last executing test programs: 6.39881323s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./trace\x00', 0x1ff) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000600)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x3, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x0, 0x3, 0x80000801, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x8, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x1, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x2, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x8, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x1, 0x20004, 0xe50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x7fffffff, 0xfffffffd, 0x2000003, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x2, 0x4, 0x4, 0x43fe, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="041606aaaaaa"], 0x9) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0) 4.940481527s ago: executing program 1 (id=5): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @empty}, {0x2, 0x0, @remote}, 0x54, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0x6, 0x0, 0x3}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in6=@private1, 0xfffc, 0x8001, 0x1, 0x0, 0x0, 0x80, 0x0, 0x4f}, {0x0, 0x0, 0x58, 0x800, 0x7, 0x582, 0x100000001}, {0x4002, 0xffffffffffffffff, 0xe6}, 0x0, 0x6, 0x0, 0x1, 0x3}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in6=@rand_addr=' \x01\x00', 0x3501, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) ptrace(0x4207, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000440), 0x10106, 0x2, 0x0) setuid(0xee01) r5 = syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, 0xffffffffffffffff, 0x0) 3.859877514s ago: executing program 3 (id=4): ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='1', 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010102}}}], 0x20}, 0x24040000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4) 3.748609616s ago: executing program 1 (id=6): r0 = socket(0x1, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nodecompose,gid=', @ANYRESHEX=0x0, @ANYBLOB="e45554f44a45754eb21f32c1388ceb6772407d65fa41ef4e4033b6bac78436525bff914e7ff6c138f7335d1a248b609e69cf102806c1f472f70a0a5974bcbbc648a9f5f9ccb59ce08d68b66411c809c5ba6a963c8aa388a7c132557826913868d542a990d89084711a55dad71ca967e73fdf403b19c4f42a1e43445f078e9286c078c539352b8a41469c9a9efb157eab1b784c01e3847f2f673fc1984c6acb041f4e2bff2bc5ca48d58829cb5196202a4c068aed87fc847fbd3ede6831a205833c8677553f2141d99ee27761f2ec13", @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x5dc, &(0x7f0000002280)="$eJzs3cFLXNsZAPDvzujoWDDz3jPvvaaFJ69Q5IUkzhjSFgq1JQQXIQS6yVbqJEpGE3RSJlkUG/KHpAsLhSy6KYHSRRZZF5p/QOiyUOhSurHcO3fGiVGjiTpj8/uRM/cczz3fPffLvQfvVTCAT9bcnRhejyTmLt5spe3NjZnG5sbMcqceESMRUcj+xVBa/WdE8VnEZLRLfD8ikjxcst9xXtZeXHhzqzXVbhXyku1fPGjc4aznJWbzSc4eY7zXHx0v6Z5hGvR6J/gg2H6//5zg4YsnGJsjSPb5v6hEjEXEaL4OdC7cwunO7vgNzA0IAAAAJ+jcVmxFK8b7PQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4S/K//5/kpdCpT0bS+fv/pfxrkdfPtFf9ngAAAAAAAAAAHINvtmIrWjHeaW8n2c/8v80aE9nn9+JRrEU9VuNytGI+mtGM1ahGRKUnUKk132yuVg8xsrbnyNrpnC8AAAAAAAAA/J96GnM7P/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBBkEQU25usTHTqlSgMRcRoRJTS/dYj/tapn2Wv+j0BAAAAOAXntmIrWjHeaW8n2TP/l9lz/2g8ipVoxlI0oxH1WMjeBbSf+gubGzONzY2Z5bTsjnpj/Jf/PtI0sojRfvew95Gnsz3Od0fMxY34dVyMybgdq7EUv435aEY9JuN6VpuPJCr524tKZ557z3f2rdbt983162wm5bgbS9ncLsdv4kE0YiEK2Tlk+xx8xN+n2Ul+kTtkjhbybRKR/CA/s8FQyTIy3M3IdJ77NBufHZyJI14nu49UjUL3HdTECeR8LN+mOR8d6JzXeq6+Lw/ORMSl5l++WWys3F+8u3ZxcE7pA+3OxExPJr76pDJRyrPRXkWPtlp+m40dj6W4FQ9iIerxk7iWja3FTNTi2lt5PX+Ie61wtHvtR1N55fOIpNzeDog0r5/15LV3patkfb1f2cnS5/tm6Wl84Io0dCGvFCOSoe6cBsHuTFR7MvHFwdfLH7bTz7XGyv3VxfmHhzzej/NtujaPDNTaXMqv3qGs9fbVkfZ9sWdfNeub6PYV3uk73+17906tZaVzp5by7+HejVTL+r7as6897uuevr2+ywFg4I19N1Yq/6v89/Lz8rPyYvnm6K9Gfjryw1IMvx76a/HPhT8Wfp58F8/jdzvP/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIdbe/zk/nyjUV9VUVFR6Vb6vTJxGq40lx9eWXv85NLS8vy9+r36ytVzUb12tfqzq1fuLjXq0+3Pfs+Sk7Jz0/d7JgAAAAAAAAAAABxF/vtffzrJXyft9zkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdszdieH1SKI6fXk6bW9uzDTS0qnv7FmIiKF0+9+I4tQ/djoqPeGS/Y7zsvbiwptbramdWIXO/sWDxh3Oel5iNp/k7DHGe/3R8ZLuGaZBr3eCQ7/9LwAA//+BYh76") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r1, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000140)={{0xcf, 0x8}, 0x100, './file1/../file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b8000000000000000800980e0d000000", 0x24) unshare(0x22020600) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @none, 0x18}, 0xa) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d000000000000", 0x1b) 3.366131016s ago: executing program 0 (id=1): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 3.21441595s ago: executing program 2 (id=3): socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') socket$inet_udp(0x2, 0x2, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRESOCT, @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.143470831s ago: executing program 1 (id=7): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2282, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) eventfd(0x2) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0xc, {0x30bc}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2000000, 0xfffffffd, 0x4b, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x10000, {0x2a00, 0x80010000, 0x0, 0x51c, 