last executing test programs: 23.434199553s ago: executing program 4 (id=138): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x1, 0x70bd2d, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}}, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa4, r1, 0x704, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x48001}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0xe4, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xaa, 0x6, "c245016c15f138f8c0994a779620a56e1bf908a1077065914234d8c0f987cd8337f22b62eed0737623488d631bebe60512b186f52b415cd2d86ae7ce20678a76bb4cd7fab076c1d7d29137a58975649602dcf1f286ea4d39b8602292edd46248132a051eb7f5a3fd8e85d71c52166b651abc37423fd2d96579083c90e730c06edb7226c57c135030ad2f6242e8ba2b5f4451b300bf97a279a57885f31535d5aa676a91e6f75e"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x2}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELRULE={0xd0, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_RULE_USERDATA={0xaa, 0x7, 0x1, 0x0, "1efb75615cf3670a315b9019011ef743d4d5efa13e6bb2fcbce5cca7ca0a9f27f18a08cead37c3c3abe0e72fb4cd40e3ce265ddebd10bce2d5906c6ac17e5679f65357c07a244e752b771cc0d1ed5a144f9b4a7940bf23d516691cd4563cb78f51901928f3a2f8e46b929b299481dec38f8b66e1641a1795bfa6abc92a40e4267f635afaab276f44a2f6d6774a9ee79c19179ed39d4db34617349b6cbeae2751cde4909f6af0"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x1fc}, 0x1, 0x0, 0x0, 0x40}, 0x40040011) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40440}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@getsadinfo={0x1c, 0x23, 0x8, 0x70bd2a, 0x25dfdbfe, 0x0, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40050) writev(r0, &(0x7f0000001b40)=[{&(0x7f0000000680)="55cb80550c03274c0cb2b64a36d8985ceef60314feb35c5365b5919200363e", 0x1f}, {&(0x7f00000006c0)="47840c624f4ed5fe6b09a291a3fa42c6284308165b4cc5a00991f87cd39d13d72f0a1e42e9cfaeff1f8804626a10b8b2797ab7d0fe18221e8f45798da411c4d68ea497b758a4b3390353dabbe1c7c2158e0dbdfcb56f28433899775ed904d4040546af3d9a89cf04c00954f7d169e1650beccad4ba1e98771d092ff12a3bc408c005230859c01596f2c3c70c4b060238ab0e335e10a55b3944662814f963fb2355ac9e7b29fefc9a53b46d99ff9e7fe9efbad551fbb30787d48056b79a1dee666411c3eeddcd36df1e4a6b0db404f014b41bb2cb2b94739dc03f2b7ab9c93ba782fc32fd662acdbed53c0ff2d75eba28c59bb7e0", 0xf4}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="001af2c699201d0934336c3ab30ddcb21c126d4c61668846db2bffda9766a7546fb627b9b155e588333a02dc62a5616008c4b758cc7cc30beffed3e550ad0c2eeabd9e6ac3b9ae7cdb505bcfb78ff3c47c15318437834b93172fcbfa88aafb2937045b54c6e2ea61f9589c75db1c85edb9", 0x71}, {&(0x7f0000001840)}, {&(0x7f0000001880)="39008f155fc3c80975f0427dfa2486a6ab3278d12d8445c23d4b5a4dcf04780823e70c7ee93b34752eb677d75f9b94db8f920d4783dfa45dd2bc8d4b17cb9dbeb0ab8c9d1801bbbb9d6024a3d6cec18d4495273c8554e5d9a4aa28b660fe67a2baa1debcfd9a81dbeb4d964f9680296c6d283f31f8c696e1177eca2c4e1ed6650d72df88fb5de9536009200bbb92ac4bc0f1783145e579", 0x97}, {&(0x7f0000001940)="dc1a07c6e920862ee7e564609f64561f8bfd6b8d4389c260854418b453b56b21ea914dbcc7dd3ad9d74a6c7fa93f400dbc2c6961ea6f0877e4666ed92183a9304fcffe303bd2e84d334efaf13fba0fcab670d727a791d4b61d936d50db9096f2c5bb4a98cedcec74b6300e10ffbdf8f725496be222c0f35d027c0acd2973663b6bfaac4d4d76d30d7fb6f2c7755152d3f990b9abb44efcfabc861d97f3117df952bb852d0fc11a24883732d15a6a6f3ebc977196056a2468a2b186f0fe6a0c4df6a75a902b73653c479941084d08bd5b8f003a38ffbd4ca1a388a205df213eca0147abd7d9179be0b5664810d104b6", 0xef}, {&(0x7f0000001a40)="b7f6786661a0dda7e189bfc3ae37e53e224c7b46c4f684b268cfb014d0e9970603e65a0b77543f923e526715d0f491ffeff504086a8d34c3434a62a67426260a7b472e17d6a743f60e604587ad228e1813313db1d9ba5254d531ab9284c42216691f4e45061bb96d0208cdf2d7223703d13dafee6cffb5f72bd3f72f004c1a7e6c9f7e570f26769392b47160c5bdaf7e15e8a52daff131e8cdb8d9585e23d9d6bd66fbca5223684f6e81ba39ce67047ec83df648662cc5b70ec8931d488254a782681771bb73c0fe124e", 0xca}], 0x8) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001c40)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001c80)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001cc0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x6c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e40), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x1c, r6, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001f80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r8, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2d}}]}, 0x1c}}, 0x11) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000020c0), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000002180)={&(0x7f0000002080), 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x3c, r9, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x5) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x20104000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x1c, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa847}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x2, &(0x7f00000022c0)=""/4096, &(0x7f00000032c0)=0x1000) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x2, &(0x7f0000003300)=""/46, &(0x7f0000003340)=0x2e) unshare(0x48020000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000003480)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003440)={&(0x7f00000033c0)={0x6c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLST={0x50, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x382b1203}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59f318bd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71203fdf}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003500), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x20, r12, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x39}}}}, [""]}, 0x20}}, 0x4) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r13, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x4048014) 23.056848807s ago: executing program 0 (id=140): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x198, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0xa, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x168, 0x2, [@TCA_CGROUP_EMATCHES={0x164, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x150, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x81, 0x5, "3cac65c2aa79a098a4d0fff8150e81d65c8fa4c78019994db89743249f484d73428b052bcfef10f0df4c749611f06d6d64a172c2c4e65b43b209970676679853410c60686b3151571b592c454630f21d7036dc3bb32b752696586f0a555492a2eff496ba98eca5904a02b061e4734e59ebd15e4152400c617950e72bf0"}, @TCA_EM_IPT_MATCH_DATA={0x8e, 0x5, "e9ea2dba256194f3853d8b43eeb60e660d6e033a0512020a10af8d83fdfe03030d9a298b132f571adb5ebcc77685f5544d6630027d9b664ad458f0276a15ba01a6bc8fe8774616b3561f5c7239120ed70a09b63f8bc7d5a4349fd15b0a458becbd229dd3e1e259d5f29935a1ebc351cf1c12803ff995bbbd9eda1f4d5981ce0d70c83fd9551437dc0562"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20044804}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRESHEX=r3, @ANYBLOB="0000000095280500240012800c0001006d6163766c616e00140002800800010010000000080003000200000008000500", @ANYRES32=r2, @ANYBLOB="6fbe4b1deaec431d64872c2e24387abcb5171884575ce424375c2fa0e405bf0c1fb1c31384de1e9c35b807620f323222bbefbfffd0c98c56cfaf42aedc6557ee37ec049852a1c97ad55bd9c95423e86ef83480ccf98e4e8e43019f3e843dd4e7f1c9a0b50d1448223a9721b6ee51c552c689bc88be2ff1005d38803d4ad482786c1c40cacb39f4befab0fdbc5336d2060b85066a6391c14b95c4747e81128439addb95a969e1a2bc682b7689d83482394d5f1eb01570af42068c517f0ac7d2d6df9fb71167a0e0c68a7f"], 0x4c}}, 0x4000040) 22.898517697s ago: executing program 4 (id=142): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x38, 0x2, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}]}, 0x38}}, 0x804) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x3e, &(0x7f00000002c0)=[{&(0x7f0000000880)={0x34, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x14, 0x37, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x14}}]}, 0x34}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x28, r4, 0xdac7a804b810efff, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r6, {0x1}, {0x9, 0x1b}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, 0x0, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r1, 0x0, 0x0, 0x800) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="f78d9c4a7f9e8f690000ffc8f3be52163448412ba8dafbdb7cda1cb88c3db1d0358e184c4fd52ea5400b510b281b3008f25aef6dd1d8ec2e22ead3be05048107d87d716214b67879e0be3bdebc50d8d1f83c00821611521f53898c0398b2feeca91698f42450543125ca27f63d60356fa08e770943b9584345908059ff0b746fa18149476dd76e8c4e07019b3ad9a56a258c0c642fb9c258be8bfd2a27d46e74338a812327edcd3331dc03d135880187881a67354347e02e77ba78e20f56ceeb2256b54f0e688dee1b8a98136848ea0123f281", 0xd3}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/40, 0x28}], 0x1}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) syz_emit_ethernet(0x7e, &(0x7f0000002340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60f3680900482ffffc020000000000000000000000000000ff020000000000000000000000000001242088a80000000003ff000000000800000086dd88a888be08"], 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a0000000000000000000006"], &(0x7f0000000f40)=""/4074, 0x82, 0xfea, 0x1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) 22.54729047s ago: executing program 0 (id=145): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001a1401"], 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x1a0, 0x1403, 0x800, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvtap0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'tunl0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40081c4}, 0x64000080) 22.255663281s ago: executing program 0 (id=150): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000030008e89f00000000c9970000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000000)="2e000300010003", 0x7) r2 = socket(0x23, 0x80805, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a40000003c0007010000000000000000027c00008400fc80cb0fd700fdc72987175719993978e7220bd8dd02d2cc6d0ec73e75e5ab312c419e1d90634c78016c22a84c44b90b467bc66717f5b307a10545a75b5dd2bf2eed0eb0b1fb79441d2144466d23f4eeffeafd60d972202875266b1ae20559c3c9a693a646dba0ecbb55a64ac6c211aa40ddaabf30a21d0907b0a64674092ca318250c00018006000a00080a0000"], 0xa4}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x6f, 0x0, 0x2}, 0xc) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000180)}, 0x10) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x17c, r5, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @mcast1, 0xbf}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc08}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4401}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x69}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd67}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @empty, 