last executing test programs: 22.314342915s ago: executing program 4 (id=934): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x76, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)={0x24c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x4}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x440e}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4811}, 0x4010) recvmmsg(r4, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/242, 0xf2}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x2}, 0xebea}], 0x1, 0x40000001, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x54}, 0x0) 21.931883983s ago: executing program 0 (id=941): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f0000000140)=""/159, 0x9f}], 0x2}, 0x2000) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002300100000000000000002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000600"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43eb}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000240)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f0000000140)=""/159, 0x9f}], 0x2}, 0x2000) (async) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002300100000000000000002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000600"], 0x54}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43eb}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) close(r5) (async) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000240)) (async) 21.890166294s ago: executing program 4 (id=943): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800f0005e0001"], 0x18}}, 0x20004084) 21.737977093s ago: executing program 0 (id=944): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)=ANY=[@ANYRES8=r1], 0x8c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000004) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21.736382283s ago: executing program 4 (id=946): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000003c0)=r4, 0x4) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 21.653270974s ago: executing program 0 (id=948): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') r1 = socket(0x10, 0x3, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0x2, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) ioctl$NS_GET_NSTYPE(r0, 0x8008b705, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={{r0}, 0x3, 0x6, 0x6}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$FICLONE(r5, 0x40049409, r5) r6 = socket(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) sendmsg$nl_generic(r6, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r4, @ANYRES8=r0], 0x254}, 0x1, 0x0, 0x0, 0x41}, 0x4000001) r7 = socket(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r8, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0x4, 0x0, &(0x7f00000000c0)) setsockopt$CAIFSO_REQ_PARAM(r6, 0x116, 0x80, &(0x7f0000000680)="b5e8d51ee37a4fe32660b23716f5882dcd759ad251de3a4e599c0d0698bde707358230f913448fa74280d99a1b1320e489030113", 0x34) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r9, 0x6, 0x4, 0x0, 0xf0ff1f00000000) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r10, 0x112, 0x9, &(0x7f00000008c0)=0x6, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r11 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000ac0)=0x2, 0x12) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r12, {0x5, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x88, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe], 0x1, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x1000]}, [@TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x28, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x3}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x1}]}]}}}]}, 0xb8}}, 0x20000000) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000040)={0x1, 0x84}) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, 0x13, 0x0) 21.523899771s ago: executing program 4 (id=951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800110000000000000000000000000061106100000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x4, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r1, &(0x7f0000000300)="dc60e2a7ea465056c12c8c53101da1bb466078eabd5bff7880357e0d7d5072a7d594f275827810a4ec1d46fca55b2b246ffe577471cc7f12837e7aad31f2e12839fec9603ca65d04a5710653a3672c46e1a4ce9c007dfec293da828aa9fbee820dc8f74160210a3d", &(0x7f0000000380)=""/117}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000071116a00000000008510000002000000850000000000000095000000004000009500a50500000000a7664ace88f3284baf71dcbb2b4b93597f6140cc51c69be1716632ceda93db3759730d8e75e39d0f2a4a632779f37ed3533b810aaac5bc2342fdad4195d0b33262e612a44586bb43760f4c160300fd2f7b56aeccce810dd780f165418b21064d5fb25009b49ab193b379af3a629249cf112993c3938e0ef5a93fee6fe1a3cab7c320"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1416d8afacd00100000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800900010068617368000000001f0002800800064000000011080007400000000108000440fffffffc08000240000000000900010073797a30320000acb67aba16d288e91b391b33ab5c000014000000110000"], 0x8c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x20004800) 21.373269905s ago: executing program 0 (id=953): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) r4 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000008c000000b700000000000000950000000000000005d04560af90d6b751ebe4f650217fcf9d1654d9f1716358c7f15cce245775a8440817f854e2f8cb8bd2addbc20d68a66ab2a305"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) sendto$inet6(r0, &(0x7f0000000580), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) shutdown(r0, 0x1) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, 0x0, 0x0) syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000007100)=0x8, 0x4) socket(0x2, 0x2, 0x1) sendto$packet(r6, 0x0, 0x0, 0x24000840, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3cf1ff00", @ANYRES16=r8, @ANYBLOB="010025bd7000fbdbdf250b00000008000300", @ANYRES32=r9, @ANYBLOB="2000508005000200010000000800030005ac0f00090001009655302d5a000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40810}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4e4ff000000000079100000000000006300f8ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffda6}, 0x1a) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x12c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_USERDATA={0xf3, 0x7, 0x1, 0x0, "1d1cd67d1ee42b11f9f6a10dd7de88a0ef22f223887e1f0ffeaa23bcd2188c45b0d39dd02aeaf8afbe534c36488df604ec69c14c2b069f4d0b93137229fc033634efdfbe04aa52ff91b338160061951c4b51132020ace79c1fe5081bf4dc8341764cab69a7ab911f888b0dd5ed165db95f54b7386a4e9a6e861b37847f3e2564c5b1786b13000032dd8c74023436272afa6d8aae89475889dcdfd56417ae6b4e9c788f0df605632531ea7578a975f4d51740fc37240c2725771ed593609ba13b91217109633af808cf1673d4bd41b4b6c18446a276fc1a55542cdd872bba55f6c3265bddd52739cb8fc69c262b5474"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_RULE_COMPAT={0x4}]}, @NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'caif0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4169530a}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x666d166a}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x56aaa590}]}]}], {0x14}}, 0x22c}}, 0x0) 21.35231072s ago: executing program 2 (id=955): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000691226000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x25, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x8000000000000003}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x2, {0x0, 0xff, 0x5}, 0xfd}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r10, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 21.279444944s ago: executing program 0 (id=956): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000006c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001400000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0x8044) 21.107726823s ago: executing program 3 (id=958): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fe0dd20b", 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104f000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 21.082571146s ago: executing program 0 (id=959): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x24, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@rand_addr=0x64010102, 0x0, 0x7079, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x3, 0x7}, 0x10000000}}, 0xb8}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_emit_ethernet(0x2e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08004500002000000000002f9078000000b73140383b2ae5a6f6a7b7d6d26900e0000001320088be000c907801000000"], 0x0) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2044}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f0000001a00)=""/4088, 0xff8}, {&(0x7f0000006080)=""/4064, 0xfe0}, {&(0x7f00000004c0)=""/106, 0x6a}], 0x4}, 0x3}], 0x3, 0x40010020, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}]}, 0x3c}}, 0x840) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=@gettfilter={0x3c, 0x2e, 0xa00, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xa}, {0xfff1, 0x9}, {0x5, 0x2}}, [{0x8, 0xb, 0xf85c}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48d0}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00T\x00'/20, @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) 20.974064162s ago: executing program 2 (id=960): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, {0x8100}}]}, 0x24}}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 20.973171395s ago: executing program 3 (id=961): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x87, 0x0, 0x4, 0x0, 0x10, 0x48, 0xf59e}}}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_OIF={0x8, 0x5, r4}]}, 0x40}}, 0x40040d0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000300)={&(0x7f0000001880)=""/4096, 0x1000, 0x0, &(0x7f00000000c0)=""/53, 0x35}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x7, 0x0, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, 0x0) 20.944500376s ago: executing program 2 (id=962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180100001600"/20, @ANYRES32=0x0], 0x18}}, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async, rerun: 32) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x88, 0x1403, 0x1, 0x0, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x4, 0x9, 0x9, 0x7}, &(0x7f0000000300)={0x2, 0xe0e, 0x3, 0x3, 0xfffffffffffffff7, 0x48000000000, 0x9, 0x7}, &(0x7f00000003c0)={0x2, 0xffffffff, 0x7fffffffffffffff, 0x81, 0x3, 0xc, 0x7, 0x40}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000580)={&(0x7f0000000540)={[0xff8b]}, 0x8}) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4038000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="00a60000d84e6f7648a251a35ced8a44eb4c17a3417df16175891d6732c384620d0270ea7de89c2b20a917e7cc267803d58e377ab7355cf4bf5ffe21085bdd7dd14f27e9e47828e7e2ea30817d2f30b0c97a45fa2d7ff8c7c5ed23586dd0c46f539ac1314b60dc5ab6780b8d3fb71361cad1ce89cc970101ff7c13d8dec4380ca2d31d86bc487dc15fe07701a7226943f06e50b25e915451b374d2b18ed261ea5e5229", @ANYRES16=r9, @ANYBLOB="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"], 0x1d4}, 0x1, 0x0, 0x0, 0x20000801}, 0x40000) (async) sendmsg$TIPC_NL_MON_GET(r8, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000780)={0x198, r9, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "df4c6ec79bba3a8d993c1869f2efa08fb18b0277487f8a8947752012bde79c5f9d6f"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "5980dd9d8b39a2ca5d8869030000007cb67ada00000000000000f2ff00"}}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffb7f2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1009}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x15f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x600000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x20040841}, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x24}, @exit={0x95, 0x0, 0x33, 0x48000000}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb800007a}, 0x70) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 20.897160312s ago: executing program 3 (id=963): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x1bc, r1, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9f2c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe88}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff584d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x1bc}}, 0x4000000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r5, 0xff03, 0x0) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000011401000000000000000000090002007379736977"], 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xe4}}, @TCA_IFE_METALST={0xffffffffffffff75, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xfffffffffffffeba}}}, @m_nat={0x0, 0xc, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x0, 0x1, {{0x6211cb98, 0x0, 0x4, 0x5, 0x1ff}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x9, 0xffff0000, 0x4, 0xd, 0x6}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff0000ff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x9, 0x0, 0x3, 0x6, 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x93, 0x4, 0x6, 0x8c42, 0x9f4}, @local, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x0, 0x7, 0x1, 0x9, 0xe}, @dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x7ff, 0xfff, 0x2, 0xe000, 0x2}, @multicast1, @rand_addr=0x64010100}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x5, 0x7, 0x4, 0x2, 0x5}, @private=0xa010102, @rand_addr=0x64010102, 0xffffff00}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x1, 0x3, 0x7, 0x6, 0x2}, @private=0xa010102, @loopback, 0xffffff00}}]}, {0x0, 0x6, "dd1f9ce6c137f0f088e7e6baabc747eb6106674069132dc847dc69eb0c5d97fd2a86d03ab1ecf74f1d9773d617bce6cf1aa66b3f5330ba1465791b94d754d61a942057d76f3cd5"}, {0x0, 0x7, {0x1, 0x1}}}}]}]}, 0x98}}, 0x0) 20.637869678s ago: executing program 4 (id=964): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xc}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x6}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1}]}, 0x48}}, 0x0) 20.528935096s ago: executing program 4 (id=966): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 18.007955381s ago: executing program 3 (id=967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r2, 0x1, 0x0, 0x0, {0x2d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xff12}, {0x2}, {0xc}}]}, 0xa0}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x16c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff74f9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffff0e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5576}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4044884}, 0x4000044) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x2, 0x2, 0x21, 0x0, [@empty]}]}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500382c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b0002"], 0x0) 17.991503917s ago: executing program 2 (id=969): ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) bind$xdp(r0, &(0x7f0000000080)={0x2c, 0x8, 0x0, 0x29, r0}, 0x10) close(r0) r1 = socket$netlink(0x10, 0x3, 0x12) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000000c0)=0x8, 0x4) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) r6 = getgid() sendmmsg$unix(r2, &(0x7f0000000580)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000240)="c1b6ae0b3f604538cf15b47f96c232a1465ed676cbee4e77473b7642c5cb17270212a6234b2e37c26412307408ec7f578b7157931a01191af25139145f0d29f6f9883f33f2c2da6676b426cca0986f73922b74f2563318db25bed7d88776c5bbd28a8f674bce7dd72aad4ff7a563c813ac625db7f78691ccbbdbdf2672f73ac7d5fdc15f9b65d21d19f96595005ffc256d", 0x91}, {&(0x7f0000000300)="9f744ed50ea561d11a842d091810484cabf1762627bbf30b285e450a58425efec213da64fe764f9b7f3839de4c2a4adbd9d06a06955c9ec8b49856f2ab3879e741e0ebfb2088121f97f81aee58a72cd6afb0", 0x52}], 0x2, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r5, r6}}}], 0x38, 0x4000000}}], 0x1, 0x80) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000005c0)={@remote, @local, r4}, 0xc) recvmmsg$unix(r2, &(0x7f0000003980)=[{{&(0x7f0000000600), 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000680)=""/179, 0xb3}, {&(0x7f0000000740)=""/173, 0xad}, {&(0x7f0000000800)=""/248, 0xf8}, {&(0x7f0000000900)=""/36, 0x24}, {&(0x7f0000000940)=""/238, 0xee}, {&(0x7f0000000a40)=""/34, 0x22}, {&(0x7f0000000a80)=""/189, 0xbd}, {&(0x7f0000000b40)=""/178, 0xb2}, {&(0x7f0000000c00)=""/253, 0xfd}, {&(0x7f0000000d00)=""/44, 0x2c}], 0xa, &(0x7f0000000e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000000f00), 0x6e, &(0x7f0000002480)=[{&(0x7f0000000f80)=""/146, 0x92}, {&(0x7f0000001040)=""/163, 0xa3}, {&(0x7f0000001100)=""/214, 0xd6}, {&(0x7f0000001200)=""/13, 0xd}, {&(0x7f0000001240)=""/202, 0xca}, {&(0x7f0000001340)=""/239, 0xef}, {&(0x7f0000001440)=""/27, 0x1b}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x8, &(0x7f0000002500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002600)=""/57, 0x39}, {&(0x7f0000002640)=""/205, 0xcd}, {&(0x7f0000002740)=""/212, 0xd4}, {&(0x7f0000002840)=""/85, 0x55}], 0x4}}, {{&(0x7f0000002900)=@abs, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000002980)=""/212, 0xd4}, {&(0x7f0000002a80)=""/210, 0xd2}, {&(0x7f0000002b80)=""/147, 0x93}], 0x3, &(0x7f0000002c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000002d80)=@abs, 0x6e, &(0x7f00000031c0)=[{&(0x7f0000002e00)=""/201, 0xc9}, {&(0x7f0000002f00)=""/195, 0xc3}, {&(0x7f0000003000)=""/86, 0x56}, {&(0x7f0000003080)=""/134, 0x86}, {&(0x7f0000003140)=""/78, 0x4e}], 0x5, &(0x7f0000003240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000032c0)=@abs, 0x6e, &(0x7f0000003800)=[{&(0x7f0000003340)=""/41, 0x29}, {&(0x7f0000003380)=""/86, 0x56}, {&(0x7f0000003400)=""/38, 0x26}, {&(0x7f0000003440)=""/193, 0xc1}, {&(0x7f0000003540)=""/163, 0xa3}, {&(0x7f0000003600)=""/35, 0x23}, {&(0x7f0000003640)=""/83, 0x53}, {&(0x7f00000036c0)=""/193, 0xc1}, {&(0x7f00000037c0)=""/43, 0x2b}], 0x9, &(0x7f00000038c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}], 0x6, 0x10000, &(0x7f0000003b00)={0x0, 0x989680}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000003b40)={@dev={0xfe, 0x80, '\x00', 0x26}, 0x15, r4}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003bc0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r13, &(0x7f0000003c80)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)={0x38, r14, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000003cc0)=0x0) bind(r10, &(0x7f0000003d00)=@nfc_llcp={0x27, r15, 0xffffffffffffffff, 0x6, 0xd, 