0x81, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x980) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="400000006800010000000000000000000a00000000000000060007000200000018000880140001000000000000000000000004000000000008000500", @ANYRES32=r5], 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfd, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 2.779310721s ago: executing program 3 (id=8): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x8a}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000001ac0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000001bc0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000001c80), 0x10106, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000001d80)={'icmp6\x00'}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) write$UHID_INPUT(r4, &(0x7f0000000a40)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86120086, r1}) 2.193189445s ago: executing program 0 (id=9): syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x4040040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020e0000180000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000040003"], 0xc0}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) 2.053112289s ago: executing program 1 (id=10): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) rt_tgsigqueueinfo(r0, r0, 0x25, &(0x7f0000000040)={0x1a, 0x7, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mlock(&(0x7f0000ff3000/0xd000)=nil, 0xd000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r4, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) 1.99056939s ago: executing program 3 (id=11): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x1c, &(0x7f0000000580)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1900, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff80}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb0ffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000680)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.61736805s ago: executing program 2 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) setrlimit(0xd, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xbc}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) close(r3) 1.005403985s ago: executing program 1 (id=13): setns(0xc9, 0x0) listen(0xffffffffffffffff, 0x4009) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r4, @ANYBLOB="080002007f00000108000400ac1e0001140003"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 76.971298ms ago: executing program 3 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10002}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000008c0), 0x75, r1}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='bfq', 0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x4, 0x9, 0x8000, 0x9, 0xffffffffffffffff}) sendfile(r2, r2, &(0x7f0000000080), 0x8) mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x28, 0xa19702d202eff97b, 0x4001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200000dd}, 0x200000d0) 68.339789ms ago: executing program 0 (id=15): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) unshare(0x60600) syz_open_dev$usbmon(0x0, 0x0, 0x0) r3 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x199, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x2, 0x9}) mq_timedreceive(r3, &(0x7f0000001140)=""/170, 0xaa, 0x5, 0x0) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) 0s ago: executing program 2 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r3, 0x29, 0x3c, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfe, 0xc8, 0x9}}}, 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. [ 76.423607][ T5762] cgroup: Unknown subsys name 'net' [ 76.574207][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.009311][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.545018][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.553828][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.562879][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.573209][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.581687][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.590363][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.600112][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.607835][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.619409][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.626852][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.635037][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.648151][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.661098][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.661098][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.676534][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.676801][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.685385][ T5087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.692301][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.700717][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.717400][ T5087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.725851][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.734024][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.742002][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.755659][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.159662][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 80.206559][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 