000008}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000001c0), &(0x7f00000004c0)=@udp}, 0x20) 520.0254ms ago: executing program 3 (id=107): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x2d}, 0x28) 465.201833ms ago: executing program 3 (id=108): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='westwood', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) 464.836292ms ago: executing program 3 (id=109): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 449.602175ms ago: executing program 3 (id=110): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) io_setup(0x41, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) socket$nl_route(0x10, 0x3, 0x0) 428.728247ms ago: executing program 3 (id=111): syz_usb_connect$uac1(0x3, 0x82, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x4, 0x0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x62c, 0x1a}, [@extension_unit={0x7, 0x24, 0x8, 0x1, 0xfff}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x0, 0x4, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x608, 0x93, 0x1, 0x3, {0x7, 0x25, 0x1, 0x0, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0xf, 0x5f, {0x7, 0x25, 0x1, 0xc, 0x65, 0x8001}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 133.525913ms ago: executing program 4 (id=112): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x110, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0100000082020000ffffffff00000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000fa261ec8"], 0x48}}, 0x0) 133.184876ms ago: executing program 2 (id=113): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x9}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)={'virt_wifi0\x00', @random="cffaeefdb7c5"}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) 120.722427ms ago: executing program 4 (id=114): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 104.377961ms ago: executing program 4 (id=115): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 41.103583ms ago: executing program 2 (id=116): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 40.869374ms ago: executing program 4 (id=117): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000300000000020000000200000003000000000000000000000105000000080003000000000001000005000200000000000001"], 0x0, 0x5a}, 0x28) 40.350756ms ago: executing program 1 (id=118): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x6, 0xffffff34) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000300)={0x1, "7696ef7aaf1f677422c246bc2deda4582479791f8e12a515ed016fdfafbb656424baad56b5b1ab895dea52c2d4a1dbe5fdcecbe2d2c700203d84738dd428e3a34c4eae30efdde65f901d975f30526902bd54e9a4206bd0611ce7c3ceb79c93e38689f17c903bf61936e3cf0d568087bb540d71f878767228cb6e9b2ad0f2ace7dd"}, 0x89, 0x800) getsockopt$inet6_tcp_buf(r4, 0x6, 0x8, 0x0, &(0x7f0000001040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000020000001800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096}, 0x94) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r7, 0xb) 40.058017ms ago: executing program 4 (id=119): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002", 0x29}], 0x1}, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) listen(r1, 0x800) accept(r1, 0x0, &(0x7f00000000c0)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x0, @dev}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)='%pI4 \x00'}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x3c}}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 33.862329ms ago: executing program 2 (id=120): mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d706f6c3d62690bbe608ae7a8e257d632a80e6e643a302d4e3a332f", @ANYRESOCT]) 0s ago: executing program 2 (id=121): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fc"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. [ 28.060057][ T4658] cgroup: Unknown subsys name 'net' [ 28.179781][ T4658] cgroup: Unknown subsys name 'cpuset' [ 28.181785][ T4658] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.351917][ T4658] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.892935][ T4673] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.895929][ T4673] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.898123][ T4679] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.900531][ T4681] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.900701][ T4681] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.900819][ T4681] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.903567][ T4683] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.904063][ T4683] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.905338][ T4681] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.906990][ T4681] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.910338][ T4681] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.910499][ T4681] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.913871][ T4681] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.914128][ T4681] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.914261][ T4681] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.914655][ T4681] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.915187][ T4681] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.915802][ T4681] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.915933][ T4681] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.916074][ T4681] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.916266][ T4681] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.918449][ T4681] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.919269][ T4681] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.919435][ T4681] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.920557][ T4681] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.309406][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.311226][ T4674] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.312867][ T4674] bridge_slave_0: entered allmulticast mode [ 30.314650][ T4674] bridge_slave_0: entered promiscuous mode [ 30.321935][ T4676] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.321981][ T4676] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.322055][ T4676] bridge_slave_0: entered allmulticast mode [ 30.322528][ T4676] bridge_slave_0: entered promiscuous mode [ 30.336312][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.336405][ T4674] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.336496][ T4674] bridge_slave_1: entered allmulticast mode [ 30.336925][ T4674] bridge_slave_1: entered promiscuous mode [ 30.341197][ T4676] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.341243][ T4676] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.341303][ T4676] bridge_slave_1: entered allmulticast mode [ 30.341794][ T4676] bridge_slave_1: entered promiscuous mode [ 30.356605][ T4674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.365475][ T4674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.374477][ T4676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.374601][ T4677] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.374675][ T4677] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.374788][ T4677] bridge_slave_0: entered allmulticast mode [ 30.375232][ T4677] bridge_slave_0: entered promiscuous mode [ 30.386558][ T4671] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.386600][ T4671] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.386701][ T4671] bridge_slave_0: entered allmulticast mode [ 30.387131][ T4671] bridge_slave_0: entered promiscuous mode [ 30.388842][ T4674] team0: Port device team_slave_0 added [ 30.389679][ T4674] team0: Port device team_slave_1 added [ 30.395086][ T4677] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.396568][ T4677] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.398137][ T4677] bridge_slave_1: entered allmulticast mode [ 30.400064][ T4677] bridge_slave_1: entered promiscuous mode [ 30.402968][ T4676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.404746][ T4671] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.404789][ T4671] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.404854][ T4671] bridge_slave_1: entered allmulticast mode [ 30.405335][ T4671] bridge_slave_1: entered promiscuous mode [ 30.414997][ T4674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.415020][ T4674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.415045][ T4674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.415969][ T4674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.415977][ T4674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.415991][ T4674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.428098][ T4677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.436733][ T4671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.442717][ T4677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.449977][ T4671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.456712][ T4676] team0: Port device team_slave_0 added [ 30.464276][ T4677] team0: Port device team_slave_0 added [ 30.468076][ T4676] team0: Port device team_slave_1 added [ 30.479854][ T4677] team0: Port device team_slave_1 added [ 30.481649][ T4671] team0: Port device team_slave_0 added [ 30.486189][ T4674] hsr_slave_0: entered promiscuous mode [ 30.488133][ T4674] hsr_slave_1: entered promiscuous mode [ 30.489904][ T4670] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.491339][ T4670] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.492714][ T4670] bridge_slave_0: entered allmulticast mode [ 30.494281][ T4670] bridge_slave_0: entered promiscuous mode [ 30.496306][ T4670] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.497683][ T4670] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.498639][ T4670] bridge_slave_1: entered allmulticast mode [ 30.499075][ T4670] bridge_slave_1: entered promiscuous mode [ 30.503478][ T4671] team0: Port device team_slave_1 added [ 30.504772][ T4676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.504797][ T4676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.504813][ T4676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.505371][ T4676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.505377][ T4676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.505389][ T4676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.525064][ T4670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.530625][ T4677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.530654][ T4677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.530674][ T4677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.540950][ T4670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.546648][ T4677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.546658][ T4677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.546672][ T4677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.557985][ T4671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.558017][ T4671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.558029][ T4671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.563133][ T4676] hsr_slave_0: entered promiscuous mode [ 30.563474][ T4676] hsr_slave_1: entered promiscuous mode [ 30.563683][ T4676] debugfs: 