last executing test programs: 21.909828264s ago: executing program 0 (id=1): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r6) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="310300200000000008400800000008000300", @ANYRES32=r9, @ANYBLOB="08000600f667"], 0x24}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000006"], 0x50) write$cgroup_subtree(r10, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 21.309038513s ago: executing program 0 (id=9): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x2c}}, 0x804) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x2c}}, 0x804) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, '(\'\\#-\xcb\\}{'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '\xd0/\xca^'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '!'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '}-+'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000005) (async) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, '(\'\\#-\xcb\\}{'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '\xd0/\xca^'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '!'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '}-+'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000005) 21.234323282s ago: executing program 3 (id=4): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x2004c890}, 0x0) r2 = socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010105}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r3, 0x1) setsockopt(r3, 0x84, 0x7d, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x1f0, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x29}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0x0, 0x0, 'pimreg1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x4, 0x6}}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x73}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x1}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e20, 0x5, @loopback, 0xfe29}, {0xa, 0x4e23, 0xcb6, @mcast2, 0x1}, 0xffffffffffffffff, {[0x7f, 0xc, 0x200, 0x7, 0x81, 0x800, 0x1ff, 0x4]}}, 0x5c) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="160000000108010100000000000040a33cda00"], 0x14}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8049}, 0x40000) socket$inet6_icmp(0xa, 0x2, 0x3a) write$rfkill(r0, &(0x7f00000002c0)={0x20000000, 0x8, 0x3, 0x3, 0xfd}, 0x8) socket$pppoe(0x18, 0x1, 0x0) 19.99288978s ago: executing program 2 (id=13): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x600, 0x0, 0x0}, &(0x7f0000000240)=0x108) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0xcc, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x9d, 0x6, "ac048850fc203051e8d69f56fbeab8e6d2adc7136fc6e37435eccabaf7f0601423af984f00768d429e7b458841b7a06c4d37093cd29c0cec0a537cf4de5cb0dbeee078643790dfb466d126a6ae7258b082fa1844221cb53f70a6005d28040d89fbaf0c2fda3ad5519cb0d3e53dcd2aa706e25b3221cfaf0d2a9bcfe7ad926647085f86d5a07073f9a6d68ed45a1af5c4a6806302b5a9d8f31f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DATA={0x30, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xd, 0x1, "834f07fb9d64f104c2"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1a8}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59cf00000000010000000800000006d4d82c14000180060001000d0000000700000003000000f0445c71b40e8cca7eb6612017b5f741ff1dade87fff07b15adc96988da3145791beb4a1fc3f36e064b6"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x61, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="8279653e11d93db3b4e7ae54efc792fa4bec58f77a21e0372ea1df80ad3b4c95114abfafb86ab505f02256b920d6372ee913e2a6b6a2ea3728386b3731cd4f98101795957d7ccbc14bc1dbc8bfb56ea9a4617a76d23ee8ea5e067a6f28fcfc0da82223756075d26c1b", 0x69}, {&(0x7f00000001c0)="8aeb5590087e2b2ac4100fed57ee474888e6c632daaedfd37735db4ed0aa532ef958236f0643d3dfd4821a80dd4d16a97f6cd89f13923be1ef9c800eee62d2ab3e13d9c53cbce927d2ed6b041b8c128375d9e4448af3a3d9401fc3b3e4f3a2a520b77323d1f2cac7dae4fef63328aa647273eddaf28f2ba7eb35e7fc5fd4d92fc1cf018f9b35a1c9f256240f19c0ffff8bce6f3c6d466bff88a6c99bcc49ce0ead3daf355fc5178b76", 0xa9}], 0x2, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010101, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0xa8, 0x0, 0x3, [0x1, 0x0, 0x6, 0x80000000, 0x2, 0x6, 0xfffffe00, 0xfffffffd]}, @noop, @generic={0x88, 0x4, "eb68"}, @timestamp={0x44, 0x10, 0xa9, 0x0, 0x7, [0x1000, 0x7, 0x9]}, @rr={0x7, 0xb, 0x21, [@broadcast, @local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x130}, 0x24000000) 19.856240572s ago: executing program 2 (id=14): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="0232e6003953b008fefa8ce2d4c1c866321c084bb58c3dd1666a19af3c73704fb3e6436512727a375df73783de35a42869d1e92883480dcb474e02000000", 0x3e}, {&(0x7f00000003c0)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa66d403a08c07bbbe72da665341d6592092455897fe84a54e94a0000000000000000000080dff891", 0x44}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%+9llu \x00'}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000301810100000000000000000a00000014001980080001"], 