0x4, "e93ac7656d9c15cb50259e5d7ac2ae10bf5891eec7f6d6230c256b04eae83f34593cc082d3b8f47d260e62be1a65945cf1385e60f7fe3efb441ca68bc17bb9", 0x3e}, 0x80) sendmsg$nl_route_sched(r10, &(0x7f0000003f40)={&(0x7f0000003d80), 0xc, &(0x7f0000003f00)={&(0x7f0000003dc0)=@gettaction={0x108, 0x32, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf9c}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x731ce12c}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc82}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffffff}]}, 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x4000005) bpf$MAP_CREATE(0x0, &(0x7f0000003f80)=@bloom_filter={0x1e, 0xf, 0x0, 0x7fffffff, 0x8800, r7, 0x9, '\x00', r4, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0xe, @value=r12}, 0x50) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nbd(&(0x7f0000004040), r13) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f0000004100)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000040c0)={&(0x7f0000004080)={0x14, r17, 0x400, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4010) bind$inet6(r11, &(0x7f0000004140)={0xa, 0x4e23, 0x8, @local, 0xde52}, 0x1c) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000004180), 0x2, 0x0) bind$netlink(r8, &(0x7f00000041c0)={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0xc) r18 = syz_genetlink_get_family_id$nfc(&(0x7f0000004240), r13) sendmsg$NFC_CMD_DEP_LINK_UP(r16, &(0x7f0000004300)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000042c0)={&(0x7f0000004280)={0x34, r18, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) recvfrom(0xffffffffffffffff, &(0x7f0000004380)=""/208, 0xd0, 0x1, &(0x7f0000004480)=@l2tp6={0xa, 0x0, 0x5b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8001, 0x2}, 0x80) 17.858056832s ago: executing program 2 (id=970): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x11, r2, 0x4000) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x54, &(0x7f0000000080), 0x4) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) (async) close(0x3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040), &(0x7f0000000080)=0x4) 17.855061434s ago: executing program 3 (id=972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x600801, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) close(0x4) pwritev(r0, &(0x7f0000000780)=[{&(0x7f0000000140)="d17195fec65754cfe7cf5d34d1fb44dead8d61a30bb7943613c430e2ed55b8a794f9d7a605b8415bd4faec00fabd67661a7db1c92b91bdcaf22129706544aaa6370621cbdd6fefd2e12369295c7fba9da295595fe2083b7d1ca956d2389f0219c518165499f3d96fdb1896387d152da70437f24d6b30ec05ccf2d6be05752e2a102ad1c0", 0x84}, {&(0x7f0000000280)="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", 0xfa}, {&(0x7f0000000380)="c2ab9470b4d1494551fc4b7dbacd4a506d8c18f26e32942e0b75f35cd245f78e0d7952b243395e4d1e0612074b9488885415269161b761babbce302ac53de7e3e425d16fa2f6cc397f87e5fefab0c75ec8fc28e4df309da8d013991f00f997f3df39de81af4c6c29102cae1f246778ef655282e9ef4cc733b6ec1404b0d761401b7454342a2052aa78330bb3900a20024f6dfc8ea8b5f6513f998936778fb64198501bab19a4692c8578ae", 0xab}, {&(0x7f0000000440)="e876a583ebc253fd0ceff0553c29cd6c1fe2dffeac70659883f875a8e312b43e1c0a81dd20c4052f3e00f4156a116f8e8bccf55b37468934322834f9981b38ecdaeb0dd0609796f26174cce55b33402d1a170b0e2bc876face1c84a0a4c7b510f6ba3d7f768791dd41af89fca28384dc9927c05c5ffa15d75cf1aec61395f12ca5d99649f66f5b990b97ed211fd82061e8217b2e8502a9f7f0ded0e9753461b88a5313d02a9d6179b4d2afadb2f529cc708739c387b789e3532648ddc299d673937c1822a2cc6640db", 0xc9}, {&(0x7f0000000540)="b8233b46e72752c4a51b0f680f473ec18a5dc3b77c0f2a88dc3b3470ad62719e39aea39f998d7cefc83930e1494454adedec41ff26a462418c7996772e7d4d5bb9ba174e8600196d241c1d15fa41b9c2e80e48dc2d6181e0e16fdd7b56b31653cb7d6f42682ca3798c61412baa63fa974e6011870ea55425430c2fd02a6ee6c2915b87", 0x83}, {&(0x7f0000000600)="78390988da079640db50d8a24b05d0d42074b1ec9a6d50e4140ae26efee48a4e373f1e406909f9fb95c9fa9b108b799f8f1e1636f96b0f11ac1d709eccd182e1041a1bb8eee310384b8b67754c31b4b5f26fa993d0cbbe291c7c20d461f0644dfea740de6fabbe06cefb2b6cc3731ddd1452b5f6ea1e125f9b3c3995dece01a1f56bd5e505c58ef9d8f78b04b7c3ce3c3d795507d37022cb156eec509aab9a6034fbf87f3101aa2de9569c345e6bfd6189a4d4a869ce891957edcceee6d8f206dd40c33cc502a13fa9fb7bde22903eec539b561468e449b02dcec698e5a91d48d5d6140b8f2f25cee6", 0xe9}, {&(0x7f0000000700)="878f45b899a0083417377ce9fd84cec5efc7c9a6f570d15cb198fdb0e79593cd247010b36c64fb5c86e6f78795187aa60f6be7b0d2cde516851d66c68df81d96ac1bef0c2c5804246fa809ed1100da6a299b576ffac6649f6b2b93", 0x5b}], 0x7, 0x5a, 0xa1) 17.83948898s ago: executing program 2 (id=973): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="60000000070a010100000000000000000a0000090900020073797a300000000940000000010c000320000000000000000308000940000000020c00034000000000000000010900010073797a3100000000"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40408c0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000680)=0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x3f, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x20000054) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x6c}, 0x1, 0x0, 0x0, 0x11}, 0x40818) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r12, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x2c, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40011}, 0x20000800) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000f000000cc0002000600000005000000", @ANYRES32, @ANYBLOB="000000001f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r14}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x728a, r14}, 0x38) unshare(0x180) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000800c5f1d8d4843be74d00000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)={@map=r14, r15, 0x32, 0x0, 0x0, @void, @value=r15}, 0x20) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fbffffff000000009dffffff18110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000004120000ffffffffb7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000010400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r14, @ANYRESOCT=r8, @ANYRES32=r14, @ANYBLOB="0000000000000000bf91000000000000b70200000000000085000000840000d7000000000000009500000000000000af117f4efe7f9f7cb3302b51eff80e56e1d13fd9656875e662a1312211f44853d60dd965394c7818699174d5fc76d2e355a72e3c9b66a933ed65961892f04dc000"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r14, r14, r14, r14], &(0x7f00000003c0)=[{0x2, 0x2, 0xa}, {0x0, 0x1, 0x5, 0xf}, {0x1, 0x4, 0x8, 0x9}, {0x7, 0x3, 0xb, 0xc}, {0x4, 0x5, 0xf, 0xc}, {0x0, 0x5, 0x7, 0x3}], 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='btrfs_setup_cluster\x00', r16, 0x0, 0xc}, 0x18) 16.358080932s ago: executing program 3 (id=978): r0 = socket$netlink(0x10, 0x3, 0xe) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="e80000001e0021002bbd7000000000000a000000d400b58006008a002d0000000800cb00ac1e00018b000500e9adc9872822064b2efa71bd0adca5d52929630cb19ee02e85f0780672ba002178c779e34571515733ddbf3ca46e30b5f9d2bd4ade79a7b622bc567d50d1f8fe0ab1d2b4b993e4b4f1fcd0338496dea375dccf0dd32a103c74001b78ed6066ec0c4bae2c812eb42a0a7df31a953cdb755546f91f496116990e8ea4ab24994bce9d373b3f5a1cc90071ae75f27512f2322537efc41dac4eb6e01ac3df47956dc0c851a8c2693a7cdd6e4814e8dee27378ddc1cc13d93c419a034fba8f"], 0xe8}, 0x1, 0x0, 0x0, 0x8014}, 0x20008005) socket$netlink(0x10, 0x3, 0xe) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="e80000001e0021002bbd7000000000000a000000d400b58006008a002d0000000800cb00ac1e00018b000500e9adc9872822064b2efa71bd0adca5d52929630cb19ee02e85f0780672ba002178c779e34571515733ddbf3ca46e30b5f9d2bd4ade79a7b622bc567d50d1f8fe0ab1d2b4b993e4b4f1fcd0338496dea375dccf0dd32a103c74001b78ed6066ec0c4bae2c812eb42a0a7df31a953cdb755546f91f496116990e8ea4ab24994bce9d373b3f5a1cc90071ae75f27512f2322537efc41dac4eb6e01ac3df47956dc0c851a8c2693a7cdd6e4814e8dee27378ddc1cc13d93c419a034fba8f"], 0xe8}, 0x1, 0x0, 0x0, 0x8014}, 0x20008005) (async) 15.879337316s ago: executing program 1 (id=988): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x40, 0x8000, 0x7ff, 0xffffffff, {{0x18, 0x4, 0x0, 0x5, 0x60, 0x64, 0x0, 0x7f, 0x4, 0x0, @loopback, @empty, {[@noop, @timestamp_prespec={0x44, 0x44, 0x55, 0x3, 0x1, [{@empty, 0x6}, {@loopback, 0x4}, {@private=0xa010101, 0x401}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xc}, {@multicast2, 0x3}, {@broadcast, 0x5}, {@local, 0x2}]}, @ssrr={0x89, 0x7, 0x42, [@private=0xa010100]}]}}}}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r0, 0x1, 0x40, 0x0, 0xffffffe8, {{0x1f, 0x4, 0x1, 0x9, 0x7c, 0x66, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @private=0xa010101, {[@cipso={0x86, 0x2e, 0x2, [{0x7, 0xa, "d804d0fc78448222"}, {0x5, 0x5, '+uS'}, {0x3, 0x12, "444ae15bd608338dbdbe240951d1769b"}, {0x5, 0x7, "35f6b5bfb4"}]}, @cipso={0x86, 0x26, 0x2, [{0x1, 0xf, "525bba72b29398682bd41f574f"}, {0x5, 0x3, "85"}, {0x5, 0xe, "b3ef4d7b622b22d00efd6922"}]}, @timestamp_prespec={0x44, 0xc, 0x10, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @timestamp={0x44, 0x8, 0xa6, 0x0, 0x7, [0x3]}]}}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xfffb, 0x1}, 0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0xc, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r5, 0x0, 0x0, 0x2120, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYBLOB="2ce7fb58c43f9cb611b427f63ffded94e8ecbe4ee8ef6b844d67a7ee30994ca49db2a683f89894bd5d0cce4f185879fafd6b45941a3256354237", @ANYRESOCT=r0], &(0x7f0000003ff6)='GPL\x00', 0xd, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r0, @sk_msg}, 0x94) 15.702061679s ago: executing program 1 (id=989): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'pimreg0\x00', 0x4400}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, &(0x7f0000000c00)={'nr0\x00'}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'lo\x00', {0x2, 0x0, @multicast2}}) 14.902011143s ago: executing program 1 (id=990): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) pread64(r0, &(0x7f0000000b40)=""/4096, 0x1000, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000ffffffff00000000000000000000000105000000200000beac2c9fac007c4f386f5000000000000000000a020000000000"], 0x0, 0x4e}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x401, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x24004800) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e000007000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES64=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000f3f6f57500"/28], 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r12}, 0x14) sendmmsg$inet6(r10, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001f40)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000400005a6e83d400000000bb", @ANYRES32=r12], 0x28}}], 0x1, 0x4000005) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r9, 0x1, 0x0, 0x40000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x51}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000d0660cb0ac2324055cc2387db31eabd1f32d34ff3b5daa1ad1e6cb9696cff9c40d53530af49fc0a627de0321ffb02945ab34ffcf6f42e20f93caa6b1", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000008a000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 14.900339643s ago: executing program 1 (id=991): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket(0x28, 0x1, 0x0) recvmmsg$unix(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x8000000}], 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={r5, 0x2}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={r5, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x16}, 0x100}, @in6={0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}]}, &(0x7f0000000340)=0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYBLOB="72841454068a6d29d5703163bf14a0b11d26c6fddde7c336599d83a7b9c75ba2fece6853e3997f0f1b2d92b552afde0d54d75dda95eaabe4060c12df2d2e9f583ba87c45016d5578c9772fa840c26b5b993b5ed0fb7acf8b41eba11af5cbd1111cac8429acb4460a292e770d0683e78ce19fdf51bf5289ec09ed1216fd7104fb748090feeab7c0dd5729a31fd9f6676cd984afd17594f4c2ee492b3b0e84c63b8380c582770334eb0a192a63fa012582657f0454d18a816a6f5503d7dea296a1652e73dfebd91279d2", @ANYRESDEC=r7, @ANYRESHEX=r8], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x0) 14.897659905s ago: executing program 1 (id=992): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000140)={{0x2, 0x4e21, @multicast1}, {0x1, @local}, 0x8, {0x2, 0x4e21, @rand_addr=0x64010102}, 'syzkaller1\x00'}) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x90, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x62440}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg\x00'}, {0x14, 0x35, 'pim6reg1\x00'}, {0x14, 0x35, 'veth0\x00'}, {0x14, 0x35, 'vlan1\x00'}]}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x90}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r4 = socket(0x21, 0x2, 0x2) getsockopt$bt_BT_SECURITY(r4, 0x110, 0x6, 0x0, 0x20000000) connect$llc(r1, &(0x7f0000000040)={0x1a, 0x103, 0x36, 0x9, 0x3, 0x5, @remote}, 0x10) connect$llc(r1, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x24000845}, 0x20048911) socket$unix(0x1, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8004) 14.896785082s ago: executing program 1 (id=993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x12) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}, "01"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 5.095332327s ago: executing program 32 (id=959): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x24, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@rand_addr=0x64010102, 0x0, 0x7079, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x3, 0x7}, 0x10000000}}, 0xb8}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_emit_ethernet(0x2e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08004500002000000000002f9078000000b73140383b2ae5a6f6a7b7d6d26900e0000001320088be000c907801000000"], 0x0) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2044}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f0000001a00)=""/4088, 0xff8}, {&(0x7f0000006080)=""/4064, 0xfe0}, {&(0x7f00000004c0)=""/106, 0x6a}], 0x4}, 0x3}], 0x3, 0x40010020, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}]}, 0x3c}}, 0x840) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=@gettfilter={0x3c, 0x2e, 0xa00, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xa}, {0xfff1, 0x9}, {0x5, 0x2}}, [{0x8, 0xb, 0xf85c}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48d0}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00T\x00'/20, @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) 5.075199609s ago: executing program 33 (id=966): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2.047409885s ago: executing program 34 (id=973): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="60000000070a010100000000000000000a0000090900020073797a300000000940000000010c000320000000000000000308000940000000020c00034000000000000000010900010073797a3100000000"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40408c0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000680)=0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x3f, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x20000054) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x6c}, 0x1, 0x0, 0x0, 0x11}, 0x40818) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r12, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x2c, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40011}, 0x20000800) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000f000000cc0002000600000005000000", @ANYRES32, @ANYBLOB="000000001f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r14}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x728a, r14}, 0x38) unshare(0x180) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000800c5f1d8d4843be74d00000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)={@map=r14, r15, 0x32, 0x0, 0x0, @void, @value=r15}, 0x20) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fbffffff000000009dffffff18110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000004120000ffffffffb7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000010400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r14, @ANYRESOCT=r8, @ANYRES32=r14, @ANYBLOB="0000000000000000bf91000000000000b70200000000000085000000840000d7000000000000009500000000000000af117f4efe7f9f7cb3302b51eff80e56e1d13fd9656875e662a1312211f44853d60dd965394c7818699174d5fc76d2e355a72e3c9b66a933ed65961892f04dc000"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r14, r14, r14, r14], &(0x7f00000003c0)=[{0x2, 0x2, 0xa}, {0x0, 0x1, 0x5, 0xf}, {0x1, 0x4, 0x8, 0x9}, {0x7, 0x3, 0xb, 0xc}, {0x4, 0x5, 0xf, 0xc}, {0x0, 0x5, 0x7, 0x3}], 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='btrfs_setup_cluster\x00', r16, 0x0, 0xc}, 0x18) 1.023466543s ago: executing program 35 (id=978): r0 = socket$netlink(0x10, 0x3, 0xe) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="e80000001e0021002bbd7000000000000a000000d400b58006008a002d0000000800cb00ac1e00018b000500e9adc9872822064b2efa71bd0adca5d52929630cb19ee02e85f0780672ba002178c779e34571515733ddbf3ca46e30b5f9d2bd4ade79a7b622bc567d50d1f8fe0ab1d2b4b993e4b4f1fcd0338496dea375dccf0dd32a103c74001b78ed6066ec0c4bae2c812eb42a0a7df31a953cdb755546f91f496116990e8ea4ab24994bce9d373b3f5a1cc90071ae75f27512f2322537efc41dac4eb6e01ac3df47956dc0c851a8c2693a7cdd6e4814e8dee27378ddc1cc13d93c419a034fba8f"], 0xe8}, 0x1, 0x0, 0x0, 0x8014}, 0x20008005) socket$netlink(0x10, 0x3, 0xe) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="e80000001e0021002bbd7000000000000a000000d400b58006008a002d0000000800cb00ac1e00018b000500e9adc9872822064b2efa71bd0adca5d52929630cb19ee02e85f0780672ba002178c779e34571515733ddbf3ca46e30b5f9d2bd4ade79a7b622bc567d50d1f8fe0ab1d2b4b993e4b4f1fcd0338496dea375dccf0dd32a103c74001b78ed6066ec0c4bae2c812eb42a0a7df31a953cdb755546f91f496116990e8ea4ab24994bce9d373b3f5a1cc90071ae75f27512f2322537efc41dac4eb6e01ac3df47956dc0c851a8c2693a7cdd6e4814e8dee27378ddc1cc13d93c419a034fba8f"], 0xe8}, 0x1, 0x0, 0x0, 0x8014}, 0x20008005) (async) 0s ago: executing program 36 (id=993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x12) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}, "01"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. [ 68.496426][ T5854] cgroup: Unknown subsys name 'net' [ 68.640574][ T5854] cgroup: Unknown subsys name 'cpuset' [ 68.649383][ T5854] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.043976][ T5854] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.480942][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.487392][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.913944][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.922433][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.932723][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.941617][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.950207][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.959153][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.968412][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.975807][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.985513][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.993600][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.001375][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.010140][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.027396][ T5186] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.035645][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.035722][ T5186] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.146655][ T5870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.155847][ T5870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.164177][ T5870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.172906][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.181084][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.238309][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.247098][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.255035][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.263654][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.271919][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.710469][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 74.779644][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 74.995024][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 75.026898][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.034429][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.042379][ T5868] bridge_slave_0: entered allmulticast mode [ 75.050196][ T5868] bridge_slave_0: entered promiscuous mode [ 75.064947][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 75.126143][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.134215][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.142141][ T5868] bridge_slave_1: entered allmulticast mode [ 75.150042][ T5868] bridge_slave_1: entered promiscuous mode [ 75.175546][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.185811][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.193824][ T5864] bridge_slave_0: entered allmulticast mode [ 75.205717][ T5864] bridge_slave_0: entered promiscuous mode [ 75.260592][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.268935][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.276101][ T5864] bridge_slave_1: entered allmulticast mode [ 75.283461][ T5864] bridge_slave_1: entered promiscuous mode [ 75.339355][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.349057][ T5881] chnl_net:caif_netlink_parms(): no params data found [ 75.385237][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.428916][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.442217][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.539649][ T5868] team0: Port device team_slave_0 added [ 75.545916][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.553249][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.560796][ T5879] bridge_slave_0: entered allmulticast mode [ 75.568743][ T5879] bridge_slave_0: entered promiscuous mode [ 75.575729][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.582888][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.590126][ T5872] bridge_slave_0: entered allmulticast mode [ 75.597259][ T5872] bridge_slave_0: entered promiscuous mode [ 75.621940][ T5868] team0: Port device team_slave_1 added [ 75.643461][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.650730][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.658618][ T5879] bridge_slave_1: entered allmulticast mode [ 75.665624][ T5879] bridge_slave_1: entered promiscuous mode [ 75.673761][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.681236][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.689138][ T5872] bridge_slave_1: entered allmulticast mode [ 75.696042][ T5872] bridge_slave_1: entered promiscuous mode [ 75.705181][ T5864] team0: Port device team_slave_0 added [ 75.731316][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.738569][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.765099][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.804301][ T5864] team0: Port device team_slave_1 added [ 75.829123][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.836092][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.862428][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.893019][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.951940][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.963961][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.975444][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.985992][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.993185][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.019300][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.043947][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.051749][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.059639][ T5881] bridge_slave_0: entered allmulticast mode [ 76.066612][ T5881] bridge_slave_0: entered promiscuous mode [ 76.097823][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.104962][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.133047][ T5870] Bluetooth: hci0: command tx timeout [ 76.135218][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.138800][ T5870] Bluetooth: hci1: command tx timeout [ 76.174737][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.182206][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.189691][ T5881] bridge_slave_1: entered allmulticast mode [ 76.196629][ T5881] bridge_slave_1: entered promiscuous mode [ 76.203130][ T5867] Bluetooth: hci2: command tx timeout [ 76.242073][ T5872] team0: Port device team_slave_0 added [ 76.277617][ T5867] Bluetooth: hci3: command tx timeout [ 76.281184][ T5879] team0: Port device team_slave_0 added [ 76.291062][ T5872] team0: Port device team_slave_1 added [ 76.304259][ T5868] hsr_slave_0: entered promiscuous mode [ 76.310599][ T5868] hsr_slave_1: entered promiscuous mode [ 76.320408][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.331212][ T5879] team0: Port device team_slave_1 added [ 76.357625][ T5867] Bluetooth: hci4: command tx timeout [ 76.367690][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.438381][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.445448][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.472425][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.500360][ T5864] hsr_slave_0: entered promiscuous mode [ 76.506588][ T5864] hsr_slave_1: entered promiscuous mode [ 76.512805][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 76.518703][ T5864] Cannot create hsr debugfs directory [ 76.537192][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.544199][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.570747][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.583015][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.590480][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.616524][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.656133][ T5881] team0: Port device team_slave_0 added [ 76.662953][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.670378][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.696386][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.741531][ T5881] team0: Port device team_slave_1 added [ 76.836405][ T5879] hsr_slave_0: entered promiscuous mode [ 76.843634][ T5879] hsr_slave_1: entered promiscuous mode [ 76.850074][ T5879] debugfs: 'hsr0' already exists in 'hsr' [ 76.855813][ T5879] Cannot create hsr debugfs directory [ 76.906036][ T5872] hsr_slave_0: entered promiscuous mode [ 76.912417][ T5872] hsr_slave_1: entered promiscuous mode [ 76.919001][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 76.924730][ T5872] Cannot create hsr debugfs directory [ 76.981099][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.988743][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.014847][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.068508][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.075478][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.102415][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.321564][ T5881] hsr_slave_0: entered promiscuous mode [ 77.328164][ T5881] hsr_slave_1: entered promiscuous mode [ 77.334145][ T5881] debugfs: 'hsr0' already exists in 'hsr' [ 77.340551][ T5881] Cannot create hsr debugfs directory [ 77.530335][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.542537][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.575721][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.606858][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.680021][ T5868] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.693862][ T5868] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.704233][ T5868] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.732577][ T5868] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.824861][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.836667][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.853874][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.865433][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.983714][ T5879] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.999818][ T5879] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.012782][ T5879] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.022821][ T5879] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.039061][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.115545][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.181433][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.188759][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.201898][ T5867] Bluetooth: hci1: command tx timeout [ 78.202154][ T5870] Bluetooth: hci0: command tx timeout [ 78.222811][ T5881] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.234049][ T5881] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.253514][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.260701][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.276754][ T5881] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.284426][ T5870] Bluetooth: hci2: command tx timeout [ 78.318740][ T5881] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.339287][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.358484][ T5870] Bluetooth: hci3: command tx timeout [ 78.397083][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.437803][ T5870] Bluetooth: hci4: command tx timeout [ 78.441541][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.450518][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.482655][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.490458][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.518375][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.601975][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.654913][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.691176][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.705506][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.712698][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.739068][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.764514][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.771705][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.801415][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.808932][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.851837][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.859047][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.912090][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.955447][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.962662][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.004265][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.011529][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.066904][ T5879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.162166][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.338762][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.417182][ T5864] veth0_vlan: entered promiscuous mode [ 79.508101][ T5864] veth1_vlan: entered promiscuous mode [ 79.589496][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.615954][ T5868] veth0_vlan: entered promiscuous mode [ 79.661219][ T5864] veth0_macvtap: entered promiscuous mode [ 79.694898][ T5868] veth1_vlan: entered promiscuous mode [ 79.711907][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.733857][ T5864] veth1_macvtap: entered promiscuous mode [ 79.766084][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.840379][ T5868] veth0_macvtap: entered promiscuous mode [ 79.862275][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.896619][ T5868] veth1_macvtap: entered promiscuous mode [ 79.920928][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.020621][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.040160][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.053166][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.062165][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.095390][ T5872] veth0_vlan: entered promiscuous mode [ 80.102906][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.114635][ T5881] veth0_vlan: entered promiscuous mode [ 80.133889][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.178516][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.206489][ T3495] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.215488][ T3495] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.241896][ T5881] veth1_vlan: entered promiscuous mode [ 80.250364][ T3495] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.278200][ T5870] Bluetooth: hci0: command tx timeout [ 80.283649][ T5870] Bluetooth: hci1: command tx timeout [ 80.288353][ T5872] veth1_vlan: entered promiscuous mode [ 80.314241][ T5879] veth0_vlan: entered promiscuous mode [ 80.319672][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.328550][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.357615][ T5870] Bluetooth: hci2: command tx timeout [ 80.402013][ T5879] veth1_vlan: entered promiscuous mode [ 80.419717][ T5872] veth0_macvtap: entered promiscuous mode [ 80.430582][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.437705][ T5870] Bluetooth: hci3: command tx timeout [ 80.445925][ T5872] veth1_macvtap: entered promiscuous mode [ 80.457807][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.516920][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.524474][ T5870] Bluetooth: hci4: command tx timeout [ 80.532398][ T5881] veth0_macvtap: entered promiscuous mode [ 80.561018][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.580433][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.583299][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.600912][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.652063][ T5881] veth1_macvtap: entered promiscuous mode [ 80.688287][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.702954][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.711975][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.718615][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.735082][ T5879] veth0_macvtap: entered promiscuous mode [ 80.756821][ T5980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.762193][ T5879] veth1_macvtap: entered promiscuous mode [ 80.774870][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.786256][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.843402][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.870874][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.933209][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.960477][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.029842][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.041891][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.057731][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.068375][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.110571][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.124715][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.180974][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.195779][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.196416][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.218841][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.228005][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.276859][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.433501][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.456468][ T5995] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8'. [ 81.461954][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.529611][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.562262][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.646682][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.668313][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.724564][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.744908][ T6002] netlink: 'syz.1.9': attribute type 1 has an invalid length. [ 81.767240][ T6002] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9'. [ 81.767501][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.078197][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 82.357592][ T5870] Bluetooth: hci0: command tx timeout [ 82.359649][ T5867] Bluetooth: hci1: command tx timeout [ 82.409370][ T6016] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET) [ 82.438654][ T5867] Bluetooth: hci2: command tx timeout [ 82.519265][ T5867] Bluetooth: hci3: command tx timeout [ 82.599271][ T5867] Bluetooth: hci4: command tx timeout [ 82.640176][ T6030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16'. [ 82.699484][ T6030] netlink: 'syz.3.16': attribute type 7 has an invalid length. [ 82.736929][ T6032] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.754819][ T6030] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16'. [ 83.246548][ T6058] Zero length message leads to an empty skb [ 83.270800][ T6058] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd [ 83.509474][ T6071] Unsupported