'hsr0' already exists in 'hsr' [ 30.563712][ T4676] Cannot create hsr debugfs directory [ 30.569282][ T4670] team0: Port device team_slave_0 added [ 30.570445][ T4670] team0: Port device team_slave_1 added [ 30.570699][ T4671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.570706][ T4671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.570721][ T4671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.591954][ T4670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.591983][ T4670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.592294][ T4670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.595232][ T4670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.595240][ T4670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.595255][ T4670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.622395][ T4677] hsr_slave_0: entered promiscuous mode [ 30.623897][ T4677] hsr_slave_1: entered promiscuous mode [ 30.625155][ T4677] debugfs: 'hsr0' already exists in 'hsr' [ 30.626252][ T4677] Cannot create hsr debugfs directory [ 30.643213][ T4671] hsr_slave_0: entered promiscuous mode [ 30.644733][ T4671] hsr_slave_1: entered promiscuous mode [ 30.646155][ T4671] debugfs: 'hsr0' already exists in 'hsr' [ 30.647314][ T4671] Cannot create hsr debugfs directory [ 30.662673][ T4670] hsr_slave_0: entered promiscuous mode [ 30.662988][ T4670] hsr_slave_1: entered promiscuous mode [ 30.663186][ T4670] debugfs: 'hsr0' already exists in 'hsr' [ 30.663196][ T4670] Cannot create hsr debugfs directory [ 30.715728][ T4674] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.719002][ T4674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.719332][ T4674] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.721183][ T4674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.730710][ T4674] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.732984][ T4674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.733519][ T4674] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.735474][ T4674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.788030][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.788091][ T4674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.788258][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.788322][ T4674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.791612][ T4676] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.795930][ T4676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.796229][ T4676] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.798164][ T4676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.803460][ T4676] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.805778][ T4676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.806265][ T4676] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.807895][ T4676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.834420][ T4674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.834916][ T4671] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.837362][ T4671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.839163][ T4671] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.841390][ T4671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.842961][ T4671] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.845024][ T4671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.853632][ T4671] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.855850][ T4671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.857744][ T4676] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.857788][ T4676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.857866][ T4676] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.857895][ T4676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.875180][ T4674] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.876416][ T4677] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.878658][ T4677] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.881752][ T1342] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.883541][ T1342] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.885171][ T1342] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.886809][ T1342] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.900236][ T4677] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.902675][ T4677] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.904602][ T4677] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.906809][ T4677] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.909663][ T1303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.909713][ T1303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.915976][ T4677] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.919102][ T4677] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.936212][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.936251][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.944306][ T4674] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.944345][ T4674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.965318][ T4670] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.968108][ T4670] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.972291][ T4670] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.974888][ T4670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.979641][ T4670] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.984039][ T4670] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.986443][ T4671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.990355][ T4670] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.992664][ T4670] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.013053][ T4676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.016327][ T4671] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.031605][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.031654][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.034584][ T4676] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.037583][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.037628][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.053643][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.053689][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.076440][ T4677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.079917][ T4671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.084053][ T3994] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.084113][ T3994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.109413][ T4677] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.111653][ T4670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.120308][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.120356][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.124343][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.124385][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.132428][ T4676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.136356][ T4674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.175504][ T4670] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.180448][ T4674] veth0_vlan: entered promiscuous mode [ 31.187778][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.187833][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.200865][ T4674] veth1_vlan: entered promiscuous mode [ 31.205991][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.206038][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.222903][ T4674] veth0_macvtap: entered promiscuous mode [ 31.238120][ T4674] veth1_macvtap: entered promiscuous mode [ 31.245833][ T4674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.251537][ T4670] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.253736][ T4670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.264882][ T4674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.283431][ T3900] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.283773][ T1164] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.283800][ T1164] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.283824][ T1164] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.337805][ T3900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.337830][ T3900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.355869][ T4671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.385201][ T3900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.385240][ T3900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.391876][ T4671] veth0_vlan: entered promiscuous mode [ 31.395455][ T4671] veth1_vlan: entered promiscuous mode [ 31.430379][ T4676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.436918][ T4671] veth0_macvtap: entered promiscuous mode [ 31.444807][ T4674] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.445684][ T4671] veth1_macvtap: entered promiscuous mode [ 31.461397][ T4671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.462460][ T4671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.497679][ T3900] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.497973][ T3900] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.497993][ T3900] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.498010][ T3900] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.531509][ T4670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.536034][ T4677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.548421][ T4677] veth0_vlan: entered promiscuous mode [ 31.551299][ T4677] veth1_vlan: entered promiscuous mode [ 31.558837][ T4677] veth0_macvtap: entered promiscuous mode [ 31.567630][ T4677] veth1_macvtap: entered promiscuous mode [ 31.572563][ T4677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.573996][ T4677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.584961][ T1342] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.585017][ T1342] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.585038][ T1342] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.585054][ T1342] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.602298][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.602436][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.734392][ T4854] block device autoloading is deprecated and will be removed. [ 31.879520][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.881190][ T4676] veth0_vlan: entered promiscuous mode [ 31.882683][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.882940][ T4676] veth1_vlan: entered promiscuous mode [ 31.894485][ T1399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.894520][ T1399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.914810][ T4670] veth0_vlan: entered promiscuous mode [ 31.917224][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.917249][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.926241][ T4670] veth1_vlan: entered promiscuous mode [ 31.929549][ T4673] Bluetooth: hci1: command tx timeout [ 31.929552][ T4688] Bluetooth: hci3: command tx timeout [ 31.929855][ T4685] Bluetooth: hci2: command tx timeout [ 31.935608][ T4676] veth0_macvtap: entered promiscuous mode [ 31.939986][ T4676] veth1_macvtap: entered promiscuous mode [ 31.947470][ T4676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.974081][ T4670] veth0_macvtap: entered promiscuous mode [ 31.977723][ T4676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.995063][ T4670] veth1_macvtap: entered promiscuous mode [ 32.001801][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.001852][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.001875][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.001893][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.009892][ T4685] Bluetooth: hci4: command tx timeout [ 32.010043][ T4688] Bluetooth: hci0: command tx timeout [ 32.039002][ T4670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.044209][ T4670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.067075][ T1164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.067264][ T1164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.067284][ T1164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.067300][ T1164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.098419][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.098442][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.108001][ T4867] binder: 4866:4867 tried to acquire reference to desc 0, got 1 instead [ 32.112765][ T4867] binder: 4866:4867 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 32.112801][ T4867] binder: 4867 RLIMIT_NICE not set [ 32.112845][ T4867] binder: 4867 RLIMIT_NICE not set [ 32.116483][ T4867] binder: release 4866:4867 transaction 12 out, still active [ 32.116501][ T4867] binder: release 4866:4867 transaction 5 in, still active [ 32.116512][ T4867] binder: undelivered TRANSACTION_COMPLETE [ 32.116799][ T4867] binder: 4866:4867 got new transaction with bad transaction stack, transaction 5 has target 0:0 [ 32.116849][ T4867] binder: 4866:4867 transaction call to 4866:0 failed 13/29201/-71, code 0 size 0-0 line 3296 [ 32.133723][ T4680] binder: release 4866:4867 transaction 5 out, still active [ 32.133760][ T4680] binder: undelivered TRANSACTION_COMPLETE [ 32.133786][ T4680] binder: send failed reply for transaction 12, target dead [ 32.133799][ T4680] binder: send failed reply for transaction 5, target dead [ 32.133808][ T4680] binder: undelivered TRANSACTION_ERROR: 29201 [ 32.142305][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.142337][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.181061][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.181100][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.195608][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.195641][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.220500][ T4876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.222765][ T4876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.337973][ T4914] mmap: syz.2.24 (4914) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.465251][ T4918] Bluetooth: MGMT ver 1.23 [ 33.500332][ T4781] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.167523][ T4688] Bluetooth: hci2: command tx timeout [ 34.167566][ T4688] Bluetooth: hci1: command tx timeout [ 34.167595][ T4688] Bluetooth: hci3: command tx timeout [ 34.167615][ T4688] Bluetooth: hci0: command tx timeout [ 34.167634][ T4688] Bluetooth: hci4: command tx timeout [ 34.208648][ T4781] usb 1-1: Using ep0 maxpacket: 8 [ 34.212095][ T4781] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 34.212130][ T4781] usb 1-1: config 179 has no interface number 0 [ 34.212146][ T4781] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 34.212158][ T4781] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 34.212169][ T4781] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 34.212179][ T4781] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 34.212188][ T4781] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 34.212199][ T4781] usb 1-1: config 179 interface 65 has no altsetting 0 [ 34.212213][ T4781] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 34.212222][ T4781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.244324][ T4781] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input2 [ 34.445643][ T4931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.446377][ T4781] usb 1-1: USB disconnect, device number 2 [ 34.446429][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 34.452051][ T4931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.480702][ T4933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.480906][ T4933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.419115][ T4953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.419330][ T4953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.827631][ T4982] 9pnet_virtio: no channels available for device syz [ 36.168383][ T4685] Bluetooth: hci4: command tx timeout [ 36.170275][ T4688] Bluetooth: hci0: command tx timeout [ 36.171629][ T4688] Bluetooth: hci3: command tx timeout [ 36.171798][ T4688] Bluetooth: hci1: command tx timeout [ 36.171958][ T4688] Bluetooth: hci2: command tx timeout [ 36.564620][ T4988] team0: entered promiscuous mode [ 36.567375][ T4988] team_slave_0: entered promiscuous mode [ 36.570822][ T4988] team_slave_1: entered promiscuous mode [ 36.572789][ T4988] team0: entered allmulticast mode [ 36.573783][ T4988] team_slave_0: entered allmulticast mode [ 36.575395][ T4988] team_slave_1: entered allmulticast mode [ 36.594108][ T4989] Zero length message leads to an empty skb [ 36.594841][ T4989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.595021][ T4989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.623201][ T4991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.623395][ T4991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.727850][ T4998] capability: warning: `syz.1.60' uses deprecated v2 capabilities in a way that may be insecure [ 36.745826][ T5000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.749057][ T5000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.815273][ T5001] syz.4.58 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 36.825857][ T5001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.58'. [ 36.829372][ T5001] ubi31: attaching mtd0 [ 36.834744][ T5001] ubi31: scanning is finished [ 36.834785][ T5001] ubi31: empty MTD device detected [ 36.900758][ T4673] Bluetooth: Frame is too long (len 12, expected len 4) [ 36.988087][ T4774] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.040795][ T5001] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 37.040828][ T5001] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 37.040851][ T5001] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 37.040862][ T5001] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 37.040873][ T5001] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 37.040884][ T5001] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 37.040894][ T5001] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 487625566 [ 37.040905][ T5001] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 37.055145][ T5004] ubi31: background thread "ubi_bgt31d" started, PID 5004 [ 37.139654][ T4774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 37.139686][ T4774] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 37.139699][ T4774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 37.139709][ T4774] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 37.139725][ T4774] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 37.139735][ T4774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.141385][ T4774] usb 1-1: config 0 descriptor?? [ 37.349221][ T4774] hdpvr 1-1:0.0: unexpected answer of status request, len -71 [ 37.349254][ T4774] hdpvr 1-1:0.0: device init failed [ 37.349306][ T4774] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 37.356199][ T4774] usb 1-1: USB disconnect, device number 3 [ 37.432624][ T5017] netlink: 'syz.2.67': attribute type 3 has an invalid length. [ 37.432652][ T5017] netlink: 666 bytes leftover after parsing attributes in process `syz.2.67'. [ 37.706274][ T5023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.709406][ T5023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.955086][ T5029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.69'. [ 37.958916][ T5029] ubi: mtd0 is already attached to ubi31 [ 38.182358][ T4673] Bluetooth: Frame is too long (len 12, expected len 4) [ 38.404109][ T4673] Bluetooth: hci4: command tx timeout [ 38.404154][ T4673] Bluetooth: hci2: command tx timeout [ 38.404178][ T4673] Bluetooth: hci1: command tx timeout [ 38.404197][ T4673] Bluetooth: hci3: command tx timeout [ 38.404214][ T4673] Bluetooth: hci0: command tx timeout [ 38.727475][ T5040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.727674][ T5040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.859075][ T4430] Process accounting resumed [ 38.916834][ T11] IPVS: starting estimator thread 0... [ 39.014333][ T5056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.014530][ T5056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.084627][ T5053] IPVS: using max 58 ests per chain, 139200 per kthread [ 39.420130][ T5070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.422840][ T5070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.996264][ T5086] tmpfs: Bad value for 'mpol' [ 40.061262][ T5087] netlink: 20 bytes leftover after parsing attributes in process `syz.2.88'. [ 40.840754][ T5098] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 40.893934][ T30] audit: type=1326 audit(40.850:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5102 comm="syz.2.96" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6177a28 code=0x7ffc0000 [ 40.899990][ T30] audit: type=1326 audit(40.850:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5102 comm="syz.2.96" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6177a28 code=0x7ffc0000 [ 40.905095][ T30] audit: type=1326 audit(40.860:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5102 comm="syz.2.96" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6177a28 code=0x7ffc0000 [ 40.910451][ T30] audit: type=1326 audit(40.860:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5102 comm="syz.2.96" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6177a28 code=0x7ffc0000 [ 40.910479][ T30] audit: type=1326 audit(40.860:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5102 comm="syz.2.96" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=461 compat=0 ip=0xffffb6177a28 code=0x7ffc0000 [ 40.910499][ T30] audit: type=1326 audit(40.860:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5102 comm="syz.2.96" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6177a28 code=0x7ffc0000 [ 40.910517][ T30] audit: type=1326 audit(40.860:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5102 comm="syz.2.96" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffb6177a28 code=0x7ffc0000 [ 40.910536][ T30] audit: type=1326 audit(40.860:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5102 comm="syz.2.96" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffb6177a28 code=0x7ffc0000 [ 40.953054][ T5111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.953244][ T5111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.834921][ T5116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.835112][ T5116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.972462][ T5118] block device autoloading is deprecated and will be removed. [ 43.010306][ T5127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.010493][ T5127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.726652][ T4430] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 43.890958][ T4430] usb 1-1: device descriptor read/64, error -71 [ 43.967270][ T5143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.967463][ T5143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.129072][ T4430] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 44.172460][ T5166] netlink: 'syz.4.119': attribute type 2 has an invalid length. [ 44.198820][ C1] [ 44.199330][ C1] ================================ [ 44.200180][ C1] WARNING: inconsistent lock state [ 44.201108][ C1] syzkaller #0 Not tainted [ 44.201931][ C1] -------------------------------- [ 44.202770][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 44.203971][ C1] syz.4.119/5158 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 44.205051][ C1] ffff0000ddbb3c68 (slock-AF_PHONET/1){+.?.}-{3:3}, at: __sk_receive_skb+0x1ac/0x8d4 [ 44.206709][ C1] {SOFTIRQ-ON-W} state was registered at: [ 44.207705][ C1] lock_acquire+0x140/0x368 [ 44.208580][ C1] _raw_spin_lock_nested+0x50/0x6c [ 44.209583][ C1] __sk_receive_skb+0x1ac/0x8d4 [ 44.210487][ C1] pep_do_rcv+0x208/0x684 [ 44.211293][ C1] __release_sock+0x178/0x2c0 [ 44.212168][ C1] release_sock+0x174/0x228 [ 44.213029][ C1] pep_sock_accept+0x804/0xc08 [ 44.213946][ C1] pn_socket_accept+0xc8/0x26c [ 44.214855][ C1] do_accept+0x304/0x42c [ 44.215662][ C1] __sys_accept4+0x11c/0x1f8 [ 44.216537][ C1] __arm64_sys_accept+0x80/0x98 [ 44.217410][ C1] invoke_syscall+0x98/0x244 [ 44.218238][ C1] el0_svc_common+0xe8/0x23c [ 44.219089][ C1] do_el0_svc+0x48/0x58 [ 44.219811][ C1] el0_svc+0x64/0x260 [ 44.220587][ C1] el0t_64_sync_handler+0x48/0x148 [ 44.221506][ C1] el0t_64_sync+0x198/0x19c [ 44.222329][ C1] irq event stamp: 2028 [ 44.223076][ C1] hardirqs last enabled at (2028): [] _raw_spin_unlock_irq+0x30/0x80 [ 44.224805][ C1] hardirqs last disabled at (2027): [] _raw_spin_lock_irq+0x28/0x70 [ 44.226601][ C1] softirqs last enabled at (2022): [] netif_rx+0xac/0xd4 [ 44.228188][ C1] softirqs last disabled at (2023): [] __do_softirq+0x14/0x20 [ 44.229855][ C1] [ 44.229855][ C1] other info that might help us debug this: [ 44.231370][ C1] Possible unsafe locking scenario: [ 44.231370][ C1] [ 44.232704][ C1] CPU0 [ 44.233354][ C1] ---- [ 44.233966][ C1] lock(slock-AF_PHONET/1); [ 44.234811][ C1] [ 44.235434][ C1] lock(slock-AF_PHONET/1); [ 44.236346][ C1] [ 44.236346][ C1] *** DEADLOCK *** [ 44.236346][ C1] [ 44.237890][ C1] 5 locks held by syz.4.119/5158: [ 44.238826][ C1] #0: ffff0000f2298840 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7c/0x1d4 [ 44.240809][ C1] #1: ffff0000ddbb4360 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x90/0x4a8 [ 44.242580][ C1] #2: ffff800088ad72a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x574/0x16f8 [ 44.244285][ C1] #3: ffff0000c9f91be8 (slock-AF_PHONET){+.-.}-{3:3}, at: __sk_receive_skb+0x1e0/0x8d4 [ 44.246075][ C1] #4: ffff0000c9f91c60 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x64c/0xa94 [ 44.247810][ C1] [ 44.247810][ C1] stack backtrace: [ 44.248887][ C1] CPU: 1 UID: 0 PID: 5158 Comm: syz.4.119 Not tainted syzkaller #0 PREEMPT [ 44.250467][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 44.252455][ C1] Call trace: [ 44.253107][ C1] show_stack+0x2c/0x3c (C) [ 44.253995][ C1] __dump_stack+0x30/0x40 [ 44.254848][ C1] dump_stack_lvl+0xd8/0x12c [ 44.255768][ C1] dump_stack+0x1c/0x28 [ 44.256604][ C1] print_usage_bug+0x310/0x384 [ 44.257501][ C1] mark_lock_irq+0x4a0/0x4a8 [ 44.258336][ C1] mark_lock+0x144/0x1a4 [ 44.259094][ C1] __lock_acquire+0x6bc/0x2f44 [ 44.259989][ C1] lock_acquire+0x140/0x368 [ 44.260808][ C1] _raw_spin_lock_nested+0x50/0x6c [ 44.261678][ C1] __sk_receive_skb+0x1ac/0x8d4 [ 44.262517][ C1] pep_do_rcv+0x208/0x684 [ 44.263282][ C1] __sk_receive_skb+0x458/0x8d4 [ 44.264085][ C1] phonet_rcv+0x64c/0xa94 [ 44.264853][ C1] __netif_receive_skb_one_core+0xc4/0x10c [ 44.265910][ C1] __netif_receive_skb+0x34/0x128 [ 44.266859][ C1] process_backlog+0x610/0x16f8 [ 44.267724][ C1] __napi_poll+0xb0/0x324 [ 44.268499][ C1] net_rx_action+0x568/0xbcc [ 44.269354][ C1] handle_softirqs+0x2e4/0xd34 [ 44.270236][ C1] __do_softirq+0x14/0x20 [ 44.270999][ C1] ____do_softirq+0x14/0x20 [ 44.271783][ C1] call_on_irq_stack+0x30/0x48 [ 44.272654][ C1] do_softirq_own_stack+0x20/0x2c [ 44.273572][ C1] do_softirq+0x90/0xf8 [ 44.274326][ C1] __local_bh_enable_ip+0x240/0x35c [ 44.275316][ C1] netif_rx+0xb4/0xd4 [ 44.276037][ C1] pn_send+0x4e8/0x780 [ 44.276763][ C1] pn_skb_send+0x1dc/0x508 [ 44.277561][ C1] pipe_handler_request+0x128/0x234 [ 44.278506][ C1] pep_sock_close+0x124/0x4a8 [ 44.279339][ C1] pn_socket_release+0x9c/0xbc [ 44.280201][ C1] __sock_release+0xa0/0x1d4 [ 44.281043][ C1] sock_close+0x24/0x38 [ 44.281802][ C1] __fput+0x340/0x744 [ 44.282552][ C1] ____fput+0x20/0x30 [ 44.283291][ C1] task_work_run+0x1c4/0x254 [ 44.284088][ C1] exit_to_user_mode_loop+0x10c/0x17c [ 44.285064][ C1] el0_svc+0x18c/0x260 [ 44.285787][ C1] el0t_64_sync_handler+0x48/0x148 [ 44.286707][ C1] el0t_64_sync+0x198/0x19c [ 44.491469][ T4430] usb 1-1: device descriptor read/64, error -71 [ 44.494258][ T5158] gprs0: detached [ 44.598603][ T4430] usb usb1-port1: attempt power cycle [ 44.948305][ T4430] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 44.978905][ T4430] usb 1-1: device descriptor read/8, error -71