80.273619][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 80.333302][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 80.419831][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.430468][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.438324][ T5774] bridge_slave_0: entered allmulticast mode [ 80.448259][ T5774] bridge_slave_0: entered promiscuous mode [ 80.492071][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.499579][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.509356][ T5774] bridge_slave_1: entered allmulticast mode [ 80.516457][ T5774] bridge_slave_1: entered promiscuous mode [ 80.528910][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.536246][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.543767][ T5776] bridge_slave_0: entered allmulticast mode [ 80.550930][ T5776] bridge_slave_0: entered promiscuous mode [ 80.558239][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.565977][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.573666][ T5775] bridge_slave_0: entered allmulticast mode [ 80.581041][ T5775] bridge_slave_0: entered promiscuous mode [ 80.604095][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.611719][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.619514][ T5776] bridge_slave_1: entered allmulticast mode [ 80.626967][ T5776] bridge_slave_1: entered promiscuous mode [ 80.634411][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.644617][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.652275][ T5775] bridge_slave_1: entered allmulticast mode [ 80.660054][ T5775] bridge_slave_1: entered promiscuous mode [ 80.718077][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.731867][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.762415][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.769860][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.777500][ T5777] bridge_slave_0: entered allmulticast mode [ 80.784299][ T5777] bridge_slave_0: entered promiscuous mode [ 80.794927][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.816308][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.829494][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.836811][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.844268][ T5777] bridge_slave_1: entered allmulticast mode [ 80.852216][ T5777] bridge_slave_1: entered promiscuous mode [ 80.873468][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.884985][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.916975][ T5774] team0: Port device team_slave_0 added [ 80.966674][ T5775] team0: Port device team_slave_0 added [ 80.975763][ T5774] team0: Port device team_slave_1 added [ 80.984666][ T5776] team0: Port device team_slave_0 added [ 80.993281][ T5775] team0: Port device team_slave_1 added [ 81.002486][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.024827][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.036440][ T5776] team0: Port device team_slave_1 added [ 81.090690][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.098023][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.125383][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.163024][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.170347][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.197068][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.209145][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.219099][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.247964][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.261896][ T5777] team0: Port device team_slave_0 added [ 81.271794][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.278955][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.305774][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.319123][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.327039][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.353052][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.367964][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.374953][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.401439][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.423974][ T5777] team0: Port device team_slave_1 added [ 81.482027][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.489488][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.516583][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.559895][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.568842][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.599627][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.634489][ T5775] hsr_slave_0: entered promiscuous mode [ 81.641415][ T5775] hsr_slave_1: entered promiscuous mode [ 81.648483][ T5783] Bluetooth: hci0: command tx timeout [ 81.665967][ T5774] hsr_slave_0: entered promiscuous mode [ 81.673784][ T5774] hsr_slave_1: entered promiscuous mode [ 81.682487][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.690884][ T5774] Cannot create hsr debugfs directory [ 81.721135][ T5776] hsr_slave_0: entered promiscuous mode [ 81.727470][ T5783] Bluetooth: hci1: command tx timeout [ 81.734784][ T5776] hsr_slave_1: entered promiscuous mode [ 81.741641][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.749656][ T5776] Cannot create hsr debugfs directory [ 81.805638][ T5783] Bluetooth: hci3: command tx timeout [ 