0x38}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000005000000b7080000000000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000035a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r9, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x800448d2, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$sock(r5, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x20000000) r11 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @dev, @remote, 0x1, @bcast}, &(0x7f0000000080)=0x1c, 0x80000) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00'}) 19.788305899s ago: executing program 2 (id=15): r0 = gettid() r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x40000020) close(0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 18.800337977s ago: executing program 2 (id=20): syz_emit_ethernet(0x142, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x30, 0x4, 0x1, 0x24, 0x134, 0x65, 0x0, 0x94, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0x8, {[@timestamp_prespec={0x44, 0x24, 0xeb, 0x3, 0x3, [{@empty, 0x10000}, {@empty, 0x8}, {@private=0xa010102, 0x2}, {@loopback, 0x9}]}, @rr={0x7, 0x27, 0x1f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @local, @multicast1, @broadcast, @multicast1, @rand_addr=0x64010101, @private=0xa010100]}, @timestamp={0x44, 0x28, 0xb1, 0x0, 0x9, [0x6, 0x10, 0x4, 0x7, 0x9, 0x6, 0x1, 0x4, 0x7fff]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x2e, 0x1, 0x1, [{@private=0xa010102, 0x5bc}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0x8}, {@empty, 0x1}]}, @end, @generic={0x7, 0xe, "bbf90ac48220bf14c8062744"}]}}, @dest_unreach={0x3, 0xf, 0x0, 0x0, 0x0, 0x4, {0x19, 0x4, 0x3, 0x0, 0x79a2, 0x65, 0x0, 0x9, 0x2e, 0xf18, @local, @dev={0xac, 0x14, 0x14, 0x12}, {[@noop, @ssrr={0x89, 0xb, 0x49, [@local, @broadcast]}, @lsrr={0x83, 0x17, 0x2c, [@private=0xa010102, @local, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x8, 0xa0, 0x0, 0x2, [0x9]}, @timestamp_prespec={0x44, 0x24, 0xa0, 0x3, 0x4, [{@loopback, 0x2}, {@empty, 0xa80a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast2, 0x8}]}]}}, "86914e09f12406f9"}}}}}, 0x0) 18.759988765s ago: executing program 2 (id=21): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in6=@mcast2, 0xfffd, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r2}, {0x2, 0x6, 0x6, 0x0, 0x7, 0x4, 0x1, 0xfffffffffffffffc}, {0x4000000005c, 0x7, 0xfffffffffffffff9, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d6, 0x32}, 0xa, @in6=@mcast2, 0xffffffde, 0x0, 0x67a01bcf906970c1, 0x81, 0x7}}, 0xe8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200e70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000200fffc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x40040d4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x7}, 0x8) 18.623572863s ago: executing program 2 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x4018, 0x3, 0x1e0, 0x0, 0x0, 0x148, 0x98, 0x148, 0x170, 0x240, 0x240, 0x170, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0xffffffff, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6c, 0x0, 0x18}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x8000000000000000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000600)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x7, 0x3, 0x80, 0x6}, @mpls={[], @ipv6=@udp={0x7, 0x6, "b21358", 0x1c9, 0x11, 0xff, @rand_addr=' \x01\x00', @empty, {[@dstopts={0x89, 0x9, '\x00', [@hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x30, {0x2, 0xa, 0x2, 0x400, [0x6, 0x8000000000000001, 0x8001, 0xfff, 0xb8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @fragment={0x45, 0x0, 0x9, 0x1, 0x0, 0x8, 0x64}, @dstopts={0x88, 0xd, '\x00', [@padn, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0xe}, @hao={0xc9, 0x10, @private2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x2, 0x10, 0xa, 0x2, [0x4000000000000, 0x2, 0x8162, 0x8, 0x100, 0x7, 0x3, 0x9]}}]}, @dstopts={0x0, 0x12, '\x00', [@generic={0x3, 0x48, "9f86ede23e4b5e46fd18f951f5293428bfc295cad0e6fdb5166386700881a5b42ba6584d508731faccfbfda607b975d139ac880ba0c02e3676a60122f381a290715f0be2b3edf289"}, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x8}, @generic={0x67, 0x3e, "5b76d1f8828609f172173e9b6bdf401948dee242de0603816f355fda9a1321bbb3e89770928f478fdeceecb7523167c295b67126a259d8732fc4e90637c7"}]}], {0x4e24, 0x4e21, 0x51, 0x0, @opaque="5c012022f78f2747cd6ec1de9cea4b333be8cab2b2498696d5032ffbddb186c9328e061359aa17cb64066f5893cc6e2a2b2cbc158f3cf666fddc365a707a89c26ea9352beaef40042f"}}}}}, 0x1ff) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x4, @remote, 0x5}], 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x4, 0xffffffffffffffdd, 0x400000, 0x0, 0xffffffffffffff1b, 0x3b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003}, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000840)={'tunl0\x00', 0x0, 0x1000e, 0x40, 0x12, 0x101, {{0x2c, 0x4, 0x3, 0x24, 0xb0, 0x64, 0x0, 0x2, 0x2f, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0x1f, 0xc3, [@rand_addr=0x64010102, @broadcast, @loopback, @rand_addr=0x64010101, @rand_addr=0x64010102, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0x57, 