0xc4}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000040}, 0x200400c0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b2b, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) syz_emit_ethernet(0x4e, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) (async) bind$alg(r9, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002008000"/38], 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18001100a5f60000276820b7000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0xc, &(0x7f00000000c0), 0xfff1}, 0x90) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c00003800048032001280a437fa54a0cc5d1124ab2b2806e7f423b6e257262cccca9a82234d912f8d4196192c1ddd5dcb13d7f0921142632c000083ac089847c7bcb6b2fd330f01931b480a5ccf8a72f002ecd9c30f2879d11de518d50ee6086f1d7dfba79cd2cf15ba4ce5cac0979776dfadab7d85c61bc0d9568a26b30082539b85eecd0b02cc1a8913863ff8c0c438df0480d8e3ee510c24e0d4bbcaccf2a87cd07f7438349b69d2bdbe11bf75b119c1d6e742e96d042a25b5b14c2a1f13b975f44b3f09dc0376b763d37998185509467c7bb7817f34a19efe8351beb5f4eccdf10e729cd97247b40ea2891e0b689db496be9de6fb59ee64b944db6fee4db681fb2745e3415ce1367b0032afc225cfb1ac11f268f5563723b7336f9da2838036746e441e6e"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000a80)=ANY=[@ANYBLOB="dc0000006404020028bd7000ffdbdf250a7632c7b3b03565647640a5807892522af3404356e0a553510fe33dc0fa05ac6c86652b566073a5d4fb5a5d06cd40bad4bd9aa06ba50d92e4c2d655368b017f1bc50d0624259c059270369118d6c297044d13481658d4fd3ed85a303e217d3da21d8478557419388378d66bc602f3652163db2cea44cad7e953a2bffddb1a8cfe9216908676fff864b64ed0da728a7632bba2e6d264848e6567a416f8049195d98947b5bc639c84f1f4eb4d494ead85a6bc4765e45a0486927cde47716144b35cf25d80ee91357cda000000000000"], 0xdc}, 0x1, 0x0, 0x0, 0x400c000}, 0x4c085) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x48}}, 0x0) (async) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="649594c2", @ANYRES16=r8, @ANYBLOB="10002dbd7000fedbdf250c00000008000600ff0100003400018008000b0073697000060004004e210000080009004a000000060001000a00000007000600666f000006000100020000000800040009000000080006004905000004000380"], 0x64}}, 0x4008897) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000240)) 22.204207821s ago: executing program 4 (id=151): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000240)='I', 0x1, 0x2004c841, &(0x7f0000000200)={0xa, 0x4e23, 0x808001, @loopback, 0xfffffffb}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)={0x0, 0x94, 0x1, "ff"}, 0x9) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r3, 0x200}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r3, 0x3}, 0x8) 22.012219525s ago: executing program 4 (id=154): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (fail_nth: 1) 22.011064418s ago: executing program 0 (id=155): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) write$tun(0xffffffffffffffff, &(0x7f0000000380)={@val={0xa}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @multicast, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x6000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x86dd, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100, @val=0x80}}}}}}}}, 0x3e) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f00000001c0)=0x7f00, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000ac1414aa0000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000001fe8000000000000000000000000000aa3c0400000200000002000a0000000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000440)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000100)='GPL\x00'}, 0x48) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, &(0x7f00000000c0)="d2664e3de44e5781659d1c2224a19de44fba87cf2fcf751c9b218685", 0xffffffffffffffe7, 0x2c000891, 0x0, 0x0) shutdown(r2, 0x1) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000080), 0x4) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000000)={r9, 0xfffffffa}, 0x8) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r10, 0x114, 0x2, &(0x7f00000003c0)={{&(0x7f00000002c0)=""/44, 0x2c}, &(0x7f0000000300), 0x14}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) 21.518520322s ago: executing program 4 (id=157): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x2}, 0x20000080) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000070100800c0001"], 0x114}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x0, 0x400, 0x30, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0x7, 0x8}}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000527bd7000fddbdf251100000008001500c000000008000100", @ANYRES32=r7, @ANYBLOB="080015000000000008001500000000000800150000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200070000000800040005000000080001000200"], 0x7c}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r13, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x2c, r14, 0x1, 0x70bd26, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x20, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r15, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x3c}}, 0x40000) 21.308285347s ago: executing program 0 (id=161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "2ea101ab090c0a75e57de560ecd9e9980fa794b73644cc05cd4d079809556e06", "777f7aef52eb9fa85d4b788af65280a2d857f95d446f1ee8049e26b9751e9b78", "4db01cdef103294f3acb7a7dfed1411e139c0e05d8c80fa87a21705be3111664", "2bd1f1e94cf5344e6dc0d0b93043a7096d44905b996ba7c55518eac44aaa3163", "e0f569720c553c0a577f8f99e81dd584822ed1f66d1024ba5d75fdc1591cab2d", "68fc0fe43b73999d43efb405", 0x2, 0xe, 0x4, 0x200, 0x7}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1f59}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWTABLE={0xb8, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x78, 0x6, "3475357ffdc93350aa79a2c3df2f3ede90e0df498fa6b579c8fd5b1a8b5929a87658b42f6ea5cec0447630734385de58c65148a91956a8bdeda9c8c39e0d5278f1aad30c0c0db9e9b882755fcfa8a554278e7ad656628254452145b09b68eba6f4d03915662f753f97d363f822a373dc754ff578"}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffb, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffff8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}}, 0x0) 20.956216878s ago: executing program 4 (id=164): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) write$nci(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="7109016802"], 0x5) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, r3, 0x1, 0x1, 0x2, 0xe0, "628ab484f7c065523f8f0e01943baf4695e2c0b68311fd0b3a25aa437fa00b45e76ff2be59a1f150bb3709a66a50fdebeb544e48f204b8e6868291429c41f6", 0x34}, 0x60) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340), 0x4) 20.716533887s ago: executing program 0 (id=167): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (fail_nth: 2) 17.417880728s ago: executing program 2 (id=178): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x4a, 0x0, &(0x7f00000002c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r5, 0x6, 0xd, 0x0, &(0x7f0000000040)) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) sendfile(r7, r7, 0x0, 0x5) 17.34347319s ago: executing program 3 (id=179): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000004800)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f0000004d00)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8805}, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, r1, 0x230, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x80}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xff}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x94}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x20004040) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x28, r6, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '#).-!'}]}, 0x28}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) 17.248315903s ago: executing program 2 (id=180): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}, 0x1, 0xfe80000000000000}, 0x0) 17.188622057s ago: executing program 2 (id=181): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @remote, 0x0, "d009000000000000006404000000dc3f0900000000000000d800000000000400", 0x0, 0x0, 0xfffffd, 0xfffffffd}, 0x3c) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r2, 0x29, 0xc8, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x4128, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) 17.164350188s ago: executing program 3 (id=182): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c030800626f6e64"], 0x3c}}, 0x0) 16.970235651s ago: executing program 3 (id=183): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2c, 0x4, 0xffff170e) r0 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x20008000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 16.969985469s ago: executing program 2 (id=184): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x24}, 0x94) 16.957062391s ago: executing program 3 (id=185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000100001000000000000003110a083000a40000000090a01010000000000000000f830f23c1b010000050c001040000000000000000108000f400000000a0900010073797a30000000000973797a3000000000140000001100010000000000000000000000000ab054740859f344a52640c616645c1cb7433dfdf4c15aa81ebddf60d61acc2f0e1b1525b230"], 0x68}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000240)='I', 0x1, 0x2004c841, &(0x7f0000000200)={0xa, 0x4e23, 0x808001, @loopback, 0xfffffffb}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)={0x0, 0x94, 0x1, "ff"}, 0x9) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x10000}, 0x10) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r5, 0x3}, 0x8) 16.881482309s ago: executing program 2 (id=186): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000080)=0x1, 0x4) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @void}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x648, 0x328, 0x328, 0xffffffff, 0x140, 0x140, 0x578, 0x578, 0xffffffff, 0x578, 0x578, 0x5, &(0x7f00000000c0), {[{{@ipv6={@local, @private1, [0xffffff00, 0xff, 0x7fffff7f], [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], 'bond0\x00', 'syzkaller1\x00', {}, {0xff}, 0x62, 0x6, 0x4, 0x28}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x4}}, @common=@ipv6header={{0x28}, {0xc0, 0x10}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv6=@rand_addr=' \x01\x00', @ipv6=@mcast1, @port=0x1, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private0, [0xff, 0xffffffff, 0xff000000, 0xff000000], [0xff000000, 0xffffff00, 0xffffff00], 'veth1_vlan\x00', 'bridge_slave_0\x00', {}, {}, 0x11, 0x4, 0x5, 0xe9022975a8253b99}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0xa5}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@loopback, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @icmp_id=0x68, @icmp_id=0x68}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast2, [0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffff00, 