ieee802154 address type: 0 [ 83.554703][ T6071] netlink: 'syz.4.28': attribute type 2 has an invalid length. [ 83.744799][ T6077] tipc: Started in network mode [ 83.752176][ T6077] tipc: Node identity 427f181d3e67, cluster identity 4711 [ 83.763606][ T6077] tipc: Enabled bearer , priority 0 [ 83.774665][ T6077] syzkaller0: entered promiscuous mode [ 83.782018][ T6077] syzkaller0: entered allmulticast mode [ 83.852323][ T6077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.31'. [ 83.871396][ T6077] tipc: Resetting bearer [ 83.905653][ T6076] tipc: Resetting bearer [ 83.938488][ T6076] tipc: Disabling bearer [ 83.996749][ T6085] veth3: entered allmulticast mode [ 84.209769][ T6063] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 84.438806][ T6109] openvswitch: netlink: VXLAN extension 47 out of range max 1 [ 84.642271][ T6104] macvtap1: entered allmulticast mode [ 84.653588][ T6104] veth0_macvtap: entered allmulticast mode [ 84.670493][ T6101] syzkaller1: entered promiscuous mode [ 84.678300][ T5867] Bluetooth: hci4: command tx timeout [ 84.690794][ T6101] syzkaller1: entered allmulticast mode [ 85.062614][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'. [ 85.087491][ T6135] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 85.115210][ T6135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.140282][ T6140] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 85.145782][ T6137] tipc: Started in network mode [ 85.181188][ T6137] tipc: Node identity eec5e5af3315, cluster identity 4711 [ 85.189305][ T6137] tipc: Enabled bearer , priority 0 [ 85.209223][ T6146] syzkaller0: entered promiscuous mode [ 85.214908][ T6146] syzkaller0: entered allmulticast mode [ 85.216549][ T6135] netlink: 16 bytes leftover after parsing attributes in process `syz.1.45'. [ 85.350233][ T6137] tipc: Resetting bearer [ 85.401763][ T5867] Bluetooth: hci0: command 0x080f tx timeout [ 85.406135][ T6136] tipc: Resetting bearer [ 85.493866][ T6136] tipc: Disabling bearer [ 85.521923][ T6156] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 85.783418][ T6170] netlink: 'syz.1.56': attribute type 22 has an invalid length. [ 85.795700][ T6173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.57'. [ 85.845780][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 85.941683][ T6170] netlink: 'syz.1.56': attribute type 22 has an invalid length. [ 86.123477][ T3470] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.144089][ T3470] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.185923][ T3470] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.229553][ T3470] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.538702][ T6218] __nla_validate_parse: 3 callbacks suppressed [ 86.538720][ T6218] netlink: 1 bytes leftover after parsing attributes in process `syz.2.67'. [ 86.595967][ T6222] netlink: 11 bytes leftover after parsing attributes in process `syz.3.68'. [ 86.609695][ T6225] netlink: 'syz.1.70': attribute type 1 has an invalid length. [ 86.670336][ T6231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.814802][ T6237] netlink: 'syz.3.71': attribute type 9 has an invalid length. [ 86.844383][ T1209] cfg80211: failed to load regulatory.db [ 87.070404][ T6251] netlink: 'syz.2.75': attribute type 1 has an invalid length. [ 87.121428][ T6251] netlink: 'syz.2.75': attribute type 4 has an invalid length. [ 87.168180][ T6251] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.75'. [ 87.433165][ T1209] IPVS: starting estimator thread 0... [ 87.485876][ T6267] netlink: 16 bytes leftover after parsing attributes in process `syz.1.79'. [ 87.546697][ T6272] IPVS: using max 39 ests per chain, 93600 per kthread [ 87.602673][ T6283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.83'. [ 87.910420][ T6300] IPv6: NLM_F_REPLACE set, but no existing node found! [ 87.932032][ T6297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.87'. [ 88.079045][ T6305] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.305952][ T6317] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 88.714180][ T6345] Unsupported ieee802154 address type: 0 [ 88.804633][ T6351] netlink: 'syz.2.106': attribute type 2 has an invalid length. [ 88.833723][ T6351] netlink: 'syz.2.106': attribute type 8 has an invalid length. [ 88.874752][ T6351] netlink: 132 bytes leftover after parsing attributes in process `syz.2.106'. [ 88.963308][ T6354] pimreg3: entered allmulticast mode [ 89.044550][ T6363] bridge_slave_0: left allmulticast mode [ 89.098208][ T6363] bridge_slave_0: left promiscuous mode [ 89.135446][ T6363] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.153610][ T6363] bridge_slave_1: left allmulticast mode [ 89.164261][ T6363] bridge_slave_1: left promiscuous mode [ 89.184366][ T6363] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.225231][ T6363] bond0: (slave bond_slave_0): Releasing backup interface [ 89.281377][ T6363] bond0: (slave bond_slave_1): Releasing backup interface [ 89.319617][ T6377] netlink: 44 bytes leftover after parsing attributes in process `syz.1.111'. [ 89.339588][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'. [ 89.345128][ T6363] team0: Port device team_slave_0 removed [ 89.363974][ T6363] team0: Port device team_slave_1 removed [ 89.375052][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.384892][ T6363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.395460][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.415630][ T6363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.794580][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'. [ 89.827660][ T6402] bridge_slave_1: default FDB implementation only supports local addresses [ 89.842019][ T6388] syzkaller1: entered promiscuous mode [ 89.848406][ T6388] syzkaller1: entered allmulticast mode [ 90.138175][ T6410] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 90.175757][ T6410] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 90.259651][ T6421] netlink: 'syz.0.120': attribute type 4 has an invalid length. [ 90.314486][ T6427] netlink: 'syz.0.120': attribute type 4 has an invalid length. [ 90.360320][ T6426] nbd: illegal input index -8454144 [ 91.509324][ T6476] vlan2: entered promiscuous mode [ 91.534850][ T6476] bridge0: entered promiscuous mode [ 91.742933][ T6503] __nla_validate_parse: 13 callbacks suppressed [ 91.742951][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'. [ 91.981319][ T6513] netlink: 'syz.3.151': attribute type 83 has an invalid length. [ 92.827105][ T6536] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 92.877029][ T6536] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.886194][ T6536] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.055595][ T6554] netlink: 96 bytes leftover after parsing attributes in process `syz.4.163'. [ 93.080460][ T6554] 8021q: VLANs not supported on gre0 [ 93.113684][ T6552] lo: entered allmulticast mode [ 93.330930][ T6575] warning: `syz.4.166' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.503923][ T6580] netlink: 'syz.4.169': attribute type 1 has an invalid length. [ 93.708703][ T6591] netlink: 'syz.3.172': attribute type 4 has an invalid length. [ 94.146444][ T6608] netlink: 'syz.4.176': attribute type 29 has an invalid length. [ 94.375585][ T6622] syz.1.180: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 94.444829][ T6622] CPU: 0 UID: 0 PID: 6622 Comm: syz.1.180 Not tainted syzkaller #0 PREEMPT(full) [ 94.444854][ T6622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 94.444872][ T6622] Call Trace: [ 94.444879][ T6622] [ 94.444887][ T6622] dump_stack_lvl+0x189/0x250 [ 94.444916][ T6622] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 94.444938][ T6622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.444957][ T6622] ? __pfx__printk+0x10/0x10 [ 94.444980][ T6622] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 94.444999][ T6622] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 94.445026][ T6622] warn_alloc+0x214/0x310 [ 94.445056][ T6622] ? __pfx_warn_alloc+0x10/0x10 [ 94.445088][ T6622] ? __get_vm_area_node+0x28f/0x300 [ 94.445110][ T6622] ? xskq_create+0xbf/0x170 [ 94.445130][ T6622] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 94.445184][ T6622] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 94.445207][ T6622] ? xskq_create+0x56/0x170 [ 94.445226][ T6622] ? __kasan_kmalloc+0x93/0xb0 [ 94.445251][ T6622] vmalloc_user_noprof+0xad/0xf0 [ 94.445273][ T6622] ? xskq_create+0xbf/0x170 [ 94.445290][ T6622] xskq_create+0xbf/0x170 [ 94.445310][ T6622] xsk_init_queue+0xb0/0x110 [ 94.445339][ T6622] xsk_setsockopt+0x4dc/0x8d0 [ 94.445365][ T6622] ? __pfx_xsk_setsockopt+0x10/0x10 [ 94.445387][ T6622] ? __pfx_aa_sk_perm+0x10/0x10 [ 94.445414][ T6622] ? aa_sock_opt_perm+0xff/0x1b0 [ 94.445435][ T6622] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 94.445452][ T6622] ? __pfx_xsk_setsockopt+0x10/0x10 [ 94.445476][ T6622] do_sock_setsockopt+0x179/0x1b0 [ 94.445501][ T6622] __x64_sys_setsockopt+0x13f/0x1b0 [ 94.445526][ T6622] do_syscall_64+0xfa/0x3b0 [ 94.445544][ T6622] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.445560][ T6622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.445576][ T6622] ? clear_bhb_loop+0x60/0xb0 [ 94.445596][ T6622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.445613][ T6622] RIP: 0033:0x7f60e518eec9 [ 94.445634][ T6622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.445647][ T6622] RSP: 002b:00007f60e60bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 94.445665][ T6622] RAX: ffffffffffffffda RBX: 00007f60e53e5fa0 RCX: 00007f60e518eec9 [ 94.445677][ T6622] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 94.445687][ T6622] RBP: 00007f60e5211f91 R08: 0000000000000004 R09: 0000000000000000 [ 94.445698][ T6622] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 94.445708][ T6622] R13: 00007f60e53e6038 R14: 00007f60e53e5fa0 R15: 00007ffc25fdf5a8 [ 94.445737][ T6622] [ 94.445748][ T6622] Mem-Info: [ 94.724943][ T6622] active_anon:8660 inactive_anon:0 isolated_anon:0 [ 94.724943][ T6622] active_file:2628 inactive_file:39874 isolated_file:0 [ 94.724943][ T6622] unevictable:768 dirty:406 writeback:0 [ 94.724943][ T6622] slab_reclaimable:10738 slab_unreclaimable:96376 [ 94.724943][ T6622] mapped:35045 shmem:4206 pagetables:1137 [ 94.724943][ T6622] sec_pagetables:0 bounce:0 [ 94.724943][ T6622] kernel_misc_reclaimable:0 [ 94.724943][ T6622] free:1316187 free_pcp:20711 free_cma:0 [ 94.771951][ T6622] Node 0 active_anon:34640kB inactive_anon:0kB active_file:10512kB inactive_file:159292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140180kB dirty:1608kB writeback:0kB shmem:15288kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12084kB pagetables:4404kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 94.846727][ T6622] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 94.890030][ T6622] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 94.966788][ T6622] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 94.987662][ T6622] Node 0 DMA32 free:1328948kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34584kB inactive_anon:0kB active_file:10512kB inactive_file:157712kB unevictable:1536kB writepending:1604kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:62440kB local_pcp:24832kB free_cma:0kB [ 95.119266][ T6622] lowmem_reserve[]: 0 0 1 1 1 [ 95.131280][ T6622] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 95.237037][ T6622] lowmem_reserve[]: 0 0 0 0 0 [ 95.253035][ T6622] Node 1 Normal free:3885988kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17088kB local_pcp:8032kB free_cma:0kB [ 95.320166][ T6622] lowmem_reserve[]: 0 0 0 0 0 [ 95.331603][ T6622] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 95.392373][ T6622] Node 0 DMA32: 1*4kB (U) 1*8kB (E) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (M) 1*512kB (U) 2*1024kB (ME) 1*2048kB (U) 313*4096kB (M) = 1287148kB [ 95.461473][ T6622] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 95.565377][ T6622] Node 1 Normal: 197*4kB (U) 60*8kB (UME) 55*16kB (UME) 70*32kB (UME) 24*64kB (UME) 5*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3885988kB [ 95.589858][ T6622] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.601817][ T6622] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 95.613249][ T6622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.625846][ T6622] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 95.636869][ T6622] 43899 total pagecache pages [ 95.653962][ T6622] 0 pages in swap cache [ 95.658710][ T6622] Free swap = 124996kB [ 95.662987][ T6622] Total swap = 124996kB [ 95.671935][ T6622] 2097051 pages RAM [ 95.675858][ T6622] 0 pages HighMem/MovableOnly [ 95.681020][ T6622] 425672 pages reserved [ 95.685330][ T6622] 0 pages cma reserved [ 95.792568][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 96.222283][ T6668] bridge1: entered promiscuous mode [ 96.243153][ T6670] netlink: 696 bytes leftover after parsing attributes in process `syz.3.192'. [ 96.253051][ T6668] bridge1: entered allmulticast mode [ 96.273286][ T6670] trusted_key: syz.3.192 sent an empty control message without MSG_MORE. [ 96.378674][ T6670] netlink: 'syz.3.192': attribute type 24 has an invalid length. [ 96.503381][ T6680] €Â: renamed from dummy0 (while UP) [ 96.520221][ T6673] netlink: 156 bytes leftover after parsing attributes in process `syz.0.194'. [ 96.754430][ T6691] netlink: 'syz.3.197': attribute type 3 has an invalid length. [ 96.789884][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.196'. [ 97.160089][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.202'. [ 97.174452][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 97.238385][ T6710] netlink: 'syz.1.202': attribute type 11 has an invalid length. [ 97.298665][ T6699] netlink: 'syz.4.200': attribute type 29 has an invalid length. [ 97.327658][ T6713] netlink: 'syz.4.200': attribute type 29 has an invalid length. [ 97.348011][ T6703] netlink: 'syz.4.200': attribute type 29 has an invalid length. [ 97.492791][ T6720] netlink: 'syz.1.204': attribute type 3 has an invalid length. [ 97.820626][ T6736] netlink: 'syz.4.209': attribute type 10 has an invalid length. [ 97.842617][ T6736] veth0_vlan: entered allmulticast mode [ 97.936190][ T6736] veth0_vlan: left promiscuous mode [ 97.984000][ T6736] veth0_vlan: entered promiscuous mode [ 98.007352][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'. [ 98.031794][ T6736] team0: Device veth0_vlan failed to register rx_handler [ 98.366462][ T6751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.212'. [ 98.376059][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.212'. [ 98.638340][ T6767] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 98.656664][ T6762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.709924][ T6770] netlink: 72 bytes leftover after parsing attributes in process `syz.4.218'. [ 98.739881][ T6765] tipc: Enabled bearer , priority 0 [ 98.783617][ T6765] syzkaller0: entered promiscuous mode [ 98.822384][ T6765] syzkaller0: entered allmulticast mode [ 98.924737][ T6765] Bluetooth: MGMT ver 1.23 [ 99.071986][ T6765] tipc: Resetting bearer [ 99.098473][ T6763] tipc: Resetting bearer [ 99.126180][ T6763] tipc: Disabling bearer [ 100.413102][ T6834] netlink: 'syz.0.238': attribute type 10 has an invalid length. [ 100.535642][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.239'. [ 100.571283][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.239'. [ 100.629144][ T6845] netlink: 'syz.1.240': attribute type 2 has an invalid length. [ 100.671329][ T6845] netlink: 'syz.1.240': attribute type 1 has an invalid length. [ 101.306888][ T6872] nbd: must specify a size in bytes for the device [ 101.350720][ T6873] netlink: 'syz.1.249': attribute type 1 has an invalid length. [ 101.385561][ T6873] netlink: 224 bytes leftover after parsing attributes in process `syz.1.249'. [ 101.422809][ T6876] pim6reg: entered allmulticast mode [ 102.118676][ T6899] __nla_validate_parse: 1 callbacks suppressed [ 102.118692][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'. [ 102.451996][ T6908] netlink: 'syz.0.258': attribute type 1 has an invalid length. [ 102.467590][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.259'. [ 102.505763][ T6908] netlink: 'syz.0.258': attribute type 10 has an invalid length. [ 102.566359][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.259'. [ 102.575917][ T6908] netlink: 'syz.0.258': attribute type 4 has an invalid length. [ 102.614127][ T6908] netlink: 136 bytes leftover after parsing attributes in process `syz.0.258'. [ 102.616484][ T6922] netlink: 'syz.0.258': attribute type 1 has an invalid length. [ 102.655897][ T6923] Unsupported ieee802154 address type: 0 [ 102.921992][ T6908] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 102.949204][ T6939] netlink: 252 bytes leftover after parsing attributes in process `syz.4.263'. [ 103.007663][ T6917] veth5: entered promiscuous mode [ 103.026200][ T6917] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 103.047712][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 103.260725][ T6947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.268037][ T6947] IPv6: NLM_F_CREATE should be set when creating new route [ 103.289458][ T6948] 8021q: VLANs not supported on sit0 [ 103.353025][ T6951] syzkaller0: entered promiscuous mode [ 103.368640][ T6951] syzkaller0: entered allmulticast mode [ 103.409820][ T6951] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 103.571413][ T6908] tipc: Enabling of bearer rejected, failed to enable media [ 103.953887][ T6971] netlink: 'syz.3.272': attribute type 33 has an invalid length. [ 104.456600][ T7000] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 104.503061][ T7000] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 104.538708][ T7004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.278'. [ 104.570975][ T7000] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 104.614779][ T7009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.283'. [ 104.655883][ T7016] netlink: 'syz.1.278': attribute type 21 has an invalid length. [ 104.737317][ T7016] netlink: 128 bytes leftover after parsing attributes in process `syz.1.278'. [ 104.814371][ T7024] netlink: 'syz.1.278': attribute type 21 has an invalid length. [ 104.877411][ T7016] netlink: 'syz.1.278': attribute type 4 has an invalid length. [ 104.928415][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.286'. [ 104.939246][ T7016] netlink: 'syz.1.278': attribute type 5 has