0x3, 0x0, [{@loopback, 0x2c9}]}, @ssrr={0x89, 0x13, 0x38, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101, @empty]}, @generic={0x94, 0x10, "c06e82c6951cd30f9b998e6e99e8"}, @generic={0x85, 0xb, "d5ed1c905693554c2f"}, @lsrr={0x83, 0x1f, 0x91, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x11}, @loopback, @rand_addr=0x64010101, @local, @remote, @multicast2]}, @rr={0x7, 0x23, 0x54, [@private=0xa010102, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x15}, @loopback]}]}}}}}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@func={0xf, 0x0, 0x0, 0xc, 0x3}, @const={0xb, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x61]}}, &(0x7f00000003c0)=""/54, 0x33, 0x36, 0x1, 0x7ff, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x40, 0x7, 0x8001, 0x40400, r5, 0x0, '\x00', r8, r9, 0x4, 0x0, 0x1, 0xa}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) socket$kcm(0x29, 0x95aa494c8c9d819f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000100039040000008136eefeee04aea800", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000200010100000800030000000000"], 0x44}}, 0x0) 18.540438054s ago: executing program 1 (id=23): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff000}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x11, 0x8, 0x5, 0x3, 0x12, 0x446, 0x9, 0x0, 0xfffff617}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @null, @bpq0, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}) 18.487400215s ago: executing program 1 (id=24): sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, 0x0, 0x1, 0x0, 0x0, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x3e, 0x107, 0x70bd2b, 0x25dfdbfc, {0x3, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0x8000) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0)=0x4, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) recvmmsg(r2, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/5, 0x5}], 0x1}}], 0x1, 0x12102, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, &(0x7f00000000c0), &(0x7f0000000200)) listen(r0, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffff07}]}}}}}}}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000180)=0x10) 17.579054582s ago: executing program 1 (id=25): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r7, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000002940), &(0x7f0000002980)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x18) socket$inet(0xa, 0x801, 0x84) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)='g', 0x1) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000140)={r10, 0x6}, 0x8) 16.65641138s ago: executing program 1 (id=26): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d", 0x4a}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f0000000540)=""/84, 0x54}], 0x2}, 0x0) recvmsg$unix(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001800)=""/98, 0x62}], 0x1}, 0x40000022) unshare(0x400) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x7ffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9f0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) 15.715393025s ago: executing program 1 (id=27): r0 = socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@eol]}}}}}}}, 0x0) (async) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="4826318e9b0912ab22be525c1e0cfd44cb96d00081a328f0eae0a063e985e3590e17f6c29c68527b2de4c2d83db80cd8e70bcde33ee441fb9438b1b870c6c3e7d876fde1fbbc9b68aec76922b73d5598e2faca21ac4c7cd1477130babbd30e24873fb3b18e4ce1538055aa13974fba540e1856ff955ba7d04ec6c39b816f6c7f31b86acf4d3bf61ed60640b6c098f75e9e88da3b4a6272b7d068a46ea2b7beaf71021ef3f9f30d4df75f36a2c1cf03452eb6117f992e4096057c53cc7791ad2f924fa04837cb1353859ff3d15f174fbcd48202ce", 0xd4}], 0x1, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x8, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x0, 0xfffffffd}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x0, 0xd, 0x0, &(0x7f0000000300)="e02742e86c0d85ff9783763a08", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448e3, &(0x7f0000000100)={0x0, 0x4000, '\x00', 0x2}) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000140), &(0x7f0000000200)=0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x6, 0x4) (async) r5 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r5, 0x0, 0x0, 0x800) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f2dbefc0aee8219706c70b7600000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bind$alg(r5, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes))\x00'}, 0x58) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x76583, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1410, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x4e24, @empty}, 0x3ff, 0x0, 0x2}}, 0x2e) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 15.563312865s ago: executing program 1 (id=28): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r4, r5}, 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000000)=0x7ff, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000001c4dbeab72195326de00000000000000850000007b0000008500000007"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}, 