0xff], 'veth1_vlan\x00', 'vlan0\x00', {0xff}, {0xff}, 0x2e, 0x7d, 0x0, 0x5}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1, 0x0, 0x1}}, @common=@rt={{0x138}, {0xffff, [0x6, 0xb896], 0x8, 0x2, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @mcast2, @empty, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2c}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @local, @private1={0xfc, 0x1, '\x00', 0x1}], 0x10}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@multicast2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x29}, @port=0x4e24, @icmp_id=0x65}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x0) 16.823675865s ago: executing program 3 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x2c, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x5}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x0, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28}, 0x28) 16.794448593s ago: executing program 2 (id=188): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x8000000, 0x0, 0x3, 0x1}, 0x8) 16.787867009s ago: executing program 3 (id=189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000040801020000000000050000000600034065580000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x440) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r3, 0x0, 0x50, 0x0, &(0x7f0000002e40)=0x10) (async, rerun: 32) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e21, @private=0xa010101}}, 0x0, 0xf800}, &(0x7f0000000200)=0x90) (rerun: 32) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000002c0)={r4, 0x1, 0x20}, 0xc) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'hsr0\x00', 0x1000}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0xc00}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)=0x1) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$inet(0xa, 0x5, 0x84) listen(r6, 0x8) readv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00\r'], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 16.357256393s ago: executing program 1 (id=192): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}, 0x1, 0x0, 0xa00}, 0x0) 16.255514984s ago: executing program 1 (id=193): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c033400626f6e64"], 0x3c}}, 0x0) 16.233997559s ago: executing program 1 (id=194): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x70, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffff800, 0x8, 0x99f5, 0x2, 0x2}}]}]}}}]}, 0x70}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000140001800d00010075cba93a73"], 0x28}}, 0x0) socket(0x10, 0x803, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, 0x0, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_stats}) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 16.09059684s ago: executing program 1 (id=195): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2c, 0x4, 0xffff170e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x20008000) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 16.038218738s ago: executing program 1 (id=196): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x24}, 0x90) accept(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000040)=0x80) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000040)="0200000bcdb7f681", 0x8) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040}, 0x4800) 15.940136803s ago: executing program 1 (id=197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000500)={0x2, 0x4, {0x1, @usage=0xfffffffffffffffd, 0x0, 0x2, 0x9, 0x0, 0x5, 0x4, 0x20, @usage=0xaaa1, 0x1, 0xfa9f, [0x3, 0x6, 0xffffffff00000001, 0x6, 0x3, 0x7f]}, {0x2, @usage=0x3, 0x0, 0x5, 0x800, 0x5, 0x7, 0x9, 0x80, @struct={0x800, 0x2}, 0x10000, 0xffffffff, [0x2, 0x9, 0x1, 0x1, 0x100000001, 0xfffffffffffffff7]}, {0x9, @struct={0xffff, 0xa}, 0x0, 0x7, 0x7fffffff, 0x7, 0xda5, 0xf, 0x407, @usage=0x7, 0x3, 0x800, [0x8001, 0x1, 0xc47b, 0xfffffffffffffffa, 0xdb, 0x100000001]}, {0x1ff, 0x92d, 0x4}}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x5}}, 0x19) connect$tipc(r3, &(0x7f00000002c0)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000900)={{r0}, r1, 0xc, @inherit={0x58, &(0x7f00000000c0)={0x1, 0x2, 0xfffffffffffffffc, 0x200, {0x20, 0xffff, 0x800, 0x0, 0x5}, [0x40, 0x2]}}, @devid=r2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'pim6reg1\x00', @multicast}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0) close(r0) 5.567392354s ago: executing program 32 (id=167): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (fail_nth: 2) 5.526812116s ago: executing program 33 (id=164): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) write$nci(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="7109016802"], 0x5) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, r3, 0x1, 0x1, 0x2, 0xe0, "628ab484f7c065523f8f0e01943baf4695e2c0b68311fd0b3a25aa437fa00b45e76ff2be59a1f150bb3709a66a50fdebeb544e48f204b8e6868291429c41f6", 0x34}, 0x60) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340), 0x4) 1.057499875s ago: executing program 34 (id=188): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x8000000, 0x0, 0x3, 0x1}, 0x8) 1.020538782s ago: executing program 35 (id=189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000040801020000000000050000000600034065580000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x440) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r3, 0x0, 0x50, 0x0, &(0x7f0000002e40)=0x10) (async, rerun: 32) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e21, @private=0xa010101}}, 0x0, 0xf800}, &(0x7f0000000200)=0x90) (rerun: 32) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000002c0)={r4, 0x1, 0x20}, 0xc) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'hsr0\x00', 0x1000}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0xc00}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)=0x1) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$inet(0xa, 0x5, 0x84) listen(r6, 0x8) readv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00\r'], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 36 (id=197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000500)={0x2, 0x4, {0x1, @usage=0xfffffffffffffffd, 0x0, 0x2, 0x9, 0x0, 0x5, 0x4, 0x20, @usage=0xaaa1, 0x1, 0xfa9f, [0x3, 0x6, 0xffffffff00000001, 0x6, 0x3, 0x7f]}, {0x2, @usage=0x3, 0x0, 0x5, 0x800, 0x5, 0x7, 0x9, 0x80, @struct={0x800, 0x2}, 0x10000, 0xffffffff, [0x2, 0x9, 0x1, 0x1, 0x100000001, 0xfffffffffffffff7]}, {0x9, @struct={0xffff, 0xa}, 0x0, 0x7, 0x7fffffff, 0x7, 0xda5, 0xf, 0x407, @usage=0x7, 0x3, 0x800, [0x8001, 0x1, 0xc47b, 0xfffffffffffffffa, 0xdb, 0x100000001]}, {0x1ff, 0x92d, 0x4}}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x5}}, 0x19) connect$tipc(r3, &(0x7f00000002c0)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000900)={{r0}, r1, 0xc, @inherit={0x58, &(0x7f00000000c0)={0x1, 0x2, 0xfffffffffffffffc, 0x200, {0x20, 0xffff, 0x800, 0x0, 0x5}, [0x40, 0x2]}}, @devid=r2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'pim6reg1\x00', @multicast}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 80.344679][ T5852] cgroup: Unknown subsys name 'net' [ 80.498910][ T5852] cgroup: Unknown subsys name 'cpuset' [ 80.507960][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.179111][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.812747][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.830865][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.841599][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.849278][ T5877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.857076][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.857185][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.865328][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.874021][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.879387][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.892694][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.893578][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.900900][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.907811][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.915450][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.924016][ T5877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.935958][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.944520][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.952183][ T5185] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.953156][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.960247][ T5185] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.974600][ T5185] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.982386][ T5185] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.991863][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.019832][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.028266][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.608276][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 85.734334][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 85.823512][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 85.927632][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 85.938455][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 86.002478][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.009834][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.019146][ T5863] bridge_slave_0: entered allmulticast mode [ 86.026494][ T5863] bridge_slave_0: entered promiscuous mode [ 86.042500][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.049638][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.056839][ T5863] bridge_slave_1: entered allmulticast mode [ 86.064293][ T5863] bridge_slave_1: entered promiscuous mode [ 86.150151][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.157359][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.164462][ T5866] bridge_slave_0: entered allmulticast mode [ 86.172333][ T5866] bridge_slave_0: entered promiscuous mode [ 86.214333][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.221652][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.229190][ T5866] bridge_slave_1: entered allmulticast mode [ 86.237215][ T5866] bridge_slave_1: entered promiscuous mode [ 86.244359][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.251892][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.259305][ T5873] bridge_slave_0: entered allmulticast mode [ 86.267206][ T5873] bridge_slave_0: entered promiscuous mode [ 86.278113][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.312977][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.320214][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.327568][ T5873] bridge_slave_1: entered allmulticast mode [ 86.335025][ T5873] bridge_slave_1: entered promiscuous mode [ 86.344290][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.421742][ T5863] team0: Port device team_slave_0 added [ 86.453146][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.466096][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.489978][ T5863] team0: Port device team_slave_1 added [ 86.542382][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.555294][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.576981][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.584173][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.591753][ T5862] bridge_slave_0: entered allmulticast mode [ 86.599752][ T5862] bridge_slave_0: entered promiscuous mode [ 86.607318][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.614426][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.621979][ T5864] bridge_slave_0: entered allmulticast mode [ 86.630216][ T5864] bridge_slave_0: entered promiscuous mode [ 86.673016][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.680321][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.687521][ T5862] bridge_slave_1: entered allmulticast mode [ 86.694486][ T5862] bridge_slave_1: entered promiscuous mode [ 86.714440][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.722099][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.729265][ T5864] bridge_slave_1: entered allmulticast mode [ 86.736962][ T5864] bridge_slave_1: entered promiscuous mode [ 86.745252][ T5866] team0: Port device team_slave_0 added [ 86.764411][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.771484][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.797799][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.850983][ T5866] team0: Port device team_slave_1 added [ 86.883940][ T5873] team0: Port device team_slave_0 added [ 86.890642][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.908475][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.938725][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.950241][ T5872] Bluetooth: hci0: command tx timeout [ 86.962988][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.982640][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.999861][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.012757][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.022690][ T5872] Bluetooth: hci1: command tx timeout [ 87.049371][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.056398][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.082731][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.096941][ T5873] team0: Port device team_slave_1 added [ 87.102947][ T5872] Bluetooth: hci2: command tx timeout [ 87.102977][ T5881] Bluetooth: hci3: command tx timeout [ 87.114292][ T51] Bluetooth: hci4: command tx timeout [ 87.192089][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.203091][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.233800][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.321205][ T5863] hsr_slave_0: entered promiscuous mode [ 87.328323][ T5863] hsr_slave_1: entered promiscuous mode [ 87.337873][ T5862] team0: Port device team_slave_0 added [ 87.346271][ T5864] team0: Port device team_slave_0 added [ 87.352930][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.359971][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.386945][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.399817][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.406860][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.432777][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.446865][ T5862] team0: Port device team_slave_1 added [ 87.455128][ T5864] team0: Port device team_slave_1 added [ 87.532299][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.539909][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.565921][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.615271][ T5866] hsr_slave_0: entered promiscuous mode [ 87.621635][ T5866] hsr_slave_1: entered promiscuous mode [ 87.627902][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 87.633715][ T5866] Cannot create hsr debugfs directory [ 87.651253][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.658310][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.684526][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.709203][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.716252][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.742182][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.793577][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.803384][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.830030][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.853952][ T5873] hsr_slave_0: entered promiscuous mode [ 87.860641][ T5873] hsr_slave_1: entered promiscuous mode [ 87.867098][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 87.872851][ T5873] Cannot create hsr debugfs directory [ 88.037685][ T5864] hsr_slave_0: entered promiscuous mode [ 88.044008][ T5864] hsr_slave_1: entered promiscuous mode [ 88.050412][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 88.056708][ T5864] Cannot create hsr debugfs directory [ 88.122254][ T5862] hsr_slave_0: entered promiscuous mode [ 88.128632][ T5862] hsr_slave_1: entered promiscuous mode [ 88.134656][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 88.140921][ T5862] Cannot create hsr debugfs directory [ 88.508367][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.553428][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.565874][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.603479][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.682763][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.699728][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.733150][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.758760][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.824710][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.840500][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.850738][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.891422][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.978963][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.002011][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.015064][ T51] Bluetooth: hci0: command tx timeout [ 89.042747][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.065475][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.072477][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.094991][ T51] Bluetooth: hci1: command tx timeout [ 89.137541][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.151568][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.175232][ T51] Bluetooth: hci4: command tx timeout [ 89.180823][ T5881] Bluetooth: hci2: command tx timeout [ 89.180835][ T5872] Bluetooth: hci3: command tx timeout [ 89.183689][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.212553][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.236334][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.254838][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.262063][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.301936][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.309146][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.360142][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.457585][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.479791][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.521599][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.528787][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.542552][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.563345][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.574080][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.581219][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.596853][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.613192][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.620335][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.657297][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.664434][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.688758][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.724201][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.747270][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.754430][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.770798][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.777981][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.812246][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.819451][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.869917][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.877133][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.153976][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.287597][ T5863] veth0_vlan: entered promiscuous mode [ 90.326804][ T5863] veth1_vlan: entered promiscuous mode [ 90.449712][ T5863] veth0_macvtap: entered promiscuous mode [ 90.523168][ T5863] veth1_macvtap: entered promiscuous mode [ 90.617858][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.668878][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.688946][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.718971][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.730381][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.744117][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.794195][ T1153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.804591][ T1153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.845472][ T1171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.880185][ T1171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.909291][ T5866] veth0_vlan: entered promiscuous mode [ 90.975314][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.983284][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.004635][ T5866] veth1_vlan: entered promiscuous mode [ 91.063621][ T5873] veth0_vlan: entered promiscuous mode [ 91.092700][ T5873] veth1_vlan: entered promiscuous mode [ 91.096173][ T5881] Bluetooth: hci0: command tx timeout [ 91.125162][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.129464][ T5864] veth0_vlan: entered promiscuous mode [ 91.133018][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.175534][ T5881] Bluetooth: hci1: command tx timeout [ 91.202180][ T5864] veth1_vlan: entered promiscuous mode [ 91.230784][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.256762][ T5881] Bluetooth: hci3: command tx timeout [ 91.262219][ T5881] Bluetooth: hci2: command tx timeout [ 91.264655][ T5866] veth0_macvtap: entered promiscuous mode [ 91.267834][ T5881] Bluetooth: hci4: command tx timeout [ 91.310307][ T5866] veth1_macvtap: entered promiscuous mode [ 91.380445][ T5873] veth0_macvtap: entered promiscuous mode [ 91.435106][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.450451][ T5864] veth0_macvtap: entered promiscuous mode [ 91.468644][ T59] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.468764][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.487681][ T5873] veth1_macvtap: entered promiscuous mode [ 91.512197][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.524290][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.533167][ T59] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.550006][ T59] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.567309][ T5864] veth1_macvtap: entered promiscuous mode [ 91.592853][ T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.641275][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.653452][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.666661][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.676483][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.700469][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.709909][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.722855][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.756923][ T5862] veth0_vlan: entered promiscuous mode [ 91.785565][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.807867][ T1171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.855218][ T1171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.881046][ T5862] veth1_vlan: entered promiscuous mode [ 91.949910][ T1171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.974487][ T1171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.987951][ T1171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.994060][ T10] cfg80211: failed to load regulatory.db [ 92.027487][ T5862] veth0_macvtap: entered promiscuous mode [ 92.043671][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.052923][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.091308][ T1171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.104182][ T1171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.158541][ T5995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9'. [ 92.163044][ T1171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.196593][ T5862] veth1_macvtap: entered promiscuous mode [ 92.381666][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.402451][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.442931][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.461882][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.471427][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.473777][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.521408][ T1109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.547863][ T1109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.603150][ T1153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.618745][ T1153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.686258][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.694470][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.787754][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.802440][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.873756][ T6009] syz.3.11 uses obsolete (PF_INET,SOCK_PACKET) [ 92.971266][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.980446][ T6009] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.11'. [ 92.989608][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.124351][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.138314][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.175282][ T5872] Bluetooth: hci0: command tx timeout [ 93.255606][ T5872] Bluetooth: hci1: command tx timeout [ 93.335260][ T5872] Bluetooth: hci4: command tx timeout [ 93.335382][ T5881] Bluetooth: hci2: command tx timeout [ 93.340715][ T5872] Bluetooth: hci3: command tx timeout [ 93.351876][ T6018] netlink: 216 bytes leftover after parsing attributes in process `syz.2.13'. [ 93.451280][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.468794][ T6019] Zero length message leads to an empty skb [ 93.498689][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.650840][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16'. [ 94.173035][ T5981] IPVS: starting estimator thread 0... [ 94.305532][ T6060] IPVS: using max 26 ests per chain, 62400 per kthread [ 94.513674][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 94.878254][ T6098] warning: `syz.2.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.644561][ T6100] netlink: 'syz.0.33': attribute type 29 has an invalid length. [ 95.656219][ T6100] netlink: 'syz.0.33': attribute type 29 has an invalid length. [ 95.925839][ T6117] netlink: 'syz.4.39': attribute type 4 has an invalid length. [ 96.285458][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.47'. [ 96.669765][ T6148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.50'. [ 96.832388][ T6162] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20000 [ 96.843101][ T6162] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20001 [ 97.264914][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 97.684047][ T6198] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.726363][ T6200] Bluetooth: MGMT ver 1.23 [ 97.762501][ T6204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.65'. [ 97.787240][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 98.102486][ T6221] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.161710][ T6227] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 98.224358][ T6221] netlink: 276 bytes leftover after parsing attributes in process `syz.2.69'. [ 98.258047][ T6221] geneve1: entered promiscuous mode [ 98.276338][ T6223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.69'. [ 98.311547][ T6221] netlink: 830 bytes leftover after parsing attributes in process `syz.2.69'. [ 98.328057][ T6231] netlink: 'syz.0.73': attribute type 2 has an invalid length. [ 98.346059][ T6231] netlink: 'syz.0.73': attribute type 8 has an invalid length. [ 98.364635][ T6231] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.73'. [ 98.406019][ T6239] netlink: 'syz.0.73': attribute type 2 has an invalid length. [ 98.453685][ T6239] netlink: 'syz.0.73': attribute type 8 has an invalid length. [ 98.502723][ T6239] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.73'. [ 98.654293][ T6247] netlink: 'syz.3.77': attribute type 29 has an invalid length. [ 98.722203][ T6250] netlink: 'syz.0.79': attribute type 2 has an invalid length. [ 98.739804][ T6250] netlink: 44 bytes leftover after parsing attributes in process `syz.0.79'. [ 98.749526][ T6253] netlink: 'syz.3.77': attribute type 29 has an invalid length. [ 98.810292][ T6247] syzkaller1: entered promiscuous mode [ 98.834288][ T6247] syzkaller1: entered allmulticast mode [ 98.921062][ T6253] bond0: entered promiscuous mode [ 98.942156][ T6253] bond_slave_0: entered promiscuous mode [ 98.955650][ T6253] bond_slave_1: entered promiscuous mode [ 99.208663][ T6270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.237473][ T6270] bond0: (slave rose0): Enslaving as an active interface with an up link [ 99.402193][ T6275] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 99.408866][ T6275] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 100.280785][ T6329] syz.4.99 uses old SIOCAX25GETINFO [ 100.763833][ T6354] validate_nla: 2 callbacks suppressed [ 100.763850][ T6354] netlink: 'syz.1.106': attribute type 12 has an invalid length. [ 100.804252][ T6354] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 100.822598][ T6359] Bluetooth: MGMT ver 1.23 [ 101.442480][ T6375] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 101.745720][ T6393] __nla_validate_parse: 9 callbacks suppressed [ 101.745758][ T6393] netlink: 44 bytes leftover after parsing attributes in process `syz.1.115'. [ 101.794221][ T6394] netlink: 32 bytes leftover after parsing attributes in process `syz.3.114'. [ 101.828378][ T6400] net veth1_virt_wifi .: renamed from virt_wifi0 [ 102.094676][ T6410] netlink: 'syz.1.120': attribute type 11 has an invalid length. [ 102.113394][ T6409] netlink: 'syz.0.118': attribute type 30 has an invalid length. [ 102.177865][ T6410] netlink: 32 bytes leftover after parsing attributes in process `syz.1.120'. [ 102.634176][ T6431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.127'. [ 102.803669][ T6449] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 104.121118][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'. [ 104.315676][ T6512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.145'. [ 104.429294][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 104.609897][ T6535] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 104.749155][ T6545] FAULT_INJECTION: forcing a failure. [ 104.749155][ T6545] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.775825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.818884][ T6545] CPU: 0 UID: 0 PID: 6545 Comm: syz.4.154 Not tainted syzkaller #0 PREEMPT(full) [ 104.818913][ T6545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 104.818930][ T6545] Call Trace: [ 104.818938][ T6545] [ 104.818962][ T6545] dump_stack_lvl+0x189/0x250 [ 104.818992][ T6545] ? __pfx____ratelimit+0x10/0x10 [ 104.819018][ T6545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.819039][ T6545] ? __pfx__printk+0x10/0x10 [ 104.819065][ T6545] ? __might_fault+0xb0/0x130 [ 104.819098][ T6545] should_fail_ex+0x414/0x560 [ 104.819129][ T6545] _copy_from_user+0x2d/0xb0 [ 104.819153][ T6545] rfkill_fop_write+0x136/0x570 [ 104.819177][ T6545] ? __pfx_rfkill_fop_write+0x10/0x10 [ 104.819196][ T6545] ? security_kernfs_init_security+0x250/0x290 [ 104.819222][ T6545] ? rw_verify_area+0x255/0x4d0 [ 104.819244][ T6545] ? __lock_acquire+0xab9/0xd20 [ 104.819267][ T6545] ? __pfx_rfkill_fop_write+0x10/0x10 [ 104.819289][ T6545] vfs_write+0x27b/0xb30 [ 104.819320][ T6545] ? __pfx_vfs_write+0x10/0x10 [ 104.819346][ T6545] ? __fget_files+0x2a/0x420 [ 104.819364][ T6545] ? __fget_files+0x2a/0x420 [ 104.819379][ T6545] ? __fget_files+0x3a0/0x420 [ 104.819394][ T6545] ? __fget_files+0x2a/0x420 [ 104.819417][ T6545] ksys_write+0x145/0x250 [ 104.819451][ T6545] ? __pfx_ksys_write+0x10/0x10 [ 104.819470][ T6545] ? rcu_is_watching+0x15/0xb0 [ 104.819492][ T6545] ? do_syscall_64+0xbe/0x3b0 [ 104.819514][ T6545] do_syscall_64+0xfa/0x3b0 [ 104.819531][ T6545] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.819548][ T6545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.819565][ T6545] ? clear_bhb_loop+0x60/0xb0 [ 104.819585][ T6545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.819619][ T6545] RIP: 0033:0x7f484218eec9 [ 104.819640][ T6545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.819655][ T6545] RSP: 002b:00007f484310b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.819673][ T6545] RAX: ffffffffffffffda RBX: 00007f48423e5fa0 RCX: 00007f484218eec9 [ 104.819686][ T6545] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 104.819697][ T6545] RBP: 00007f484310b090 R08: 0000000000000000 R09: 0000000000000000 [ 104.819708][ T6545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.819718][ T6545] R13: 00007f48423e6038 R14: 00007f48423e5fa0 R15: 00007ffd75ef9aa8 [ 104.819746][ T6545] [ 105.189485][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.156'. [ 105.302264][ T6564] netlink: 'syz.4.157': attribute type 1 has an invalid length. [ 105.365633][ T6564] netlink: 244 bytes leftover after parsing attributes in process `syz.4.157'. [ 105.464138][ T6560] netlink: 36 bytes leftover after parsing attributes in process `syz.4.157'. [ 105.469492][ T6567] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 105.491137][ T6560] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 105.545425][ T6576] tipc: Started in network mode [ 105.550359][ T6576] tipc: Node identity 16e8e963f6e6, cluster identity 4711 [ 105.571375][ T6576] tipc: Enabled bearer , priority 0 [ 105.632550][ T6576] tipc: Resetting bearer [ 105.789870][ T30] audit: type=1107 audit(1758824264.179:2): pid=6583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 105.828672][ T6569] tipc: Disabling bearer [ 105.958057][ T6581] netlink: 'syz.1.163': attribute type 10 has an invalid length. [ 105.980814][ T6596] team0: Device wireguard0 is of different type [ 106.054656][ T6603] FAULT_INJECTION: forcing a failure. [ 106.054656][ T6603] name failslab, interval 1, probability 0, space 0, times 1 [ 106.083675][ T6603] CPU: 0 UID: 0 PID: 6603 Comm: syz.0.167 Not tainted syzkaller #0 PREEMPT(full) [ 106.083698][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 106.083708][ T6603] Call Trace: [ 106.083716][ T6603] [ 106.083724][ T6603] dump_stack_lvl+0x189/0x250 [ 106.083749][ T6603] ? __pfx____ratelimit+0x10/0x10 [ 106.083768][ T6603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.083788][ T6603] ? __pfx__printk+0x10/0x10 [ 106.083846][ T6603] ? __pfx___might_resched+0x10/0x10 [ 106.083869][ T6603] should_fail_ex+0x414/0x560 [ 106.083901][ T6603] should_failslab+0xa8/0x100 [ 106.083930][ T6603] __kmalloc_cache_noprof+0x70/0x3d0 [ 106.083956][ T6603] ? kobject_uevent_env+0x27c/0x8c0 [ 106.083983][ T6603] ? __pfx_dev_uevent_name+0x10/0x10 [ 106.084000][ T6603] kobject_uevent_env+0x27c/0x8c0 [ 106.084034][ T6603] rfkill_set_block+0x3a2/0x440 [ 106.084057][ T6603] rfkill_fop_write+0x44b/0x570 [ 106.084082][ T6603] ? __pfx_rfkill_fop_write+0x10/0x10 [ 106.084102][ T6603] ? security_kernfs_init_security+0x250/0x290 [ 106.084130][ T6603] ? rw_verify_area+0x255/0x4d0 [ 106.084152][ T6603] ? __lock_acquire+0xab9/0xd20 [ 106.084181][ T6603] ? __pfx_rfkill_fop_write+0x10/0x10 [ 106.084203][ T6603] vfs_write+0x27b/0xb30 [ 106.084237][ T6603] ? __pfx_vfs_write+0x10/0x10 [ 106.084263][ T6603] ? __fget_files+0x2a/0x420 [ 106.084283][ T6603] ? __fget_files+0x2a/0x420 [ 106.084297][ T6603] ? __fget_files+0x3a0/0x420 [ 106.084312][ T6603] ? __fget_files+0x2a/0x420 [ 106.084338][ T6603] ksys_write+0x145/0x250 [ 106.084365][ T6603] ? __pfx_ksys_write+0x10/0x10 [ 106.084386][ T6603] ? rcu_is_watching+0x15/0xb0 [ 106.084417][ T6603] ? do_syscall_64+0xbe/0x3b0 [ 106.084443][ T6603] do_syscall_64+0xfa/0x3b0 [ 106.084466][ T6603] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.084485][ T6603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.084503][ T6603] ? clear_bhb_loop+0x60/0xb0 [ 106.084526][ T6603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.084543][ T6603] RIP: 0033:0x7f3a8278eec9 [ 106.084560][ T6603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.084575][ T6603] RSP: 002b:00007f3a835ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.084594][ T6603] RAX: ffffffffffffffda RBX: 00007f3a829e5fa0 RCX: 00007f3a8278eec9 [ 106.084607][ T6603] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 106.084618][ T6603] RBP: 00007f3a835ee090 R08: 0000000000000000 R09: 0000000000000000 [ 106.084629][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.084640][ T6603] R13: 00007f3a829e6038 R14: 00007f3a829e5fa0 R15: 00007ffce6d946e8 [ 106.084670][ T6603] [ 106.892826][ T6603] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.900408][ T6603] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 106.932516][ T6603] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.941878][ T6603] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 106.963566][ T6603] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.972538][ T6603] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 106.990625][ T6603] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.997440][ T6603] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 107.016801][ T6603] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 107.027104][ T6603] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 108.714115][ T6586] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.964070][ T6701] __nla_validate_parse: 3 callbacks suppressed [ 108.964087][ T6701] netlink: 44 bytes leftover after parsing attributes in process `syz.3.174'. [ 109.112511][ T6704] vxcan2: entered allmulticast mode [ 109.607033][ T6730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.176'. [ 109.665962][ T6732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.182'. [ 109.803171][ T6737] netlink: 44 bytes leftover after parsing attributes in process `syz.3.185'. [ 109.895799][ T6744] openvswitch: netlink: IP tunnel dst address not specified [ 109.978962][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 110.461781][ T6764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.193'. [ 110.522434][ T6766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.194'. [ 110.555451][ T6766] tipc: Enabling of bearer rejected, media not registered [ 110.565662][ T6767] netlink: 'syz.1.194': attribute type 13 has an invalid length. [ 110.602190][ T6767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.776091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.938162][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.944891][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 152.785521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.379077][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.386133][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.978692][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.817596][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.824137][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.775037][ T31] INFO: task kworker/0:4:5915 blocked for more than 143 seconds. [ 264.782920][ T31] Not tainted syzkaller #0 [ 264.787974][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 264.796881][ T31] task:kworker/0:4 state:D stack:23640 pid:5915 tgid:5915 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 264.809016][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 264.815796][ T31] Call Trace: [ 264.819092][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 264.822070][ T31] __schedule+0x1798/0x4cc0 [ 264.837304][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 264.843032][ T31] ? __pfx___schedule+0x10/0x10 [ 264.854991][ T31] ? schedule+0x91/0x360 [ 264.859284][ T31] schedule+0x165/0x360 [ 264.863480][ T31] schedule_preempt_disabled+0x13/0x30 [ 264.869030][ T31] __mutex_lock+0x7e6/0x1350 [ 264.876568][ T31] ? __mutex_lock+0x5bb/0x1350 [ 264.881395][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 264.890375][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 264.897275][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 264.903041][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 264.944950][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 264.954255][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 264.963771][ T31] process_scheduled_works+0xae1/0x17b0 [ 264.969628][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 264.975950][ T31] worker_thread+0x8a0/0xda0 [ 264.980566][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 264.987704][ T31] ? __kthread_parkme+0x7b/0x200 [ 264.992681][ T31] kthread+0x70e/0x8a0 [ 264.997013][ T31] ? __pfx_worker_thread+0x10/0x10 [ 265.002176][ T31] ? __pfx_kthread+0x10/0x10 [ 265.006830][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.012051][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.017448][ T31] ? __pfx_kthread+0x10/0x10 [ 265.022068][ T31] ret_from_fork+0x439/0x7d0 [ 265.026717][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 265.031860][ T31] ? __switch_to_asm+0x39/0x70 [ 265.036733][ T31] ? __switch_to_asm+0x33/0x70 [ 265.041524][ T31] ? __pfx_kthread+0x10/0x10 [ 265.047206][ T31] ret_from_fork_asm+0x1a/0x30 [ 265.052045][ T31] [ 265.055231][ T31] INFO: task syz.4.164:6582 blocked for more than 143 seconds. [ 265.062785][ T31] Not tainted syzkaller #0 [ 265.068974][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 265.077730][ T31] task:syz.4.164 state:D stack:25096 pid:6582 tgid:6582 ppid:5862 task_flags:0x400040 flags:0x00004006 [ 265.095915][ T31] Call Trace: [ 265.099281][ T31] [ 265.102220][ T31] __schedule+0x1798/0x4cc0 [ 265.107870][ T31] ? __lock_acquire+0xab9/0xd20 [ 265.112769][ T31] ? __lock_acquire+0xab9/0xd20 [ 265.117717][ T31] ? __pfx___schedule+0x10/0x10 [ 265.122609][ T31] ? schedule+0x91/0x360 [ 265.126912][ T31] schedule+0x165/0x360 [ 265.131104][ T31] schedule_preempt_disabled+0x13/0x30 [ 265.136636][ T31] __mutex_lock+0x7e6/0x1350 [ 265.141318][ T31] ? __mutex_lock+0x5bb/0x1350 [ 265.146162][ T31] ? rfkill_unregister+0xc8/0x220 [ 265.151227][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 265.156363][ T31] ? __pfx_device_del+0x10/0x10 [ 265.161258][ T31] rfkill_unregister+0xc8/0x220 [ 265.166188][ T31] nfc_unregister_device+0x96/0x2a0 [ 265.171417][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 265.177407][ T31] virtual_ncidev_close+0x56/0x90 [ 265.182469][ T31] __fput+0x44c/0xa70 [ 265.186505][ T31] task_work_run+0x1d1/0x260 [ 265.191144][ T31] ? __pfx_task_work_run+0x10/0x10 [ 265.196321][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 265.201819][ T31] exit_to_user_mode_loop+0xec/0x110 [ 265.207182][ T31] do_syscall_64+0x2bd/0x3b0 [ 265.211788][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.217034][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.223118][ T31] ? clear_bhb_loop+0x60/0xb0 [ 