an invalid length. [ 104.949981][ T7024] netlink: 'syz.1.278': attribute type 4 has an invalid length. [ 105.026574][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.172053][ T7031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.193787][ T7083] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 106.376720][ T7096] syz.0.306: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 106.427618][ T7096] CPU: 0 UID: 0 PID: 7096 Comm: syz.0.306 Not tainted syzkaller #0 PREEMPT(full) [ 106.427643][ T7096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 106.427654][ T7096] Call Trace: [ 106.427662][ T7096] [ 106.427670][ T7096] dump_stack_lvl+0x189/0x250 [ 106.427700][ T7096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.427722][ T7096] ? __pfx__printk+0x10/0x10 [ 106.427746][ T7096] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 106.427766][ T7096] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 106.427788][ T7096] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 106.427811][ T7096] warn_alloc+0x214/0x310 [ 106.427837][ T7096] ? stack_depot_save_flags+0x40/0x860 [ 106.427863][ T7096] ? __pfx_warn_alloc+0x10/0x10 [ 106.427889][ T7096] ? kasan_save_track+0x4f/0x80 [ 106.427910][ T7096] ? xskq_create+0x56/0x170 [ 106.427926][ T7096] ? xsk_init_queue+0xb0/0x110 [ 106.427940][ T7096] ? xsk_setsockopt+0x4dc/0x8d0 [ 106.427961][ T7096] ? do_sock_setsockopt+0x179/0x1b0 [ 106.427979][ T7096] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 106.427997][ T7096] ? do_syscall_64+0xfa/0x3b0 [ 106.428014][ T7096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.428040][ T7096] __vmalloc_node_range_noprof+0x125/0x12f0 [ 106.428096][ T7096] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 106.428120][ T7096] ? xskq_create+0x56/0x170 [ 106.428140][ T7096] ? __kasan_kmalloc+0x93/0xb0 [ 106.428165][ T7096] vmalloc_user_noprof+0xad/0xf0 [ 106.428188][ T7096] ? xskq_create+0xbf/0x170 [ 106.428214][ T7096] xskq_create+0xbf/0x170 [ 106.428236][ T7096] xsk_init_queue+0xb0/0x110 [ 106.428256][ T7096] xsk_setsockopt+0x4dc/0x8d0 [ 106.428285][ T7096] ? __pfx_xsk_setsockopt+0x10/0x10 [ 106.428310][ T7096] ? __pfx_aa_sk_perm+0x10/0x10 [ 106.428337][ T7096] ? aa_sock_opt_perm+0xff/0x1b0 [ 106.428356][ T7096] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 106.428372][ T7096] ? __pfx_xsk_setsockopt+0x10/0x10 [ 106.428396][ T7096] do_sock_setsockopt+0x179/0x1b0 [ 106.428419][ T7096] __x64_sys_setsockopt+0x13f/0x1b0 [ 106.428442][ T7096] do_syscall_64+0xfa/0x3b0 [ 106.428459][ T7096] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.428476][ T7096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.428493][ T7096] ? clear_bhb_loop+0x60/0xb0 [ 106.428513][ T7096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.428530][ T7096] RIP: 0033:0x7fd8e5f8eec9 [ 106.428546][ T7096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.428559][ T7096] RSP: 002b:00007fd8e6de2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 106.428578][ T7096] RAX: ffffffffffffffda RBX: 00007fd8e61e5fa0 RCX: 00007fd8e5f8eec9 [ 106.428591][ T7096] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 106.428602][ T7096] RBP: 00007fd8e6011f91 R08: 0000000000000004 R09: 0000000000000000 [ 106.428613][ T7096] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.428623][ T7096] R13: 00007fd8e61e6038 R14: 00007fd8e61e5fa0 R15: 00007fff9bbeeb38 [ 106.428653][ T7096] [ 106.428660][ T7096] Mem-Info: [ 106.799898][ T7096] active_anon:5916 inactive_anon:0 isolated_anon:0 [ 106.799898][ T7096] active_file:2884 inactive_file:39880 isolated_file:0 [ 106.799898][ T7096] unevictable:768 dirty:27 writeback:125 [ 106.799898][ T7096] slab_reclaimable:10694 slab_unreclaimable:96700 [ 106.799898][ T7096] mapped:29205 shmem:1357 pagetables:1470 [ 106.799898][ T7096] sec_pagetables:0 bounce:0 [ 106.799898][ T7096] kernel_misc_reclaimable:0 [ 106.799898][ T7096] free:1208620 free_pcp:36131 free_cma:0 [ 106.853325][ T7096] Node 0 active_anon:23664kB inactive_anon:0kB active_file:11536kB inactive_file:159316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116920kB dirty:108kB writeback:100kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11956kB pagetables:5736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 106.916888][ T7096] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 106.992304][ T7096] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.114750][ T7096] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 107.167520][ T7096] Node 0 DMA32 free:957852kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23396kB inactive_anon:0kB active_file:11536kB inactive_file:157744kB unevictable:1536kB writepending:64kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:121844kB local_pcp:63820kB free_cma:0kB [ 107.258770][ T7096] lowmem_reserve[]: 0 0 1 1 1 [ 107.309760][ T7096] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 107.329283][ T7132] __nla_validate_parse: 7 callbacks suppressed [ 107.329302][ T7132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.315'. [ 107.413369][ T7096] lowmem_reserve[]: 0 0 0 0 0 [ 107.432693][ T7096] Node 1 Normal free:3886244kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16832kB local_pcp:9088kB free_cma:0kB [ 107.483014][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 107.490667][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 107.502157][ T7132] netlink: 44 bytes leftover after parsing attributes in process `syz.3.315'. [ 107.547173][ T7096] lowmem_reserve[]: 0 0 0 0 0 [ 107.567740][ T7096] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 107.647220][ T7096] Node 0 DMA32: 1611*4kB (UM) 626*8kB (UE) 232*16kB (UM) 235*32kB (UM) 175*64kB (U) 152*128kB (UM) 93*256kB (U) 54*512kB (UM) 20*1024kB (UE) 3*2048kB (UM) 208*4096kB (M) = 983388kB [ 107.697388][ T7096] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 107.762593][ T7096] Node 1 Normal: 197*4kB (U) 60*8kB (UME) 55*16kB (UME) 72*32kB (UME) 27*64kB (UME) 5*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3886244kB [ 107.788688][ T7149] vcan0: entered allmulticast mode [ 107.838841][ T7096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.885055][ T7096] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.931528][ T7096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.976758][ T7096] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 108.005883][ T7096] 44119 total pagecache pages [ 108.016088][ T7096] 0 pages in swap cache [ 108.018998][ T7158] wg1 speed is unknown, defaulting to 1000 [ 108.052091][ T7158] wg1 speed is unknown, defaulting to 1000 [ 108.075236][ T7162] validate_nla: 7 callbacks suppressed [ 108.075255][ T7162] netlink: 'syz.2.323': attribute type 1 has an invalid length. [ 108.078413][ T7158] wg1 speed is unknown, defaulting to 1000 [ 108.095992][ T7096] Free swap = 124996kB [ 108.118206][ T7096] Total swap = 124996kB [ 108.122403][ T7096] 2097051 pages RAM [ 108.126295][ T7096] 0 pages HighMem/MovableOnly [ 108.146106][ T7158] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.197046][ T7096] 425672 pages reserved [ 108.199515][ T7158] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 108.215505][ T7162] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.223724][ T7096] 0 pages cma reserved [ 108.316713][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 108.378063][ T7167] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.385479][ T7167] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 108.431885][ T7167] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 108.575876][ T7162] veth3: entered promiscuous mode [ 108.590050][ T7180] netlink: 'syz.3.328': attribute type 12 has an invalid length. [ 108.615612][ T7158] wg1 speed is unknown, defaulting to 1000 [ 108.633399][ T7170] vlan3: entered allmulticast mode [ 108.666960][ T7170] bond1: entered allmulticast mode [ 108.683155][ T7158] wg1 speed is unknown, defaulting to 1000 [ 108.691508][ T7158] wg1 speed is unknown, defaulting to 1000 [ 108.750171][ T7158] wg1 speed is unknown, defaulting to 1000 [ 108.769255][ T7158] wg1 speed is unknown, defaulting to 1000 [ 108.784321][ T7184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.329'. [ 108.916546][ T7186] IPVS: Error joining to the multicast group [ 108.988563][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 109.073617][ T7191] team_slave_0: entered promiscuous mode [ 109.079549][ T7191] team_slave_1: entered promiscuous mode [ 109.135517][ T7191] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 109.294511][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 109.350282][ T7203] netlink: 108 bytes leftover after parsing attributes in process `syz.1.337'. [ 109.395877][ T7203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.337'. [ 109.886239][ T7234] xfrm1: entered promiscuous mode [ 109.914664][ T7234] xfrm1: entered allmulticast mode [ 110.072277][ T7235] wg1 speed is unknown, defaulting to 1000 [ 110.084323][ T7237] netlink: 'syz.2.345': attribute type 29 has an invalid length. [ 110.170105][ T7237] netlink: 'syz.2.345': attribute type 29 has an invalid length. [ 110.602249][ T7264] netlink: 'syz.3.349': attribute type 27 has an invalid length. [ 110.642490][ T7264] netlink: 'syz.3.349': attribute type 4 has an invalid length. [ 110.807855][ T7277] netlink: 'syz.4.354': attribute type 1 has an invalid length. [ 110.815536][ T7277] netlink: 'syz.4.354': attribute type 2 has an invalid length. [ 111.095337][ T7274] syzkaller1: entered promiscuous mode [ 111.100993][ T7274] syzkaller1: entered allmulticast mode [ 111.325124][ T7299] sctp: [Deprecated]: syz.2.361 (pid 7299) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.325124][ T7299] Use struct sctp_sack_info instead [ 111.375558][ T7299] Bluetooth: MGMT ver 1.23 [ 111.435438][ T7299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.465869][ T7299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.182851][ T7342] pim6reg1: entered promiscuous mode [ 112.201279][ T7342] pim6reg1: entered allmulticast mode [ 112.559194][ T7360] __nla_validate_parse: 12 callbacks suppressed [ 112.559213][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'. [ 112.658347][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'. [ 112.735443][ T7369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.378'. [ 112.819478][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.380'. [ 113.065806][ T7391] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 113.615974][ T7435] netlink: 'syz.1.395': attribute type 4 has an invalid length. [ 114.056993][ T7462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.402'. [ 114.071676][ T7464] netlink: 'syz.0.405': attribute type 1 has an invalid length. [ 114.080962][ T7464] netlink: 'syz.0.405': attribute type 3 has an invalid length. [ 114.088756][ T7464] netlink: 224 bytes leftover after parsing attributes in process `syz.0.405'. [ 114.106388][ T7462] ipvlan2: entered promiscuous mode [ 114.324458][ T7476] netlink: 'syz.2.409': attribute type 12 has an invalid length. [ 114.690845][ T7496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.415'. [ 114.758141][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.415'. [ 115.107765][ T7523] vlan4: entered promiscuous mode [ 115.256250][ T7531] netlink: 156 bytes leftover after parsing attributes in process `syz.2.427'. [ 115.322476][ T7531] netlink: 156 bytes leftover after parsing attributes in process `syz.2.427'. [ 115.514495][ T7537] netlink: 'syz.3.430': attribute type 1 has an invalid length. [ 115.579970][ T7549] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 116.226860][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.243799][ T7596] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.558438][ T7617] netlink: 'syz.3.453': attribute type 23 has an invalid length. [ 116.779746][ T7634] sctp: [Deprecated]: syz.0.458 (pid 7634) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.779746][ T7634] Use struct sctp_sack_info instead [ 116.804674][ T7634] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 116.823938][ T7634] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 117.510465][ T7670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.530529][ T7668] netlink: 'syz.2.471': attribute type 4 has an invalid length. [ 117.555317][ T7668] team0: Device vti0 is of different type [ 117.683366][ T7682] tap0: tun_chr_ioctl cmd 1074025672 [ 117.692248][ T7682] tap0: ignored: set checksum disabled [ 117.895480][ T7690] bridge0: port 1(batadv1) entered blocking state [ 117.903175][ T7690] bridge0: port 1(batadv1) entered disabled state [ 117.910693][ T7690] batadv1: entered allmulticast mode [ 117.922454][ T7690] batadv1: entered promiscuous mode [ 117.930371][ T7693] __nla_validate_parse: 71 callbacks suppressed [ 117.930386][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 117.946269][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 117.965828][ T7698] netlink: 'syz.1.481': attribute type 25 has an invalid length. [ 117.967454][ T7693] netlink: 36 bytes leftover after parsing attributes in process `syz.2.479'. [ 118.150611][ T7706] netlink: 44 bytes leftover after parsing attributes in process `syz.3.484'. [ 118.212249][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 118.269029][ T7716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.487'. [ 118.285082][ T7716] nbd: must specify a size in bytes for the device [ 118.377958][ T3486] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 118.387484][ T3486] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 118.415742][ T7726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.491'. [ 118.444534][ T7726] geneve2: entered promiscuous mode [ 118.563200][ T7732] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.492'. [ 118.573711][ T7730] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.492'. [ 118.655847][ T7744] tipc: Enabled bearer , priority 0 [ 118.668987][ T7745] tipc: Resetting bearer [ 118.697558][ T7741] tipc: Disabling bearer [ 118.761430][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 118.810720][ T7753] netlink: 404 bytes leftover after parsing attributes in process `syz.0.497'. [ 119.782125][ T7820] netlink: 'syz.1.514': attribute type 4 has an invalid length. [ 119.841456][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055e9d800: rx timeout, send abort [ 119.851326][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055e9d800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 119.865973][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055e9c400: rx timeout, send abort [ 119.878021][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055e9c400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 119.893461][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055e9c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 120.230073][ T7839] veth7: entered allmulticast mode [ 120.261698][ T7838] bridge0: entered promiscuous mode [ 120.283046][ T7838] macsec1: entered promiscuous mode [ 120.300049][ T7838] macsec1: entered allmulticast mode [ 120.305493][ T7838] bridge0: entered allmulticast mode [ 120.346066][ T7850] netlink: 'syz.1.521': attribute type 9 has an invalid length. [ 121.064119][ T5984] IPVS: starting estimator thread 0... [ 121.066634][ T7892] tipc: Started in network mode [ 121.075038][ T7890] vxcan1: tx address claim with dlc 0 [ 121.131943][ T7892] tipc: Node identity ac14140f, cluster identity 4711 [ 121.139601][ T7892] tipc: New replicast peer: 255.255.255.255 [ 121.160390][ T7892] tipc: Enabled bearer , priority 10 [ 121.181587][ T7900] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.189433][ T7900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.197426][ T7900] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.197605][ T7893] IPVS: using max 32 ests per chain, 76800 per kthread [ 121.204561][ T7900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.242488][ T7900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.264827][ T7892] tipc: Enabling of bearer rejected, already enabled [ 121.423037][ T7919] netlink: 'syz.0.539': attribute type 3 has an invalid length. [ 121.739449][ T7937] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 121.754016][ T7935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.035184][ T7951] wg1 speed is unknown, defaulting to 1000 [ 122.258428][ T9] tipc: Node number set to 2886997007 [ 122.390656][ T7978] netlink: 'syz.2.558': attribute type 4 has an invalid length. [ 122.631838][ T7988] 8021q: VLANs not supported on ip6tnl0 [ 122.819940][ T8006] netlink: 'syz.1.565': attribute type 27 has an invalid length. [ 123.442640][ T8051] netlink: 'syz.1.578': attribute type 11 has an invalid length. [ 123.466050][ T8051] netlink: 'syz.1.578': attribute type 11 has an invalid length. [ 123.479630][ T8051] __nla_validate_parse: 17 callbacks suppressed [ 123.479645][ T8051] netlink: 224 bytes leftover after parsing attributes in process `syz.1.578'. [ 123.572140][ T8056] lo: entered allmulticast mode [ 123.578177][ T8056] lo: left allmulticast mode [ 123.582477][ T8003] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 123.590883][ T8056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.580'. [ 123.814028][ T8067] xfrm0: entered promiscuous mode [ 123.819472][ T8067] xfrm0: entered allmulticast mode [ 123.827878][ T8067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.963381][ T8076] º: renamed from veth1_vlan (while UP) [ 124.004715][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'. [ 124.161868][ T8090] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.591'. [ 124.215968][ T8093] openvswitch: netlink: Flow actions attr not present in new flow. [ 124.258360][ T8100] netlink: 'syz.2.594': attribute type 1 has an invalid length. [ 124.287811][ T8100] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 124.331121][ T8106] sctp: [Deprecated]: syz.1.595 (pid 8106) Use of int in max_burst socket option deprecated. [ 124.331121][ T8106] Use struct sctp_assoc_value instead [ 124.389535][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 124.399615][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 124.409187][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 124.412454][ T8114] netem: incorrect gi model size [ 124.419396][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 124.435579][ T8114] netem: change failed [ 124.445165][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 124.479735][ T8116] netlink: 'syz.1.599': attribute type 