81.805654][ T5786] Bluetooth: hci2: command tx timeout [ 81.870068][ T5777] hsr_slave_0: entered promiscuous mode [ 81.877033][ T5777] hsr_slave_1: entered promiscuous mode [ 81.883933][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.892671][ T5777] Cannot create hsr debugfs directory [ 82.212650][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.236697][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.246705][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.260753][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.323245][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.337253][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.354925][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.364565][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.449553][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.465633][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.501803][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.525049][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.573080][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.584378][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.594569][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.628887][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.688367][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.714984][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.743413][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.775375][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.782734][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.819477][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.826985][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.840384][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.858653][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.865799][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.918331][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.925634][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.942949][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.002281][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.022115][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.048556][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.060197][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.067453][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.095632][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.103144][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.177375][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.239504][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.246743][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.293835][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.301275][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.391625][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.572400][ T5775] veth0_vlan: entered promiscuous mode [ 83.614222][ T5775] veth1_vlan: entered promiscuous mode [ 83.685024][ T5775] veth0_macvtap: entered promiscuous mode [ 83.722434][ T5775] veth1_macvtap: entered promiscuous mode [ 83.725801][ T5783] Bluetooth: hci0: command tx timeout [ 83.790797][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.803416][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.811527][ T5783] Bluetooth: hci1: command tx timeout [ 83.829433][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.854164][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.864899][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.885221][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.885659][ T5783] Bluetooth: hci3: command tx timeout [ 83.894379][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.900133][ T5783] Bluetooth: hci2: command tx timeout [ 83.969487][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.014896][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.102080][ T5777] veth0_vlan: entered promiscuous mode [ 84.143817][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.159602][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.200360][ T5774] veth0_vlan: entered promiscuous mode [ 84.223156][ T5777] veth1_vlan: entered promiscuous mode [ 84.240494][ T5774] veth1_vlan: entered promiscuous mode [ 84.263172][ T5776] veth0_vlan: entered promiscuous mode [ 84.274209][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.281918][ T5776] veth1_vlan: entered promiscuous mode [ 84.288206][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.401781][ T5774] veth0_macvtap: entered promiscuous mode [ 84.464385][ T5774] veth1_macvtap: entered promiscuous mode [ 84.489452][ T5776] veth0_macvtap: entered promiscuous mode [ 84.506209][ T5777] veth0_macvtap: entered promiscuous mode [ 84.523911][ T5776] veth1_macvtap: entered promiscuous mode [ 84.794020][ T5777] veth1_macvtap: entered promiscuous mode [ 