265.227872][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.233776][ T31] RIP: 0033:0x7f484218eec9 [ 265.238236][ T31] RSP: 002b:00007ffd75ef9c08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 265.246687][ T31] RAX: 0000000000000000 RBX: 00007f48423e7da0 RCX: 00007f484218eec9 [ 265.254811][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 265.262799][ T31] RBP: 00007f48423e7da0 R08: 000000000000011c R09: 0000000f75ef9eff [ 265.270815][ T31] R10: 00007f48423e7cb0 R11: 0000000000000246 R12: 000000000001a024 [ 265.278970][ T31] R13: 00007f48423e6180 R14: ffffffffffffffff R15: 00007ffd75ef9d20 [ 265.287019][ T31] [ 265.290122][ T31] INFO: task syz.0.167:6603 blocked for more than 143 seconds. [ 265.297752][ T31] Not tainted syzkaller #0 [ 265.302704][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 265.311423][ T31] task:syz.0.167 state:D stack:24888 pid:6603 tgid:6602 ppid:5864 task_flags:0x400040 flags:0x00004006 [ 265.323492][ T31] Call Trace: [ 265.326866][ T31] [ 265.329819][ T31] __schedule+0x1798/0x4cc0 [ 265.334390][ T31] ? __lock_acquire+0xab9/0xd20 [ 265.339402][ T31] ? __lock_acquire+0xab9/0xd20 [ 265.344383][ T31] ? __pfx___schedule+0x10/0x10 [ 265.349515][ T31] ? schedule+0x91/0x360 [ 265.353816][ T31] schedule+0x165/0x360 [ 265.358030][ T31] schedule_preempt_disabled+0x13/0x30 [ 265.363538][ T31] __mutex_lock+0x7e6/0x1350 [ 265.368208][ T31] ? __mutex_lock+0x5bb/0x1350 [ 265.372993][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 265.378319][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 265.383384][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.388632][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 265.394540][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 265.400939][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 265.406717][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 265.411853][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 265.417619][ T31] rfkill_set_block+0x1d2/0x440 [ 265.422496][ T31] rfkill_fop_write+0x44b/0x570 [ 265.427423][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 265.432812][ T31] ? security_kernfs_init_security+0x250/0x290 [ 265.439004][ T31] ? rw_verify_area+0x255/0x4d0 [ 265.443880][ T31] ? __lock_acquire+0xab9/0xd20 [ 265.448799][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 265.454201][ T31] vfs_write+0x27b/0xb30 [ 265.458531][ T31] ? __pfx_vfs_write+0x10/0x10 [ 265.463324][ T31] ? __fget_files+0x2a/0x420 [ 265.467962][ T31] ? __fget_files+0x2a/0x420 [ 265.472567][ T31] ? __fget_files+0x3a0/0x420 [ 265.477302][ T31] ? __fget_files+0x2a/0x420 [ 265.481909][ T31] ksys_write+0x145/0x250 [ 265.486307][ T31] ? __pfx_ksys_write+0x10/0x10 [ 265.491233][ T31] ? rcu_is_watching+0x15/0xb0 [ 265.496225][ T31] ? do_syscall_64+0xbe/0x3b0 [ 265.500962][ T31] do_syscall_64+0xfa/0x3b0 [ 265.505523][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.510749][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.516872][ T31] ? clear_bhb_loop+0x60/0xb0 [ 265.521567][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.527513][ T31] RIP: 0033:0x7f3a8278eec9 [ 265.531941][ T31] RSP: 002b:00007f3a835ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 265.540402][ T31] RAX: ffffffffffffffda RBX: 00007f3a829e5fa0 RCX: 00007f3a8278eec9 [ 265.548432][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 265.556454][ T31] RBP: 00007f3a835ee090 R08: 0000000000000000 R09: 0000000000000000 [ 265.564442][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.572477][ T31] R13: 00007f3a829e6038 R14: 00007f3a829e5fa0 R15: 00007ffce6d946e8 [ 265.580924][ T31] [ 265.583978][ T31] INFO: task syz.2.188:6750 blocked for more than 144 seconds. [ 265.591691][ T31] Not tainted syzkaller #0 [ 265.596677][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 265.605408][ T31] task:syz.2.188 state:D stack:28328 pid:6750 tgid:6747 ppid:5866 task_flags:0x400040 flags:0x00004004 [ 265.617483][ T31] Call Trace: [ 265.620787][ T31] [ 265.623717][ T31] __schedule+0x1798/0x4cc0 [ 265.628296][ T31] ? __lock_acquire+0xab9/0xd20 [ 265.633184][ T31] ? __lock_acquire+0xab9/0xd20 [ 265.638164][ T31] ? __pfx___schedule+0x10/0x10 [ 265.643077][ T31] ? schedule+0x91/0x360 [ 265.647389][ T31] schedule+0x165/0x360 [ 265.651568][ T31] schedule_preempt_disabled+0x13/0x30 [ 265.657259][ T31] __mutex_lock+0x7e6/0x1350 [ 265.661880][ T31] ? __mutex_lock+0x5bb/0x1350 [ 265.666705][ T31] ? rfkill_fop_open+0x12d/0x820 [ 265.671661][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 265.676731][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 265.682085][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 265.687532][ T31] rfkill_fop_open+0x12d/0x820 [ 265.692343][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 265.697694][ T31] misc_open+0x2b9/0x330 [ 265.701989][ T31] chrdev_open+0x4c9/0x5e0 [ 265.706477][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 265.711432][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 265.717825][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 265.722786][ T31] do_dentry_open+0x950/0x13f0 [ 265.727644][ T31] vfs_open+0x3b/0x340 [ 265.731733][ T31] ? path_openat+0x2ecd/0x3830 [ 265.736624][ T31] path_openat+0x2ee5/0x3830 [ 265.741246][ T31] ? arch_stack_walk+0xfc/0x150 [ 265.746180][ T31] ? stack_depot_save_flags+0x40/0x860 [ 265.751686][ T31] ? __pfx_path_openat+0x10/0x10 [ 265.756674][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.762774][ T31] do_filp_open+0x1fa/0x410 [ 265.767334][ T31] ? __lock_acquire+0xab9/0xd20 [ 265.772223][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 265.777327][ T31] ? _raw_spin_unlock+0x28/0x50 [ 265.782205][ T31] ? alloc_fd+0x64c/0x6c0 [ 265.786607][ T31] do_sys_openat2+0x121/0x1c0 [ 265.791304][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 265.796553][ T31] ? exc_page_fault+0x76/0xf0 [ 265.801294][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 265.806672][ T31] __x64_sys_openat+0x138/0x170 [ 265.811586][ T31] do_syscall_64+0xfa/0x3b0 [ 265.816257][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.821489][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.827629][ T31] ? clear_bhb_loop+0x60/0xb0 [ 265.832343][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.838332][ T31] RIP: 0033:0x7f7c1738eec9 [ 265.842771][ T31] RSP: 002b:00007f7c1823b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 265.851265][ T31] RAX: ffffffffffffffda RBX: 00007f7c175e5fa0 RCX: 00007f7c1738eec9 [ 265.859287][ T31] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 265.867310][ T31] RBP: 00007f7c17411f91 R08: 0000000000000000 R09: 0000000000000000 [ 265.875338][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.883326][ T31] R13: 00007f7c175e6038 R14: 00007f7c175e5fa0 R15: 00007ffc8caee0f8 [ 265.891354][ T31] [ 265.894408][ T31] INFO: task syz.3.189:6749 blocked for more than 144 seconds. [ 265.902110][ T31] Not tainted syzkaller #0 [ 265.907105][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 265.915892][ T31] task:syz.3.189 state:D stack:24936 pid:6749 tgid:6748 ppid:5863 task_flags:0x400140 flags:0x00004004 [ 265.927953][ T31] Call Trace: [ 265.931234][ T31] [ 265.934163][ T31] __schedule+0x1798/0x4cc0 [ 265.938728][ T31] ? kasan_save_free_info+0x46/0x50 [ 265.943955][ T31] ? __lock_acquire+0xab9/0xd20 [ 265.948898][ T31] ? __lock_acquire+0xab9/0xd20 [ 265.953780][ T31] ? __pfx___schedule+0x10/0x10 [ 265.958710][ T31] ? schedule+0x91/0x360 [ 265.962979][ T31] schedule+0x165/0x360 [ 265.967194][ T31] schedule_preempt_disabled+0x13/0x30 [ 265.972669][ T31] __mutex_lock+0x7e6/0x1350 [ 265.977388][ T31] ? __mutex_lock+0x5bb/0x1350 [ 265.982178][ T31] ? misc_open+0x51/0x330 [ 265.986575][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 265.991636][ T31] misc_open+0x51/0x330 [ 265.995841][ T31] chrdev_open+0x4c9/0x5e0 [ 266.000269][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 266.005273][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 266.011722][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 266.016696][ T31] do_dentry_open+0x950/0x13f0 [ 266.021486][ T31] vfs_open+0x3b/0x340 [ 266.025602][ T31] ? path_openat+0x2ecd/0x3830 [ 266.030395][ T31] path_openat+0x2ee5/0x3830 [ 266.035026][ T31] ? arch_stack_walk+0xfc/0x150 [ 266.039912][ T31] ? stack_depot_save_flags+0x40/0x860 [ 266.045431][ T31] ? __pfx_path_openat+0x10/0x10 [ 266.050437][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.057966][ T31] do_filp_open+0x1fa/0x410 [ 266.062531][ T31] ? __lock_acquire+0xab9/0xd20 [ 266.067658][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 266.072752][ T31] ? _raw_spin_unlock+0x28/0x50 [ 266.077731][ T31] ? alloc_fd+0x64c/0x6c0 [ 266.082249][ T31] do_sys_openat2+0x121/0x1c0 [ 266.087159][ T31] ? __se_sys_futex+0x36f/0x400 [ 266.092034][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 266.097449][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 266.102700][ T31] ? rcu_is_watching+0x15/0xb0 [ 266.107733][ T31] __x64_sys_openat+0x138/0x170 [ 266.112610][ T31] do_syscall_64+0xfa/0x3b0 [ 266.117161][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.122380][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.128493][ T31] ? clear_bhb_loop+0x60/0xb0 [ 266.133184][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.139136][ T31] RIP: 0033:0x7fbb0f38eec9 [ 266.143587][ T31] RSP: 002b:00007fbb102e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 266.152052][ T31] RAX: ffffffffffffffda RBX: 00007fbb0f5e5fa0 RCX: 00007fbb0f38eec9 [ 266.160091][ T31] RDX: 0000000000020702 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 266.168110][ T31] RBP: 00007fbb0f411f91 R08: 0000000000000000 R09: 0000000000000000 [ 266.176117][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.184093][ T31] R13: 00007fbb0f5e6038 R14: 00007fbb0f5e5fa0 R15: 00007ffc7e18d278 [ 266.192172][ T31] [ 266.195248][ T31] INFO: task syz.1.197:6773 blocked for more than 144 seconds. [ 266.202801][ T31] Not tainted syzkaller #0 [ 266.207800][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 266.216509][ T31] task:syz.1.197 state:D stack:27736 pid:6773 tgid:6772 ppid:5873 task_flags:0x400040 flags:0x00004004 [ 266.228543][ T31] Call Trace: [ 266.231840][ T31] [ 266.234834][ T31] __schedule+0x1798/0x4cc0 [ 266.239359][ T31] ? kasan_save_free_info+0x46/0x50 [ 266.244560][ T31] ? __lock_acquire+0xab9/0xd20 [ 266.249484][ T31] ? __lock_acquire+0xab9/0xd20 [ 266.254367][ T31] ? __pfx___schedule+0x10/0x10 [ 266.259480][ T31] ? schedule+0x91/0x360 [ 266.263746][ T31] schedule+0x165/0x360 [ 266.267977][ T31] schedule_preempt_disabled+0x13/0x30 [ 266.273466][ T31] __mutex_lock+0x7e6/0x1350 [ 266.278191][ T31] ? __mutex_lock+0x5bb/0x1350 [ 266.283015][ T31] ? misc_open+0x51/0x330 [ 266.287508][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 266.292575][ T31] misc_open+0x51/0x330 [ 266.296795][ T31] chrdev_open+0x4c9/0x5e0 [ 266.301230][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 266.306213][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 266.312568][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 266.317568][ T31] do_dentry_open+0x950/0x13f0 [ 266.322372][ T31] vfs_open+0x3b/0x340 [ 266.326479][ T31] ? path_openat+0x2ecd/0x3830 [ 266.331290][ T31] path_openat+0x2ee5/0x3830 [ 266.335970][ T31] ? arch_stack_walk+0xfc/0x150 [ 266.340894][ T31] ? stack_depot_save_flags+0x40/0x860 [ 266.346428][ T31] ? __pfx_path_openat+0x10/0x10 [ 266.351379][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.357508][ T31] do_filp_open+0x1fa/0x410 [ 266.362031][ T31] ? __lock_acquire+0xab9/0xd20 [ 266.366936][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 266.372006][ T31] ? _raw_spin_unlock+0x28/0x50 [ 266.376921][ T31] ? alloc_fd+0x64c/0x6c0 [ 266.381294][ T31] do_sys_openat2+0x121/0x1c0 [ 266.386044][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 266.391275][ T31] ? exc_page_fault+0x76/0xf0 [ 266.396023][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 266.401341][ T31] __x64_sys_openat+0x138/0x170 [ 266.406244][ T31] do_syscall_64+0xfa/0x3b0 [ 266.410764][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.416007][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.422095][ T31] ? clear_bhb_loop+0x60/0xb0 [ 266.426842][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.432755][ T31] RIP: 0033:0x7f427878eec9 [ 266.437252][ T31] RSP: 002b:00007f42796ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 266.445724][ T31] RAX: ffffffffffffffda RBX: 00007f42789e5fa0 RCX: 00007f427878eec9 [ 266.453712][ T31] RDX: 0000000000042000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 266.461752][ T31] RBP: 00007f4278811f91 R08: 0000000000000000 R09: 0000000000000000 [ 266.469791][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.477825][ T31] R13: 00007f42789e6038 R14: 00007f42789e5fa0 R15: 00007ffee3c44398 [ 266.485860][ T31] [ 266.488977][ T31] [ 266.488977][ T31] Showing all locks held in the system: [ 266.496773][ T31] 1 lock held by khungtaskd/31: [ 266.501640][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 266.511618][ T31] 1 lock held by klogd/5224: [ 266.516301][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 266.526429][ T31] 2 locks held by getty/5624: [ 266.531132][ T31] #0: ffff8880338480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 266.541377][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 266.551586][ T31] 3 locks held by kworker/0:4/5915: [ 266.556880][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 266.567936][ T31] #1: ffffc900041afbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 266.581532][ T31] #2: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 266.593006][ T31] 2 locks held by syz.4.164/6582: [ 266.598142][ T31] #0: ffff88807cc3e100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 266.607986][ T31] #1: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 266.618259][ T31] 2 locks held by syz.0.167/6603: [ 266.623295][ T31] #0: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 266.633594][ T31] #1: ffff88807cc3e100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 266.643735][ T31] 2 locks held by syz.2.188/6750: [ 266.648935][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 266.657791][ T31] #1: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 266.668022][ T31] 1 lock held by syz.3.189/6749: [ 266.672972][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 266.681485][ T31] 1 lock held by syz.1.197/6773: [ 266.686509][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 266.695336][ T31] 1 lock held by syz-executor/6798: [ 266.700588][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 266.709367][ T31] 1 lock held by syz-executor/6799: [ 266.714580][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 266.723197][ T31] 1 lock held by syz-executor/6805: [ 266.728472][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 266.737050][ T31] 1 lock held by syz-executor/6806: [ 266.742265][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 266.750870][ T31] 1 lock held by syz-executor/6808: [ 266.756145][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 266.764698][ T31] 1 lock held by syz-executor/6811: [ 266.769923][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 266.778541][ T31] 1 lock held by syz-executor/6812: [ 266.783747][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 266.792270][ T31] 1 lock held by syz-executor/6817: [ 266.797569][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 266.806127][ T31] 1 lock held by syz-executor/6818: [ 266.811328][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 266.820014][ T31] 1 lock held by syz-executor/6821: [ 266.825321][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 266.833818][ T31] 1 lock held by syz-executor/6824: [ 266.839084][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 266.847634][ T31] 1 lock held by syz-executor/6825: [ 266.852824][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 266.861745][ T31] 1 lock held by syz-executor/6828: [ 266.867886][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 266.876466][ T31] 1 lock held by syz-executor/6829: [ 266.881660][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 266.890212][ T31] 1 lock held by syz-executor/6832: [ 266.895464][ T31] #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 266.904004][ T31] [ 266.906508][ T31] ============================================= [ 266.906508][ T31] [ 266.915007][ T31] NMI backtrace for cpu 1 [ 266.915025][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 266.915044][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 266.915054][ T31] Call Trace: [ 266.915061][ T31] [ 266.915069][ T31] dump_stack_lvl+0x189/0x250 [ 266.915097][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.915120][ T31] ? __pfx__printk+0x10/0x10 [ 266.915158][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 266.915197][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 266.915227][ T31] ? __pfx__printk+0x10/0x10 [ 266.915257][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 266.915290][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 266.915320][ T31] watchdog+0xf93/0xfe0 [ 266.915352][ T31] ? watchdog+0x1de/0xfe0 [ 266.915383][ T31] kthread+0x70e/0x8a0 [ 266.915410][ T31] ? __pfx_watchdog+0x10/0x10 [ 266.915435][ T31] ? __pfx_kthread+0x10/0x10 [ 266.915460][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 266.915477][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.915494][ T31] ? __pfx_kthread+0x10/0x10 [ 266.915518][ T31] ret_from_fork+0x439/0x7d0 [ 266.915541][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 266.915566][ T31] ? __switch_to_asm+0x39/0x70 [ 266.915589][ T31] ? __switch_to_asm+0x33/0x70 [ 266.915611][ T31] ? __pfx_kthread+0x10/0x10 [ 266.915635][ T31] ret_from_fork_asm+0x1a/0x30 [ 266.915675][ T31] [ 266.915682][ T31] Sending NMI from CPU 1 to CPUs 0: [ 267.061199][ C0] NMI backtrace for cpu 0 [ 267.061215][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 267.061234][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 267.061244][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 267.061267][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 c9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 267.061281][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 267.061297][ C0] RAX: 47d0bfe2cc857c00 RBX: ffffffff819683f8 RCX: 47d0bfe2cc857c00 [ 267.061309][ C0] RDX: 0000000000000001 RSI: ffffffff8d9ba42d RDI: ffffffff8be33f00 [ 267.061321][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 267.061333][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa3a630 [ 267.061346][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 267.061357][ C0] FS: 0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000 [ 267.061370][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.061381][ C0] CR2: 00005577217594d8 CR3: 000000000df36000 CR4: 00000000003526f0 [ 267.061397][ C0] Call Trace: [ 267.061404][ C0] [ 267.061411][ C0] default_idle+0x13/0x20 [ 267.061431][ C0] default_idle_call+0x74/0xb0 [ 267.061452][ C0] do_idle+0x1e8/0x510 [ 267.061472][ C0] ? __pfx_do_idle+0x10/0x10 [ 267.061486][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 267.061504][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 267.061520][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 267.061551][ C0] cpu_startup_entry+0x44/0x60 [ 267.061567][ C0] rest_init+0x2de/0x300 [ 267.061589][ C0] start_kernel+0x3a9/0x410 [ 267.061609][ C0] x86_64_start_reservations+0x24/0x30 [ 267.061632][ C0] x86_64_start_kernel+0x143/0x1c0 [ 267.061655][ C0] common_startup_64+0x13e/0x147 [ 267.061687][ C0] [ 267.062248][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 267.260847][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 267.269962][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 267.280015][ T31] Call Trace: [ 267.283293][ T31] [ 267.286230][ T31] dump_stack_lvl+0x99/0x250 [ 267.290847][ T31] ? __asan_memcpy+0x40/0x70 [ 267.295448][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.300649][ T31] ? __pfx__printk+0x10/0x10 [ 267.305260][ T31] vpanic+0x281/0x750 [ 267.309253][ T31] ? __pfx_vpanic+0x10/0x10 [ 267.313764][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 267.319319][ T31] ? preempt_schedule+0xae/0xc0 [ 267.324178][ T31] ? preempt_schedule_common+0x83/0xd0 [ 267.329642][ T31] panic+0xb9/0xc0 [ 267.333371][ T31] ? __pfx_panic+0x10/0x10 [ 267.337796][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 267.343189][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 267.349372][ T31] watchdog+0xfd2/0xfe0 [ 267.353538][ T31] ? watchdog+0x1de/0xfe0 [ 267.357889][ T31] kthread+0x70e/0x8a0 [ 267.361966][ T31] ? __pfx_watchdog+0x10/0x10 [ 267.366651][ T31] ? __pfx_kthread+0x10/0x10 [ 267.371246][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.376454][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.381651][ T31] ? __pfx_kthread+0x10/0x10 [ 267.386247][ T31] ret_from_fork+0x439/0x7d0 [ 267.390841][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 267.395961][ T31] ? __switch_to_asm+0x39/0x70 [ 267.400729][ T31] ? __switch_to_asm+0x33/0x70 [ 267.405495][ T31] ? __pfx_kthread+0x10/0x10 [ 267.410095][ T31] ret_from_fork_asm+0x1a/0x30 [ 267.414889][ T31] [ 267.418280][ T31] Kernel Offset: disabled [ 267.422600][ T31] Rebooting in 86400 seconds..