7 has an invalid length. [ 124.480008][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 124.490839][ T8116] netlink: 'syz.1.599': attribute type 1 has an invalid length. [ 124.837598][ T5867] Bluetooth: hci0: command 0x080f tx timeout [ 124.920623][ T8142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.932700][ T8140] openvswitch: netlink: IPv4 tun info is not correct [ 125.120919][ T8145] netlink: 'syz.0.611': attribute type 83 has an invalid length. [ 125.179649][ T8145] syzkaller1: entered promiscuous mode [ 125.185658][ T8145] syzkaller1: entered allmulticast mode [ 125.335085][ T8159] openvswitch: netlink: IPv4 tun info is not correct [ 125.571761][ T9] IPVS: starting estimator thread 0... [ 125.720493][ T8174] IPVS: using max 29 ests per chain, 69600 per kthread [ 125.849113][ T8183] netlink: 'syz.0.623': attribute type 1 has an invalid length. [ 125.992254][ T8195] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 126.041809][ T8192] bond2: (slave bridge3): making interface the new active one [ 126.051317][ T8192] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 126.331180][ T8224] TCP: TCP_TX_DELAY enabled [ 126.578907][ T8235] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 126.718042][ T8237] team0: Device vti0 is of different type [ 126.804025][ T8239] tipc: Enabled bearer , priority 0 [ 126.828809][ T8239] syzkaller0: entered promiscuous mode [ 126.836282][ T8239] syzkaller0: entered allmulticast mode [ 126.873802][ T8242] syzkaller0: entered promiscuous mode [ 126.882028][ T8242] syzkaller0: entered allmulticast mode [ 126.890641][ T8238] tipc: Resetting bearer [ 126.913499][ T8238] tipc: Disabling bearer [ 127.065330][ T8244] tipc: Enabled bearer , priority 0 [ 127.092945][ T8254] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 127.132969][ T8250] syzkaller0: entered promiscuous mode [ 127.173517][ T8250] syzkaller0: entered allmulticast mode [ 127.260631][ T8244] tipc: Resetting bearer [ 127.567209][ T8252] wg1 speed is unknown, defaulting to 1000 [ 127.689818][ T8243] tipc: Resetting bearer [ 127.862209][ T8243] tipc: Disabling bearer [ 128.702664][ T8296] __nla_validate_parse: 36 callbacks suppressed [ 128.702682][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.654'. [ 129.043618][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.657'. [ 129.253573][ T8314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.324557][ T8318] macvtap1: entered allmulticast mode [ 129.347571][ T8318] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 129.576007][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 129.595496][ T8345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 129.696869][ T8354] netlink: 'syz.3.673': attribute type 12 has an invalid length. [ 129.721600][ T8359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.672'. [ 129.724311][ T8352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.671'. [ 129.939859][ T8375] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 130.113231][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'. [ 130.153754][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.680'. [ 130.168508][ T8381] netlink: 'syz.0.678': attribute type 1 has an invalid length. [ 130.186026][ T8381] netlink: 17 bytes leftover after parsing attributes in process `syz.0.678'. [ 130.479915][ T8401] netlink: 'syz.4.687': attribute type 1 has an invalid length. [ 130.507369][ T8401] netlink: 'syz.4.687': attribute type 2 has an invalid length. [ 131.969949][ T8427] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 132.086633][ T8436] bridge2: entered promiscuous mode [ 132.100777][ T8436] bridge2: entered allmulticast mode [ 132.273726][ T8443] batadv2: entered allmulticast mode [ 132.400161][ T8461] netlink: 'syz.3.704': attribute type 1 has an invalid length. [ 132.412719][ T8461] netlink: 212 bytes leftover after parsing attributes in process `syz.3.704'. [ 132.448467][ T8461] netlink: 'syz.3.704': attribute type 1 has an invalid length. [ 132.559390][ T8457] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.566642][ T8457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.574220][ T8457] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.581417][ T8457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.601819][ T8457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.922172][ T8485] netlink: 'syz.3.709': attribute type 1 has an invalid length. [ 133.002884][ T8485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.032268][ T8489] bond1: (slave gretap1): making interface the new active one [ 133.062287][ T8489] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 133.101625][ T2983] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.150648][ T2983] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.178962][ T2983] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.248380][ T2983] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.736881][ T8537] nftables ruleset with unbound set [ 134.175809][ T8552] netlink: 'syz.3.728': attribute type 10 has an invalid length. [ 134.231494][ T8552] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.269411][ T8552] bond0: (slave team0): Enslaving as an active interface with an up link [ 134.429817][ T8569] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 134.448207][ T8569] netlink: set zone limit has 8 unknown bytes [ 134.588370][ T8570] __nla_validate_parse: 9 callbacks suppressed [ 134.588387][ T8570] netlink: 108 bytes leftover after parsing attributes in process `syz.3.733'. [ 134.649556][ T8570] netlink: 108 bytes leftover after parsing attributes in process `syz.3.733'. [ 134.669131][ T8570] netlink: 84 bytes leftover after parsing attributes in process `syz.3.733'. [ 134.715026][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 134.736278][ T8583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.736'. [ 134.761803][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 134.792199][ T8587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.736'. [ 134.874430][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'. [ 135.002075][ T8603] netlink: 32 bytes leftover after parsing attributes in process `syz.1.744'. [ 135.007561][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'. [ 135.839146][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.858637][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.014501][ T8652] netlink: 'syz.0.758': attribute type 1 has an invalid length. [ 136.877915][ T8701] netlink: 'syz.1.768': attribute type 2 has an invalid length. [ 136.976549][ T8691] netlink: 'syz.1.768': attribute type 3 has an invalid length. [ 137.151791][ T8710] tipc: Started in network mode [ 137.156823][ T8710] tipc: Node identity 52720c1501e5, cluster identity 4711 [ 137.182548][ T8710] tipc: Enabled bearer , priority 0 [ 137.196982][ T8710] syzkaller0: entered promiscuous mode [ 137.213025][ T8710] syzkaller0: entered allmulticast mode [ 137.266595][ T8718] syzkaller1: entered promiscuous mode [ 137.272898][ T8718] syzkaller1: entered allmulticast mode [ 137.291150][ T8710] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 137.341311][ T8710] tipc: Resetting bearer [ 137.357515][ T8708] tipc: Resetting bearer [ 137.412668][ T8729] netlink: 'syz.4.780': attribute type 1 has an invalid length. [ 137.421315][ T8708] tipc: Disabling bearer [ 137.437485][ T8729] netlink: 'syz.4.780': attribute type 2 has an invalid length. [ 138.096455][ T8767] lo: entered promiscuous mode [ 138.118417][ T8767] tunl0: entered promiscuous mode [ 138.164584][ T8767] gre0: entered promiscuous mode [ 138.239996][ T8767] gretap0: entered promiscuous mode [ 138.291400][ T8767] erspan0: entered promiscuous mode [ 138.309069][ T8767] ip_vti0: entered promiscuous mode [ 138.445216][ T8781] netlink: 'syz.3.790': attribute type 12 has an invalid length. [ 138.538543][ T8787] lo: entered promiscuous mode [ 138.560665][ T8787] netlink: 'syz.4.791': attribute type 2 has an invalid length. [ 138.604598][ T8792] netlink: 'syz.0.794': attribute type 1 has an invalid length. [ 138.605306][ T8787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.055369][ T8823] veth0: entered promiscuous mode [ 139.077770][ T8822] veth0: left promiscuous mode [ 139.223871][ T8827] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 139.269079][ T8827] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 139.974690][ T8865] __nla_validate_parse: 18 callbacks suppressed [ 139.974711][ T8865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.811'. [ 140.002521][ T8847] infiniband syz0: set active [ 140.007849][ T8847] infiniband syz0: added bond_slave_0 [ 140.065264][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.812'. [ 140.204389][ T8847] RDS/IB: syz0: added [ 140.244377][ T8847] smc: adding ib device syz0 with port count 1 [ 140.274150][ T8847] smc: ib device syz0 port 1 has pnetid [ 140.411151][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.816'. [ 140.632241][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.819'. [ 140.657627][ T8902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.834792][ T8902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.995063][ T8908] team0: Device ip6gre1 is of different type [ 141.099879][ T8912] netlink: 'syz.0.822': attribute type 4 has an invalid length. [ 141.100918][ T8922] netlink: 'syz.1.824': attribute type 178 has an invalid length. [ 141.136152][ T8924] netlink: 'syz.1.824': attribute type 178 has an invalid length. [ 141.313120][ T8931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.826'. [ 141.352589][ T8935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.827'. [ 141.580256][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.830'. [ 141.615334][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.830'. [ 141.659093][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.831'. [ 142.038947][ T8973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.834'. [ 142.324561][ T8979] netlink: 'syz.1.836': attribute type 1 has an invalid length. [ 142.808605][ T9004] netlink: 'syz.3.842': attribute type 3 has an invalid length. [ 143.803079][ T9035] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 144.296047][ T9060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.468488][ T9060] macvlan0: entered promiscuous mode [ 144.505472][ T9060] batadv0: entered promiscuous mode [ 144.524743][ T9060] hsr1: entered allmulticast mode [ 144.540667][ T9060] macvlan0: entered allmulticast mode [ 144.555462][ T9060] veth1_vlan: entered allmulticast mode [ 144.571883][ T9060] batadv0: entered allmulticast mode [ 144.596554][ T9060] macvlan0: left promiscuous mode [ 144.631404][ T9060] batadv0: left promiscuous mode [ 144.921144][ T9077] syzkaller0: entered promiscuous mode [ 144.944697][ T9077] syzkaller0: entered allmulticast mode [ 144.996537][ T58] tipc: Subscription rejected, illegal request [ 145.109568][ T9106] __nla_validate_parse: 10 callbacks suppressed [ 145.109588][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.869'. [ 145.676559][ T9116] netlink: 80 bytes leftover after parsing attributes in process `syz.2.871'. [ 146.657948][ T9106] bridge3: entered promiscuous mode [ 146.663195][ T9106] bridge3: entered allmulticast mode [ 146.742075][ T9131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.873'. [ 146.852941][ T9134] netlink: 'syz.1.875': attribute type 9 has an invalid length. [ 146.889323][ T9137] netlink: 112 bytes leftover after parsing attributes in process `syz.3.873'. [ 146.936050][ T9141] netlink: 44 bytes leftover after parsing attributes in process `syz.0.874'. [ 147.358970][ T9175] netlink: 'syz.2.881': attribute type 23 has an invalid length. [ 147.433096][ T9179] netlink: 'syz.4.885': attribute type 4 has an invalid length. [ 147.445467][ T9179] netlink: 17 bytes leftover after parsing attributes in process `syz.4.885'. [ 147.451820][ T9177] wg1 speed is unknown, defaulting to 1000 [ 147.941829][ T9195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.889'. [ 147.969189][ T9195] netlink: 'syz.3.889': attribute type 12 has an invalid length. [ 148.003149][ T9195] netlink: 'syz.3.889': attribute type 29 has an invalid length. [ 148.026880][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.889'. [ 148.026996][ T9195] netlink: 148 bytes leftover after parsing attributes in process `syz.3.889'. [ 148.139009][ T9195] netlink: 51 bytes leftover after parsing attributes in process `syz.3.889'. [ 148.431683][ T9228] netlink: 'syz.4.896': attribute type 10 has an invalid length. [ 148.686957][ T9228] team0: Device veth1_macvtap failed to register rx_handler [ 148.803590][ T9217] wg1 speed is unknown, defaulting to 1000 [ 149.387724][ T9267] netlink: 'syz.4.909': attribute type 18 has an invalid length. [ 149.421195][ T9267] netlink: 'syz.4.909': attribute type 18 has an invalid length. [ 149.500095][ T9272] tipc: Enabled bearer , priority 0 [ 149.507769][ T9272] syzkaller0: entered promiscuous mode [ 149.513258][ T9272] syzkaller0: entered allmulticast mode [ 149.596416][ T9272] tipc: Resetting bearer [ 149.614287][ T9270] tipc: Resetting bearer [ 149.655717][ T9270] tipc: Disabling bearer [ 149.972835][ T9290] netlink: 'syz.0.915': attribute type 21 has an invalid length. [ 150.221500][ T9304] Driver unsupported XDP return value 0 on prog (id 236) dev N/A, expect packet loss! [ 150.262466][ T9304] __nla_validate_parse: 7 callbacks suppressed [ 150.262486][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'. [ 150.366412][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.919'. [ 150.552853][ T9315] netlink: 104 bytes leftover after parsing attributes in process `syz.1.923'. [ 150.731555][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.928'. [ 150.831220][ T9332] unsupported nla_type 52263 [ 151.244561][ T9359] tap0: tun_chr_ioctl cmd 2148553947 [ 151.272544][ T9359] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.938'. [ 151.286153][ T9364] Bluetooth: MGMT ver 1.23 [ 151.574416][ T9387] netlink: 96 bytes leftover after parsing attributes in process `syz.2.947'. [ 151.633575][ T9388] netlink: 'syz.4.946': attribute type 21 has an invalid length. [ 151.657558][ T9388] netlink: 152 bytes leftover after parsing attributes in process `syz.4.946'. [ 151.900149][ T9405] netlink: 'syz.3.954': attribute type 10 has an invalid length. [ 151.915313][ T9405] veth1_macvtap: left promiscuous mode [ 152.081159][ T9409] bond4: entered promiscuous mode [ 152.086417][ T9409] bond4: entered allmulticast mode [ 152.092279][ T9409] 8021q: adding VLAN 0 to HW filter on device bond4 [ 152.106709][ T9412] openvswitch: netlink: Actions may not be safe on all matching packets [ 152.195911][ T9421] netlink: 164 bytes leftover after parsing attributes in process `syz.0.959'. [ 152.285388][ T9429] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.959'. [ 152.303956][ T9430] netlink: 'syz.3.961': attribute type 1 has an invalid length. [ 152.365965][ T9436] netlink: 'syz.2.962': attribute type 12 has an invalid length. [ 152.374010][ T9436] netlink: 'syz.2.962': attribute type 29 has an invalid length. [ 152.382280][ T9436] netlink: 148 bytes leftover after parsing attributes in process `syz.2.962'. [ 152.392276][ T9436] netlink: 'syz.2.962': attribute type 12 has an invalid length. [ 152.400433][ T9436] netlink: 'syz.2.962': attribute type 29 has an invalid length. [ 152.409256][ T9436] netlink: 'syz.2.962': attribute type 12 has an invalid length. [ 152.417059][ T9436] netlink: 'syz.2.962': attribute type 29 has an invalid length. [ 152.426414][ T9436] netlink: 'syz.2.962': attribute type 12 has an invalid length. [ 152.434660][ T9436] netlink: 'syz.2.962': attribute type 29 has an invalid length. [ 152.477453][ T9436] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 152.713458][ T9447] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 153.566886][ T9451] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 153.573399][ T9451] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 153.593377][ T9451] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.599335][ T9451] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 153.611978][ T9451] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.619075][ T9451] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 153.631552][ T9451] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.638533][ T9451] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 153.653332][ T9451] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 153.659683][ T9451] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 155.190110][ T9421] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.307679][ T9455] __nla_validate_parse: 65 callbacks suppressed [ 155.307698][ T9455] netlink: 32 bytes leftover after parsing attributes in process `syz.3.967'. [ 155.423905][ T9465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.971'. [ 155.554272][ T9475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.974'. [ 157.043236][ T9507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.982'. [ 157.052773][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.982'. [ 157.298587][ T9520] netlink: 48 bytes leftover after parsing attributes in process `syz.1.986'. [ 157.870978][ T9546] validate_nla: 58 callbacks suppressed [ 157.870992][ T9546] netlink: 'syz.1.991': attribute type 1 has an invalid length. [ 157.912722][ T9546] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 157.924295][ T9546] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 157.953513][ T9548] netlink: 32 bytes leftover after parsing attributes in process `syz.1.991'. [ 157.968999][ T9548] macvlan0: entered promiscuous mode [ 157.974456][ T9548] macvlan0: entered allmulticast mode [ 157.980653][ T9548] bond1: entered promiscuous mode [ 157.986359][ T9548] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 157.995475][ T9548] bond1: left promiscuous mode [ 314.037644][ T31] INFO: task kworker/0:6:5984 blocked for more than 143 seconds. [ 314.045447][ T31] Not tainted syzkaller #0 [ 314.050614][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.059398][ T31] task:kworker/0:6 state:D stack:23752 pid:5984 tgid:5984 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 314.072145][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 314.078935][ T31] Call Trace: [ 314.082215][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 314.085154][ T31] __schedule+0x1798/0x4cc0 [ 314.089941][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 