85.087681][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.188993][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.202302][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.214296][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.227835][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.242667][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.284616][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.300176][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.310843][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.326806][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.340723][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.350740][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.360410][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.369664][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.379454][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.407561][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.419487][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.429846][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.440844][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.451698][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.462513][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.477836][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.493804][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.505651][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.516260][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.527252][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.538864][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.552549][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.562263][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.573412][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.582734][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.601234][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.612451][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.622925][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.633607][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.643897][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.654981][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.667418][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.688401][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.700661][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.709939][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.719379][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.806147][ T5783] Bluetooth: hci0: command tx timeout [ 85.885946][ T5783] Bluetooth: hci1: command tx timeout [ 85.900830][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.931755][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.966190][ T5783] Bluetooth: hci2: command tx timeout [ 85.967840][ T5786] Bluetooth: hci3: command tx timeout [ 86.052121][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.080518][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.117847][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.140487][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.931367][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.985347][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.050084][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.075230][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.165670][ T5853] syz.1.6[5853]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.186758][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.211923][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.263454][ T5853] loop1: detected capacity change from 0 to 1024 [ 87.336990][ T5853] hfsplus: unable to parse mount options [ 87.885184][ T5786] Bluetooth: hci0: command tx timeout [ 88.000535][ T5786] Bluetooth: hci1: command tx timeout [ 88.045242][ T5786] Bluetooth: hci2: command tx timeout [ 88.052364][ T5783] Bluetooth: hci3: command tx timeout [ 88.551195][ T42] cfg80211: failed to load regulatory.db [ 88.600535][ T5861] loop2: detected capacity change from 0 to 164 [ 88.699528][ T5865] netlink: 'syz.1.7': attribute type 1 has an invalid length. [ 90.565033][ T5786] Bluetooth: hci3: command tx timeout [ 91.599995][ T5786] [ 91.602421][ T5786] ====================================================== [ 91.609996][ T5786] WARNING: possible circular locking dependency detected [ 91.617416][ T5786] syzkaller #0 Not tainted [ 91.621891][ T5786] ------------------------------------------------------ [ 91.629112][ T5786] kworker/u5:6/5786 is trying to acquire lock: [ 91.635472][ T5786] ffffffff8f364ac8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x41/0x550 [ 91.644776][ T5786] [ 91.644776][ T5786] but task is already holding lock: [ 91.652913][ T5786] ffffffff8f341368 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 91.662287][ T5786] [ 91.662287][ T5786] which lock already depends on the new lock. [ 91.662287][ T5786] [ 91.673071][ T5786] [ 91.673071][ T5786] the existing dependency chain (in reverse order) is: [ 91.682989][ T5786] [ 91.682989][ T5786] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 91.691286][ T5786] __mutex_lock+0x135/0xc80 [ 91.696340][ T5786] hci_remote_features_evt+0x535/0x900 [ 91.702826][ T5786] hci_event_packet+0x807/0x1280 [ 91.708510][ T5786] hci_rx_work+0x43a/0xd60 [ 91.713503][ T5786] process_scheduled_works+0xa60/0x1600 [ 91.719790][ T5786] worker_thread+0xa5e/0xfe0 [ 91.725466][ T5786] kthread+0x2fa/0x390 [ 91.730349][ T5786] ret_from_fork+0x48/0x80 [ 91.735617][ T5786] ret_from_fork_asm+0x11/0x20 [ 91.741032][ T5786] [ 91.741032][ T5786] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 91.748560][ T5786] __mutex_lock+0x135/0xc80 [ 91.754032][ T5786] l2cap_chan_connect+0xfc/0xe30 [ 91.759843][ T5786] l2cap_sock_connect+0x586/0x760 [ 91.765501][ T5786] kernel_connect+0x142/0x1c0 [ 91.770920][ T5786] rfcomm_dlc_open+0xa1f/0xec0 [ 91.776215][ T5786] rfcomm_sock_connect+0x2ed/0x600 [ 91.781935][ T5786] __sys_connect+0x3da/0x470 [ 91.787076][ T5786] __x64_sys_connect+0x7a/0x90 [ 91.792369][ T5786] do_syscall_64+0x55/0xb0 [ 91.797323][ T5786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.803751][ T5786] [ 91.803751][ T5786] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 91.811162][ T5786] __lock_acquire+0x3a07/0x7eb0 [ 91.816821][ T5786] lock_acquire+0x19e/0x420 [ 91.821933][ T5786] __mutex_lock+0x135/0xc80 [ 91.827156][ T5786] rfcomm_security_cfm+0x41/0x550 [ 91.833210][ T5786] hci_encrypt_cfm+0x363/0x4d0 [ 91.838610][ T5786] hci_encrypt_change_evt+0x5c3/0xe30 [ 91.844789][ T5786] hci_event_packet+0x807/0x1280 [ 91.850339][ T5786] hci_rx_work+0x43a/0xd60 [ 91.855287][ T5786] process_scheduled_works+0xa60/0x1600 [ 91.861657][ T5786] worker_thread+0xa5e/0xfe0 [ 91.866791][ T5786] kthread+0x2fa/0x390 [ 91.871394][ T5786] ret_from_fork+0x48/0x80 [ 91.876468][ T5786] ret_from_fork_asm+0x11/0x20 [ 91.881883][ T5786] [ 91.881883][ T5786] other info that might help us debug this: [ 91.881883][ T5786] [ 91.892481][ T5786] Chain exists of: [ 91.892481][ T5786] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 91.892481][ T5786] [ 91.905163][ T5786] Possible unsafe locking scenario: [ 91.905163][ T5786] [ 91.912688][ T5786] CPU0 CPU1 [ 91.918233][ T5786] ---- ---- [ 91.923830][ T5786] lock(hci_cb_list_lock); [ 91.928606][ T5786] lock(&hdev->lock); [ 91.935477][ T5786] lock(hci_cb_list_lock); [ 91.942618][ T5786] lock(rfcomm_mutex); [ 91.946802][ T5786] [ 91.946802][ T5786] *** DEADLOCK *** [ 91.946802][ T5786] [ 91.955135][ T5786] 4 locks held by kworker/u5:6/5786: [ 91.960733][ T5786] #0: ffff888025274138 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 91.972203][ T5786] #1: ffffc900047b7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 91.984838][ T5786] #2: ffff888075c880b8 (&hdev->lock){+.+.}-{3:3}, at: hci_encrypt_change_evt+0x93/0xe30 [ 91.995156][ T5786] #3: ffffffff8f341368 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 92.005035][ T5786] [ 92.005035][ T5786] stack backtrace: [ 92.010978][ T5786] CPU: 1 PID: 5786 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 92.018710][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.029207][ T5786] Workqueue: hci1 hci_rx_work [ 92.033939][ T5786] Call Trace: [ 92.037248][ T5786] [ 92.040315][ T5786] dump_stack_lvl+0x18c/0x250 [ 92.045270][ T5786] ? load_image+0x420/0x420 [ 92.049963][ T5786] ? show_regs_print_info+0x20/0x20 [ 92.055260][ T5786] ? print_circular_bug+0x12b/0x1a0 [ 92.060463][ T5786] check_noncircular+0x2fc/0x400 [ 92.065578][ T5786] ? print_deadlock_bug+0x5d0/0x5d0 [ 92.070794][ T5786] ? lockdep_lock+0x195/0x230 [ 92.075580][ T5786] ? _find_first_zero_bit+0xd6/0x100 [ 92.081268][ T5786] __lock_acquire+0x3a07/0x7eb0 [ 92.086150][ T5786] ? verify_lock_unused+0x140/0x140 [ 92.091379][ T5786] ? l2cap_security_cfm+0x1277/0x1300 [ 92.096945][ T5786] ? __lock_acquire+0x7eb0/0x7eb0 [ 92.102083][ T5786] lock_acquire+0x19e/0x420 [ 92.106777][ T5786] ? rfcomm_security_cfm+0x41/0x550 [ 92.112002][ T5786] ? __might_sleep+0xe0/0xe0 [ 92.116684][ T5786] ? read_lock_is_recursive+0x20/0x20 [ 92.122096][ T5786] ? __mutex_trylock_common+0x160/0x270 [ 92.127830][ T5786] __mutex_lock+0x135/0xc80 [ 92.132359][ T5786] ? rfcomm_security_cfm+0x41/0x550 [ 92.137738][ T5786] ? trace_contention_end+0x39/0xe0 [ 92.143241][ T5786] ? __mutex_lock+0x30d/0xc80 [ 92.148298][ T5786] ? rfcomm_security_cfm+0x41/0x550 [ 92.153680][ T5786] ? mutex_lock_nested+0x20/0x20 [ 92.158623][ T5786] ? hci_encrypt_cfm+0x2fe/0x4d0 [ 92.163650][ T5786] ? mutex_lock_nested+0x20/0x20 [ 92.168601][ T5786] ? __lock_acquire+0x7eb0/0x7eb0 [ 92.173635][ T5786] rfcomm_security_cfm+0x41/0x550 [ 92.178758][ T5786] ? hci_conn_hash_lookup_handle+0x20/0x240 [ 92.184948][ T5786] ? rfcomm_send_msc+0x360/0x360 [ 92.189918][ T5786] hci_encrypt_cfm+0x363/0x4d0 [ 92.194756][ T5786] hci_encrypt_change_evt+0x5c3/0xe30 [ 92.200170][ T5786] ? __skb_clone+0x446/0x6c0 [ 92.204783][ T5786] ? hci_remote_name_evt+0x610/0x610 [ 92.210171][ T5786] ? skb_pull_data+0xf0/0x1f0 [ 92.214950][ T5786] ? hci_remote_name_evt+0x610/0x610 [ 92.220256][ T5786] hci_event_packet+0x807/0x1280 [ 92.225475][ T5786] ? __lock_acquire+0x7eb0/0x7eb0 [ 92.230880][ T5786] ? lock_chain_count+0x20/0x20 [ 92.235820][ T5786] ? bis_list+0x290/0x290 [ 92.240334][ T5786] ? kcov_remote_start+0x513/0x810 [ 92.245463][ T5786] ? lockdep_hardirqs_on+0x98/0x150 [ 92.250694][ T5786] ? hci_send_to_monitor+0xd7/0x4f0 [ 92.255899][ T5786] hci_rx_work+0x43a/0xd60 [ 92.260331][ T5786] ? process_scheduled_works+0x975/0x1600 [ 92.266061][ T5786] process_scheduled_works+0xa60/0x1600 [ 92.271626][ T5786] ? worker_attach_to_pool+0x370/0x370 [ 92.277187][ T5786] ? assign_work+0x3cc/0x5d0 [ 92.281902][ T5786] worker_thread+0xa5e/0xfe0 [ 92.286706][ T5786] kthread+0x2fa/0x390 [ 92.290799][ T5786] ? pr_cont_work+0x550/0x550 [ 92.295762][ T5786] ? kthread_blkcg+0xd0/0xd0 [ 92.300444][ T5786] ret_from_fork+0x48/0x80 [ 92.304868][ T5786] ? kthread_blkcg+0xd0/0xd0 [ 92.309464][ T5786] ret_from_fork_asm+0x11/0x20 [ 92.314238][ T5786] [ 94.448346][ T5786] Bluetooth: hci1: command 0x0406 tx timeout