314.095339][ T31] ? __pfx___schedule+0x10/0x10 [ 314.103084][ T31] ? schedule+0x91/0x360 [ 314.108293][ T31] schedule+0x165/0x360 [ 314.112473][ T31] schedule_preempt_disabled+0x13/0x30 [ 314.118078][ T31] __mutex_lock+0x7e6/0x1350 [ 314.122690][ T31] ? __mutex_lock+0x5bb/0x1350 [ 314.127833][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 314.134094][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 314.139387][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 314.197355][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 314.203131][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 314.224304][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 314.234224][ T31] process_scheduled_works+0xae1/0x17b0 [ 314.240535][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 314.246555][ T31] worker_thread+0x8a0/0xda0 [ 314.251471][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 314.258054][ T31] ? __kthread_parkme+0x7b/0x200 [ 314.263013][ T31] kthread+0x70e/0x8a0 [ 314.267093][ T31] ? __pfx_worker_thread+0x10/0x10 [ 314.273348][ T31] ? __pfx_kthread+0x10/0x10 [ 314.278264][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.283468][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.288959][ T31] ? __pfx_kthread+0x10/0x10 [ 314.293555][ T31] ret_from_fork+0x439/0x7d0 [ 314.298452][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 314.303572][ T31] ? __switch_to_asm+0x39/0x70 [ 314.308489][ T31] ? __switch_to_asm+0x33/0x70 [ 314.313261][ T31] ? __pfx_kthread+0x10/0x10 [ 314.317913][ T31] ret_from_fork_asm+0x1a/0x30 [ 314.322690][ T31] [ 314.325737][ T31] INFO: task syz.0.959:9420 blocked for more than 143 seconds. [ 314.333621][ T31] Not tainted syzkaller #0 [ 314.338665][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.347631][ T31] task:syz.0.959 state:D stack:25096 pid:9420 tgid:9420 ppid:5872 task_flags:0x400040 flags:0x00004006 [ 314.362007][ T31] Call Trace: [ 314.365311][ T31] [ 314.369677][ T31] __schedule+0x1798/0x4cc0 [ 314.374233][ T31] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 314.380399][ T31] ? __lock_acquire+0xab9/0xd20 [ 314.385260][ T31] ? __pfx___schedule+0x10/0x10 [ 314.390902][ T31] ? schedule+0x91/0x360 [ 314.395163][ T31] schedule+0x165/0x360 [ 314.399881][ T31] schedule_preempt_disabled+0x13/0x30 [ 314.405620][ T31] __mutex_lock+0x7e6/0x1350 [ 314.410567][ T31] ? __mutex_lock+0x5bb/0x1350 [ 314.415349][ T31] ? rfkill_unregister+0xc8/0x220 [ 314.420517][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 314.425576][ T31] ? __pfx_device_del+0x10/0x10 [ 314.430731][ T31] rfkill_unregister+0xc8/0x220 [ 314.435590][ T31] nfc_unregister_device+0x96/0x2a0 [ 314.440942][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 314.446761][ T31] virtual_ncidev_close+0x56/0x90 [ 314.451888][ T31] __fput+0x44c/0xa70 [ 314.455883][ T31] task_work_run+0x1d1/0x260 [ 314.460928][ T31] ? __pfx_task_work_run+0x10/0x10 [ 314.466060][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 314.471698][ T31] exit_to_user_mode_loop+0xec/0x110 [ 314.476998][ T31] do_syscall_64+0x2bd/0x3b0 [ 314.481736][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.488167][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 314.494330][ T31] ? clear_bhb_loop+0x60/0xb0 [ 314.499097][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.505010][ T31] RIP: 0033:0x7fd8e5f8eec9 [ 314.509497][ T31] RSP: 002b:00007fff9bbeec98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 314.518421][ T31] RAX: 0000000000000000 RBX: 00007fd8e61e7da0 RCX: 00007fd8e5f8eec9 [ 314.526417][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 314.534472][ T31] RBP: 00007fd8e61e7da0 R08: 0000000000000234 R09: 0000001e9bbeef8f [ 314.542541][ T31] R10: 00007fd8e61e7cb0 R11: 0000000000000246 R12: 000000000002559b [ 314.550820][ T31] R13: 00007fff9bbeed90 R14: ffffffffffffffff R15: 00007fff9bbeedb0 [ 314.558854][ T31] [ 314.561888][ T31] INFO: task syz.4.966:9451 blocked for more than 143 seconds. [ 314.577870][ T31] Not tainted syzkaller #0 [ 314.582833][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.591546][ T31] task:syz.4.966 state:D stack:25208 pid:9451 tgid:9448 ppid:5879 task_flags:0x400040 flags:0x00004006 [ 314.603782][ T31] Call Trace: [ 314.607082][ T31] [ 314.610360][ T31] __schedule+0x1798/0x4cc0 [ 314.614893][ T31] ? __lock_acquire+0xab9/0xd20 [ 314.619819][ T31] ? __lock_acquire+0xab9/0xd20 [ 314.624683][ T31] ? __pfx___schedule+0x10/0x10 [ 314.629628][ T31] ? schedule+0x91/0x360 [ 314.633860][ T31] schedule+0x165/0x360 [ 314.638280][ T31] schedule_preempt_disabled+0x13/0x30 [ 314.643749][ T31] __mutex_lock+0x7e6/0x1350 [ 314.648425][ T31] ? __mutex_lock+0x5bb/0x1350 [ 314.653249][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 314.658618][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 314.663651][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.669110][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 314.675016][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 314.681577][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 314.687374][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 314.692495][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 314.698612][ T31] rfkill_set_block+0x1d2/0x440 [ 314.703478][ T31] rfkill_fop_write+0x44b/0x570 [ 314.708383][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 314.713754][ T31] ? security_kernfs_init_security+0x250/0x290 [ 314.719978][ T31] ? rw_verify_area+0x255/0x4d0 [ 314.724830][ T31] ? __lock_acquire+0xab9/0xd20 [ 314.730183][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 314.735590][ T31] vfs_write+0x27b/0xb30 [ 314.739895][ T31] ? __pfx_vfs_write+0x10/0x10 [ 314.744670][ T31] ? __fget_files+0x2a/0x420 [ 314.749301][ T31] ? __fget_files+0x2a/0x420 [ 314.753892][ T31] ? __fget_files+0x3a0/0x420 [ 314.758948][ T31] ? __fget_files+0x2a/0x420 [ 314.763621][ T31] ksys_write+0x145/0x250 [ 314.768499][ T31] ? __pfx_ksys_write+0x10/0x10 [ 314.773364][ T31] ? rcu_is_watching+0x15/0xb0 [ 314.778234][ T31] ? do_syscall_64+0xbe/0x3b0 [ 314.783005][ T31] do_syscall_64+0xfa/0x3b0 [ 314.787924][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.793125][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.799935][ T31] ? clear_bhb_loop+0x60/0xb0 [ 314.804638][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.810620][ T31] RIP: 0033:0x7f654458eec9 [ 314.815035][ T31] RSP: 002b:00007f65454d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 314.823584][ T31] RAX: ffffffffffffffda RBX: 00007f65447e6090 RCX: 00007f654458eec9 [ 314.831827][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 00000000000000bf [ 314.839850][ T31] RBP: 00007f6544611f91 R08: 0000000000000000 R09: 0000000000000000 [ 314.848330][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.856407][ T31] R13: 00007f65447e6128 R14: 00007f65447e6090 R15: 00007ffe933aa7c8 [ 314.864474][ T31] [ 314.867726][ T31] INFO: task syz.2.973:9468 blocked for more than 144 seconds. [ 314.875275][ T31] Not tainted syzkaller #0 [ 314.883301][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.892313][ T31] task:syz.2.973 state:D stack:25096 pid:9468 tgid:9467 ppid:5868 task_flags:0x400140 flags:0x00004004 [ 314.904403][ T31] Call Trace: [ 314.908023][ T31] [ 314.911043][ T31] __schedule+0x1798/0x4cc0 [ 314.915534][ T31] ? __lock_acquire+0xab9/0xd20 [ 314.920777][ T31] ? __lock_acquire+0xab9/0xd20 [ 314.925650][ T31] ? __pfx___schedule+0x10/0x10 [ 314.930587][ T31] ? schedule+0x91/0x360 [ 314.934834][ T31] schedule+0x165/0x360 [ 314.939109][ T31] schedule_preempt_disabled+0x13/0x30 [ 314.944569][ T31] __mutex_lock+0x7e6/0x1350 [ 314.949427][ T31] ? __mutex_lock+0x5bb/0x1350 [ 314.954209][ T31] ? rfkill_register+0x37/0x8e0 [ 314.959245][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 314.964274][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 314.969747][ T31] ? device_initialize+0x24b/0x440 [ 314.974893][ T31] rfkill_register+0x37/0x8e0 [ 314.979959][ T31] nfc_register_device+0x14a/0x320 [ 314.985112][ T31] nci_register_device+0x87f/0x9d0 [ 314.990345][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 314.995995][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 315.002988][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 315.008471][ T31] virtual_ncidev_open+0x129/0x1a0 [ 315.013595][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 315.019338][ T31] misc_open+0x2b9/0x330 [ 315.023605][ T31] chrdev_open+0x4c9/0x5e0 [ 315.028397][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 315.033356][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 315.039843][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 315.044800][ T31] do_dentry_open+0x950/0x13f0 [ 315.049637][ T31] vfs_open+0x3b/0x340 [ 315.053703][ T31] ? path_openat+0x2ecd/0x3830 [ 315.058774][ T31] path_openat+0x2ee5/0x3830 [ 315.063391][ T31] ? arch_stack_walk+0xfc/0x150 [ 315.068388][ T31] ? stack_depot_save_flags+0x40/0x860 [ 315.073864][ T31] ? __pfx_path_openat+0x10/0x10 [ 315.078976][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.085060][ T31] do_filp_open+0x1fa/0x410 [ 315.089910][ T31] ? __lock_acquire+0xab9/0xd20 [ 315.094773][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 315.100009][ T31] ? _raw_spin_unlock+0x28/0x50 [ 315.104894][ T31] ? alloc_fd+0x64c/0x6c0 [ 315.109419][ T31] do_sys_openat2+0x121/0x1c0 [ 315.114110][ T31] ? __se_sys_futex+0x36f/0x400 [ 315.120290][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 315.125529][ T31] ? rcu_is_watching+0x15/0xb0 [ 315.130403][ T31] __x64_sys_openat+0x138/0x170 [ 315.135262][ T31] do_syscall_64+0xfa/0x3b0 [ 315.139836][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.145038][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.151425][ T31] ? clear_bhb_loop+0x60/0xb0 [ 315.156380][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.162393][ T31] RIP: 0033:0x7fe2d958eec9 [ 315.166971][ T31] RSP: 002b:00007fe2da439038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 315.175450][ T31] RAX: ffffffffffffffda RBX: 00007fe2d97e5fa0 RCX: 00007fe2d958eec9 [ 315.183590][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 315.191671][ T31] RBP: 00007fe2d9611f91 R08: 0000000000000000 R09: 0000000000000000 [ 315.199688][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.207970][ T31] R13: 00007fe2d97e6038 R14: 00007fe2d97e5fa0 R15: 00007ffe3a715c88 [ 315.215953][ T31] [ 315.219034][ T31] INFO: task syz.2.973:9474 blocked for more than 144 seconds. [ 315.226573][ T31] Not tainted syzkaller #0 [ 315.231704][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.240737][ T31] task:syz.2.973 state:D stack:27848 pid:9474 tgid:9467 ppid:5868 task_flags:0x400140 flags:0x00004004 [ 315.252771][ T31] Call Trace: [ 315.256492][ T31] [ 315.259508][ T31] __schedule+0x1798/0x4cc0 [ 315.264044][ T31] ? kasan_save_free_info+0x46/0x50 [ 315.269595][ T31] ? __lock_acquire+0xab9/0xd20 [ 315.274723][ T31] ? __lock_acquire+0xab9/0xd20 [ 315.279608][ T31] ? __pfx___schedule+0x10/0x10 [ 315.284466][ T31] ? schedule+0x91/0x360 [ 315.288778][ T31] schedule+0x165/0x360 [ 315.292940][ T31] schedule_preempt_disabled+0x13/0x30 [ 315.298720][ T31] __mutex_lock+0x7e6/0x1350 [ 315.303342][ T31] ? __mutex_lock+0x5bb/0x1350 [ 315.308163][ T31] ? misc_open+0x51/0x330 [ 315.312544][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 315.317848][ T31] misc_open+0x51/0x330 [ 315.322066][ T31] chrdev_open+0x4c9/0x5e0 [ 315.326487][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 315.331764][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 315.338251][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 315.343186][ T31] do_dentry_open+0x950/0x13f0 [ 315.348084][ T31] vfs_open+0x3b/0x340 [ 315.352170][ T31] ? path_openat+0x2ecd/0x3830 [ 315.356954][ T31] path_openat+0x2ee5/0x3830 [ 315.361833][ T31] ? arch_stack_walk+0xfc/0x150 [ 315.366742][ T31] ? stack_depot_save_flags+0x40/0x860 [ 315.372280][ T31] ? __pfx_path_openat+0x10/0x10 [ 315.377259][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.383373][ T31] do_filp_open+0x1fa/0x410 [ 315.388579][ T31] ? __lock_acquire+0xab9/0xd20 [ 315.393444][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 315.398637][ T31] ? _raw_spin_unlock+0x28/0x50 [ 315.403503][ T31] ? alloc_fd+0x64c/0x6c0 [ 315.408020][ T31] do_sys_openat2+0x121/0x1c0 [ 315.412708][ T31] ? __se_sys_futex+0x36f/0x400 [ 315.417922][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 315.423137][ T31] ? rcu_is_watching+0x15/0xb0 [ 315.427973][ T31] __x64_sys_openat+0x138/0x170 [ 315.432915][ T31] do_syscall_64+0xfa/0x3b0 [ 315.437499][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.442700][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.449063][ T31] ? clear_bhb_loop+0x60/0xb0 [ 315.453754][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.459710][ T31] RIP: 0033:0x7fe2d958eec9 [ 315.464124][ T31] RSP: 002b:00007fe2da418038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 315.472589][ T31] RAX: ffffffffffffffda RBX: 00007fe2d97e6090 RCX: 00007fe2d958eec9 [ 315.480922][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 315.488964][ T31] RBP: 00007fe2d9611f91 R08: 0000000000000000 R09: 0000000000000000 [ 315.497033][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.505078][ T31] R13: 00007fe2d97e6128 R14: 00007fe2d97e6090 R15: 00007ffe3a715c88 [ 315.513231][ T31] [ 315.516257][ T31] INFO: task syz.3.978:9489 blocked for more than 144 seconds. [ 315.523971][ T31] Not tainted syzkaller #0 [ 315.528963][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.537888][ T31] task:syz.3.978 state:D stack:27592 pid:9489 tgid:9488 ppid:5881 task_flags:0x400040 flags:0x00004004 [ 315.549865][ T31] Call Trace: [ 315.553141][ T31] [ 315.556143][ T31] __schedule+0x1798/0x4cc0 [ 315.560708][ T31] ? kasan_save_free_info+0x46/0x50 [ 315.565908][ T31] ? __lock_acquire+0xab9/0xd20 [ 315.571036][ T31] ? __lock_acquire+0xab9/0xd20 [ 315.575894][ T31] ? __pfx___schedule+0x10/0x10 [ 315.580782][ T31] ? schedule+0x91/0x360 [ 315.585028][ T31] schedule+0x165/0x360 [ 315.589265][ T31] schedule_preempt_disabled+0x13/0x30 [ 315.594721][ T31] __mutex_lock+0x7e6/0x1350 [ 315.599592][ T31] ? __mutex_lock+0x5bb/0x1350 [ 315.604366][ T31] ? misc_open+0x51/0x330 [ 315.608762][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 315.613818][ T31] misc_open+0x51/0x330 [ 315.618043][ T31] chrdev_open+0x4c9/0x5e0 [ 315.622470][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 315.627695][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 315.634124][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 315.639500][ T31] do_dentry_open+0x950/0x13f0 [ 315.644265][ T31] vfs_open+0x3b/0x340 [ 315.648412][ T31] ? path_openat+0x2ecd/0x3830 [ 315.653182][ T31] path_openat+0x2ee5/0x3830 [ 315.658053][ T31] ? arch_stack_walk+0xfc/0x150 [ 315.662933][ T31] ? stack_depot_save_flags+0x40/0x860 [ 315.668476][ T31] ? __pfx_path_openat+0x10/0x10 [ 315.673513][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.679998][ T31] do_filp_open+0x1fa/0x410 [ 315.684520][ T31] ? __lock_acquire+0xab9/0xd20 [ 315.690655][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 315.695708][ T31] ? _raw_spin_unlock+0x28/0x50 [ 315.700678][ T31] ? alloc_fd+0x64c/0x6c0 [ 315.705049][ T31] do_sys_openat2+0x121/0x1c0 [ 315.709838][ T31] ? __se_sys_futex+0x36f/0x400 [ 315.714692][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 315.720171][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 315.725384][ T31] ? rcu_is_watching+0x15/0xb0 [ 315.730200][ T31] __x64_sys_openat+0x138/0x170 [ 315.735056][ T31] do_syscall_64+0xfa/0x3b0 [ 315.739613][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.744811][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.751195][ T31] ? clear_bhb_loop+0x60/0xb0 [ 315.755875][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.761881][ T31] RIP: 0033:0x7fb5fc18eec9 [ 315.766293][ T31] RSP: 002b:00007fb5fd000038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 315.774758][ T31] RAX: ffffffffffffffda RBX: 00007fb5fc3e5fa0 RCX: 00007fb5fc18eec9 [ 315.782888][ T31] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 315.790982][ T31] RBP: 00007fb5fc211f91 R08: 0000000000000000 R09: 0000000000000000 [ 315.799225][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.809200][ T31] R13: 00007fb5fc3e6038 R14: 00007fb5fc3e5fa0 R15: 00007ffd09411278 [ 315.817311][ T31] [ 315.820357][ T31] INFO: task syz.3.978:9500 blocked for more than 145 seconds. [ 315.828045][ T31] Not tainted syzkaller #0 [ 315.832977][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.841955][ T31] task:syz.3.978 state:D stack:28328 pid:9500 tgid:9488 ppid:5881 task_flags:0x400040 flags:0x00004004 [ 315.854017][ T31] Call Trace: [ 315.857468][ T31] [ 315.860402][ T31] __schedule+0x1798/0x4cc0 [ 315.864892][ T31] ? kasan_save_free_info+0x46/0x50 [ 315.870428][ T31] ? __lock_acquire+0xab9/0xd20 [ 315.875317][ T31] ? __lock_acquire+0xab9/0xd20 [ 315.880294][ T31] ? __pfx___schedule+0x10/0x10 [ 315.885175][ T31] ? schedule+0x91/0x360 [ 315.889578][ T31] schedule+0x165/0x360 [ 315.893747][ T31] schedule_preempt_disabled+0x13/0x30 [ 315.899508][ T31] __mutex_lock+0x7e6/0x1350 [ 315.904098][ T31] ? __mutex_lock+0x5bb/0x1350 [ 315.908968][ T31] ? misc_open+0x51/0x330 [ 315.913310][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 315.918697][ T31] misc_open+0x51/0x330 [ 315.922885][ T31] chrdev_open+0x4c9/0x5e0 [ 315.927670][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 315.932618][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 315.939012][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 315.943956][ T31] do_dentry_open+0x950/0x13f0 [ 315.948860][ T31] vfs_open+0x3b/0x340 [ 315.952963][ T31] ? path_openat+0x2ecd/0x3830 [ 315.959399][ T31] path_openat+0x2ee5/0x3830 [ 315.964009][ T31] ? arch_stack_walk+0xfc/0x150 [ 315.969994][ T31] ? stack_depot_save_flags+0x40/0x860 [ 315.975486][ T31] ? __pfx_path_openat+0x10/0x10 [ 315.980822][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.986909][ T31] do_filp_open+0x1fa/0x410 [ 315.991793][ T31] ? __lock_acquire+0xab9/0xd20 [ 315.996665][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 316.001763][ T31] ? _raw_spin_unlock+0x28/0x50 [ 316.006623][ T31] ? alloc_fd+0x64c/0x6c0 [ 316.011015][ T31] do_sys_openat2+0x121/0x1c0 [ 316.015699][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 316.021143][ T31] ? exc_page_fault+0x76/0xf0 [ 316.025817][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 316.031356][ T31] __x64_sys_openat+0x138/0x170 [ 316.036224][ T31] do_syscall_64+0xfa/0x3b0 [ 316.040865][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.046072][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.052427][ T31] ? clear_bhb_loop+0x60/0xb0 [ 316.057107][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.063547][ T31] RIP: 0033:0x7fb5fc18eec9 [ 316.068070][ T31] RSP: 002b:00007fb5fcfbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 316.077550][ T31] RAX: ffffffffffffffda RBX: 00007fb5fc3e6180 RCX: 00007fb5fc18eec9 [ 316.085536][ T31] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 316.093536][ T31] RBP: 00007fb5fc211f91 R08: 0000000000000000 R09: 0000000000000000 [ 316.101541][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.109777][ T31] R13: 00007fb5fc3e6218 R14: 00007fb5fc3e6180 R15: 00007ffd09411278 [ 316.117869][ T31] [ 316.120892][ T31] INFO: task syz.1.993:9555 blocked for more than 145 seconds. [ 316.128448][ T31] Not tainted syzkaller #0 [ 316.133363][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.142469][ T31] task:syz.1.993 state:D stack:28328 pid:9555 tgid:9554 ppid:5864 task_flags:0x400040 flags:0x00004004 [ 316.154846][ T31] Call Trace: [ 316.158316][ T31] [ 316.161257][ T31] __schedule+0x1798/0x4cc0 [ 316.165767][ T31] ? kasan_save_free_info+0x46/0x50 [ 316.171072][ T31] ? __lock_acquire+0xab9/0xd20 [ 316.175933][ T31] ? __lock_acquire+0xab9/0xd20 [ 316.181156][ T31] ? __pfx___schedule+0x10/0x10 [ 316.186054][ T31] ? schedule+0x91/0x360 [ 316.191296][ T31] schedule+0x165/0x360 [ 316.195488][ T31] schedule_preempt_disabled+0x13/0x30 [ 316.201146][ T31] __mutex_lock+0x7e6/0x1350 [ 316.205749][ T31] ? __mutex_lock+0x5bb/0x1350 [ 316.210873][ T31] ? misc_open+0x51/0x330 [ 316.215216][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 316.220421][ T31] misc_open+0x51/0x330 [ 316.224589][ T31] chrdev_open+0x4c9/0x5e0 [ 316.229152][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 316.234117][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 316.240720][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 316.245658][ T31] do_dentry_open+0x950/0x13f0 [ 316.250549][ T31] vfs_open+0x3b/0x340 [ 316.254621][ T31] ? path_openat+0x2ecd/0x3830 [ 316.259578][ T31] path_openat+0x2ee5/0x3830 [ 316.264172][ T31] ? arch_stack_walk+0xfc/0x150 [ 316.269359][ T31] ? stack_depot_save_flags+0x40/0x860 [ 316.274848][ T31] ? __pfx_path_openat+0x10/0x10 [ 316.279826][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.285904][ T31] do_filp_open+0x1fa/0x410 [ 316.290470][ T31] ? __lock_acquire+0xab9/0xd20 [ 316.295329][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 316.300715][ T31] ? _raw_spin_unlock+0x28/0x50 [ 316.305581][ T31] ? alloc_fd+0x64c/0x6c0 [ 316.310026][ T31] do_sys_openat2+0x121/0x1c0 [ 316.314717][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 316.320017][ T31] ? exc_page_fault+0x76/0xf0 [ 316.324711][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 316.330337][ T31] __x64_sys_openat+0x138/0x170 [ 316.335221][ T31] do_syscall_64+0xfa/0x3b0 [ 316.339770][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.344968][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.351118][ T31] ? clear_bhb_loop+0x60/0xb0 [ 316.355796][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.361953][ T31] RIP: 0033:0x7f60e518eec9 [ 316.366354][ T31] RSP: 002b:00007f60e60bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 316.374821][ T31] RAX: ffffffffffffffda RBX: 00007f60e53e5fa0 RCX: 00007f60e518eec9 [ 316.382829][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 316.391195][ T31] RBP: 00007f60e5211f91 R08: 0000000000000000 R09: 0000000000000000 [ 316.399498][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.407739][ T31] R13: 00007f60e53e6038 R14: 00007f60e53e5fa0 R15: 00007ffc25fdf5a8 [ 316.415731][ T31] [ 316.419055][ T31] INFO: task syz-executor:9561 blocked for more than 145 seconds. [ 316.426850][ T31] Not tainted syzkaller #0 [ 316.431809][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.440575][ T31] task:syz-executor state:D stack:27240 pid:9561 tgid:9561 ppid:1 task_flags:0x400040 flags:0x00004000 [ 316.452883][ T31] Call Trace: [ 316.456166][ T31] [ 316.459244][ T31] __schedule+0x1798/0x4cc0 [ 316.463761][ T31] ? kasan_save_free_info+0x46/0x50 [ 316.469045][ T31] ? __lock_acquire+0xab9/0xd20 [ 316.473903][ T31] ? __lock_acquire+0xab9/0xd20 [ 316.479014][ T31] ? __pfx___schedule+0x10/0x10 [ 316.483859][ T31] ? schedule+0x91/0x360 [ 316.488157][ T31] schedule+0x165/0x360 [ 316.492316][ T31] schedule_preempt_disabled+0x13/0x30 [ 316.497928][ T31] __mutex_lock+0x7e6/0x1350 [ 316.502522][ T31] ? __mutex_lock+0x5bb/0x1350 [ 316.507677][ T31] ? misc_open+0x51/0x330 [ 316.512023][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 316.517077][ T31] misc_open+0x51/0x330 [ 316.521316][ T31] chrdev_open+0x4c9/0x5e0 [ 316.525824][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 316.530829][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 316.537349][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 316.542284][ T31] do_dentry_open+0x950/0x13f0 [ 316.547043][ T31] vfs_open+0x3b/0x340 [ 316.551218][ T31] ? path_openat+0x2ecd/0x3830 [ 316.556012][ T31] path_openat+0x2ee5/0x3830 [ 316.560634][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 316.566096][ T31] ? count_memcg_event_mm+0x21/0x260 [ 316.571714][ T31] ? __pfx_path_openat+0x10/0x10 [ 316.576661][ T31] ? __pfx___up_read+0x10/0x10 [ 316.581469][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 316.586775][ T31] do_filp_open+0x1fa/0x410 [ 316.591416][ T31] ? __lock_acquire+0xab9/0xd20 [ 316.596360][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 316.601778][ T31] ? _raw_spin_unlock+0x28/0x50 [ 316.606627][ T31] ? alloc_fd+0x64c/0x6c0 [ 316.611027][ T31] do_sys_openat2+0x121/0x1c0 [ 316.615878][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 316.621138][ T31] ? fd_install+0x97/0x540 [ 316.625606][ T31] ? fd_install+0x30d/0x540 [ 316.630484][ T31] __x64_sys_openat+0x138/0x170 [ 316.635358][ T31] do_syscall_64+0xfa/0x3b0 [ 316.639921][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.645121][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.651249][ T31] ? clear_bhb_loop+0x60/0xb0 [ 316.655937][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.662175][ T31] RIP: 0033:0x7f4a6e38d691 [ 316.666599][ T31] RSP: 002b:00007ffe92aa16e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 316.675163][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4a6e38d691 [ 316.683457][ T31] RDX: 0000000000000002 RSI: 00007f4a6e41299a RDI: 00000000ffffff9c [ 316.691734][ T31] RBP: 00007f4a6e41299a R08: 0000000000000000 R09: 00007f4a6f11d6c0 [ 316.699774][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 316.707872][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 316.715894][ T31] [ 316.719223][ T31] INFO: task syz-executor:9562 blocked for more than 146 seconds. [ 316.727034][ T31] Not tainted syzkaller #0 [ 316.732075][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.740769][ T31] task:syz-executor state:D stack:27808 pid:9562 tgid:9562 ppid:1 task_flags:0x400040 flags:0x00004000 [ 316.752968][ T31] Call Trace: [ 316.756251][ T31] [ 316.759274][ T31] __schedule+0x1798/0x4cc0 [ 316.763785][ T31] ? kasan_save_free_info+0x46/0x50 [ 316.770327][ T31] ? __lock_acquire+0xab9/0xd20 [ 316.775199][ T31] ? __lock_acquire+0xab9/0xd20 [ 316.780141][ T31] ? __pfx___schedule+0x10/0x10 [ 316.785025][ T31] ? schedule+0x91/0x360 [ 316.789332][ T31] schedule+0x165/0x360 [ 316.793511][ T31] schedule_preempt_disabled+0x13/0x30 [ 316.800538][ T31] __mutex_lock+0x7e6/0x1350 [ 316.805146][ T31] ? __mutex_lock+0x5bb/0x1350 [ 316.810185][ T31] ? misc_open+0x51/0x330 [ 316.814524][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 316.819630][ T31] misc_open+0x51/0x330 [ 316.823796][ T31] chrdev_open+0x4c9/0x5e0 [ 316.828325][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 316.833278][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 316.840724][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 316.845675][ T31] do_dentry_open+0x950/0x13f0 [ 316.850510][ T31] vfs_open+0x3b/0x340 [ 316.854581][ T31] ? path_openat+0x2ecd/0x3830 [ 316.859401][ T31] path_openat+0x2ee5/0x3830 [ 316.863997][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 316.869882][ T31] ? count_memcg_event_mm+0x21/0x260 [ 316.875217][ T31] ? __pfx_path_openat+0x10/0x10 [ 316.880465][ T31] ? __pfx___up_read+0x10/0x10 [ 316.885245][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 316.890590][ T31] do_filp_open+0x1fa/0x410 [ 316.895093][ T31] ? __lock_acquire+0xab9/0xd20 [ 316.900222][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 316.905261][ T31] ? _raw_spin_unlock+0x28/0x50 [ 316.910195][ T31] ? alloc_fd+0x64c/0x6c0 [ 316.914540][ T31] do_sys_openat2+0x121/0x1c0 [ 316.919508][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 316.924714][ T31] ? fd_install+0x97/0x540 [ 316.929409][ T31] ? fd_install+0x30d/0x540 [ 316.933906][ T31] __x64_sys_openat+0x138/0x170 [ 316.938788][ T31] do_syscall_64+0xfa/0x3b0 [ 316.943294][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.948574][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.954644][ T31] ? clear_bhb_loop+0x60/0xb0 [ 316.959621][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.965517][ T31] RIP: 0033:0x7f85fc78d691 [ 316.969968][ T31] RSP: 002b:00007fffc47a00c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 316.978942][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f85fc78d691 [ 316.986918][ T31] RDX: 0000000000000002 RSI: 00007f85fc81299a RDI: 00000000ffffff9c [ 316.995149][ T31] RBP: 00007f85fc81299a R08: 0000000000000000 R09: 00007f85fd51d6c0 [ 317.003253][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 317.011329][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 317.019657][ T31] [ 317.022765][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 317.031822][ T31] [ 317.031822][ T31] Showing all locks held in the system: [ 317.039565][ T31] 1 lock held by khungtaskd/31: [ 317.044426][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 317.054721][ T31] 2 locks held by getty/5626: [ 317.059430][ T31] #0: ffff88814d3970a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 317.069264][ T31] #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 317.079812][ T31] 3 locks held by kworker/0:6/5984: [ 317.085018][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 317.096061][ T31] #1: ffffc900051b7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 317.109930][ T31] #2: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 317.121321][ T31] 2 locks held by syz.0.959/9420: [ 317.126340][ T31] #0: ffff88807c706100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 317.136155][ T31] #1: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 317.146426][ T31] 2 locks held by syz.4.966/9451: [ 317.151503][ T31] #0: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 317.161716][ T31] #1: ffff88807c706100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 317.171756][ T31] 3 locks held by syz.2.973/9468: [ 317.176792][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 317.185274][ T31] #1: ffff888029a6d100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 317.194913][ T31] #2: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 317.205215][ T31] 1 lock held by syz.2.973/9474: [ 317.210300][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 317.218816][ T31] 1 lock held by syz.3.978/9489: [ 317.224096][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 317.232896][ T31] 1 lock held by syz.3.978/9500: [ 317.243410][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 317.251961][ T31] 1 lock held by syz.1.993/9555: [ 317.256892][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 317.265576][ T31] 1 lock held by syz-executor/9561: [ 317.270904][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 317.279558][ T31] 1 lock held by syz-executor/9562: [ 317.284810][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 317.293512][ T31] 1 lock held by syz-executor/9564: [ 317.298902][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 317.307391][ T31] 1 lock held by syz-executor/9566: [ 317.312581][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 317.321452][ T31] 1 lock held by syz-executor/9568: [ 317.326652][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 317.335170][ T31] 1 lock held by syz-executor/9571: [ 317.340394][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 317.349126][ T31] 1 lock held by syz-executor/9572: [ 317.354324][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 317.362819][ T31] 1 lock held by syz-executor/9574: [ 317.368066][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 317.376534][ T31] 1 lock held by syz-executor/9576: [ 317.381965][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 317.390779][ T31] 1 lock held by syz-executor/9578: [ 317.395977][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 317.404491][ T31] 1 lock held by syz-executor/9581: [ 317.409862][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 317.418446][ T31] 1 lock held by syz-executor/9582: [ 317.423646][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 317.432143][ T31] 1 lock held by syz-executor/9584: [ 317.437632][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 317.446101][ T31] 1 lock held by syz-executor/9586: [ 317.451377][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 317.459890][ T31] 1 lock held by syz-executor/9588: [ 317.465093][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 317.473857][ T31] [ 317.476183][ T31] ============================================= [ 317.476183][ T31] [ 317.484715][ T31] NMI backtrace for cpu 0 [ 317.484731][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 317.484749][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 317.484759][ T31] Call Trace: [ 317.484766][ T31] [ 317.484774][ T31] dump_stack_lvl+0x189/0x250 [ 317.484800][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.484819][ T31] ? __pfx__printk+0x10/0x10 [ 317.484854][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 317.484879][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 317.484903][ T31] ? __pfx__printk+0x10/0x10 [ 317.484929][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 317.484954][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 317.484979][ T31] watchdog+0xf93/0xfe0 [ 317.485006][ T31] ? watchdog+0x1de/0xfe0 [ 317.485032][ T31] kthread+0x70e/0x8a0 [ 317.485055][ T31] ? __pfx_watchdog+0x10/0x10 [ 317.485074][ T31] ? __pfx_kthread+0x10/0x10 [ 317.485095][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.485111][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.485126][ T31] ? __pfx_kthread+0x10/0x10 [ 317.485146][ T31] ret_from_fork+0x439/0x7d0 [ 317.485166][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 317.485189][ T31] ? __switch_to_asm+0x39/0x70 [ 317.485208][ T31] ? __switch_to_asm+0x33/0x70 [ 317.485225][ T31] ? __pfx_kthread+0x10/0x10 [ 317.485246][ T31] ret_from_fork_asm+0x1a/0x30 [ 317.485280][ T31] [ 317.485287][ T31] Sending NMI from CPU 0 to CPUs 1: [ 317.631742][ C1] NMI backtrace for cpu 1 [ 317.631759][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 317.631776][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 317.631785][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 317.631806][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 c9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 317.631818][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 317.631832][ C1] RAX: 430d4f000b7ecb00 RBX: ffffffff819683f8 RCX: 430d4f000b7ecb00 [ 317.631843][ C1] RDX: 0000000000000001 RSI: ffffffff8d9ba42d RDI: ffffffff8be33f00 [ 317.631853][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 317.631865][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa3a630 [ 317.631875][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 317.631885][ C1] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 317.631898][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.631909][ C1] CR2: 00007f198a0e4de0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 317.631924][ C1] Call Trace: [ 317.631931][ C1] [ 317.631936][ C1] default_idle+0x13/0x20 [ 317.631953][ C1] default_idle_call+0x74/0xb0 [ 317.631971][ C1] do_idle+0x1e8/0x510 [ 317.631986][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 317.632002][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.632018][ C1] ? __pfx_do_idle+0x10/0x10 [ 317.632036][ C1] ? do_idle+0x4ef/0x510 [ 317.632052][ C1] cpu_startup_entry+0x44/0x60 [ 317.632066][ C1] start_secondary+0x101/0x110 [ 317.632085][ C1] common_startup_64+0x13e/0x147 [ 317.632111][ C1] [ 317.632726][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 317.814285][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 317.823380][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 317.833425][ T31] Call Trace: [ 317.836708][ T31] [ 317.839628][ T31] dump_stack_lvl+0x99/0x250 [ 317.844246][ T31] ? __asan_memcpy+0x40/0x70 [ 317.848913][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.854101][ T31] ? __pfx__printk+0x10/0x10 [ 317.858691][ T31] vpanic+0x281/0x750 [ 317.862659][ T31] ? __pfx_vpanic+0x10/0x10 [ 317.867145][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 317.872682][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.877872][ T31] panic+0xb9/0xc0 [ 317.881605][ T31] ? __pfx_panic+0x10/0x10 [ 317.886008][ T31] ? irq_work_queue+0xc3/0x140 [ 317.890768][ T31] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 317.896916][ T31] watchdog+0xfd2/0xfe0 [ 317.901066][ T31] ? watchdog+0x1de/0xfe0 [ 317.905392][ T31] kthread+0x70e/0x8a0 [ 317.909454][ T31] ? __pfx_watchdog+0x10/0x10 [ 317.914297][ T31] ? __pfx_kthread+0x10/0x10 [ 317.918875][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.924057][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.929246][ T31] ? __pfx_kthread+0x10/0x10 [ 317.933822][ T31] ret_from_fork+0x439/0x7d0 [ 317.938401][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 317.943504][ T31] ? __switch_to_asm+0x39/0x70 [ 317.948255][ T31] ? __switch_to_asm+0x33/0x70 [ 317.953006][ T31] ? __pfx_kthread+0x10/0x10 [ 317.957584][ T31] ret_from_fork_asm+0x1a/0x30 [ 317.962347][ T31] [ 317.965655][ T31] Kernel Offset: disabled [ 317.969963][ T31] Rebooting in 86400 seconds..