0x94) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0xb, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000500)=0x4110, 0x4) sendto$inet6(r9, 0x0, 0xffffffffffffff5e, 0x80, &(0x7f0000000580)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x21}, 0x627bcaf8}, 0x1c) recvmmsg(r9, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x12000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r6, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES32], 0x1c}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000000300)={r1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="7001002017e000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf250b000000e800058008000100657468000c00028008000300090000004c000280080003000600000008000400050000000800030010000000080002007e00000008000200feffffff080003000f000000080001001e000000080002000500000008000300ff01000008000100756470001c000280080003000a0000000800030049ad00000800020008000000080001006574680024000280080001000b00000008000300020000000800030001800000080002000600000034000280080001000d000000080001000f0000000800020005000000080004000900000008000200b30d00000800010017000000040009800c000980080001000618417b640002800800010001000080040004003c0003800800010009000000080002000300000008000200450000000800020000000000080001000100ffff080002000600000008000100010100000400040014000380080001000400000008000200ff0f0000"], 0x170}, 0x1, 0x0, 0x0, 0x10}, 0x1) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="08d338be97dcc09db9ff05e20000faa270991fb56a0e9fabaa459965b73d5d"], 0x5}}, 0x4004810) connect$inet(r10, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 6.052835732s ago: executing program 32 (id=9): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x2c}}, 0x804) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x2c}}, 0x804) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, '(\'\\#-\xcb\\}{'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '\xd0/\xca^'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '!'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '}-+'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000005) (async) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, '(\'\\#-\xcb\\}{'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '\xd0/\xca^'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '!'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '}-+'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000005) 6.008270421s ago: executing program 33 (id=4): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x2004c890}, 0x0) r2 = socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010105}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r3, 0x1) setsockopt(r3, 0x84, 0x7d, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x1f0, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x29}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0x0, 0x0, 'pimreg1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x4, 0x6}}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x73}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x1}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e20, 0x5, @loopback, 0xfe29}, {0xa, 0x4e23, 0xcb6, @mcast2, 0x1}, 0xffffffffffffffff, {[0x7f, 0xc, 0x200, 0x7, 0x81, 0x800, 0x1ff, 0x4]}}, 0x5c) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="160000000108010100000000000040a33cda00"], 0x14}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8049}, 0x40000) socket$inet6_icmp(0xa, 0x2, 0x3a) write$rfkill(r0, &(0x7f00000002c0)={0x20000000, 0x8, 0x3, 0x3, 0xfd}, 0x8) socket$pppoe(0x18, 0x1, 0x0) 3.039942386s ago: executing program 34 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x4018, 0x3, 0x1e0, 0x0, 0x0, 0x148, 0x98, 0x148, 0x170, 0x240, 0x240, 0x170, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0xffffffff, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6c, 0x0, 0x18}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x8000000000000000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000600)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x7, 0x3, 0x80, 0x6}, @mpls={[], @ipv6=@udp={0x7, 0x6, "b21358", 0x1c9, 0x11, 0xff, @rand_addr=' \x01\x00', @empty, {[@dstopts={0x89, 0x9, '\x00', [@hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x30, {0x2, 0xa, 0x2, 0x400, [0x6, 0x8000000000000001, 0x8001, 0xfff, 0xb8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @fragment={0x45, 0x0, 0x9, 0x1, 0x0, 0x8, 0x64}, @dstopts={0x88, 0xd, '\x00', [@padn, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0xe}, @hao={0xc9, 0x10, @private2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x2, 0x10, 0xa, 0x2, [0x4000000000000, 0x2, 0x8162, 0x8, 0x100, 0x7, 0x3, 0x9]}}]}, @dstopts={0x0, 0x12, '\x00', [@generic={0x3, 0x48, "9f86ede23e4b5e46fd18f951f5293428bfc295cad0e6fdb5166386700881a5b42ba6584d508731faccfbfda607b975d139ac880ba0c02e3676a60122f381a290715f0be2b3edf289"}, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x8}, @generic={0x67, 0x3e, "5b76d1f8828609f172173e9b6bdf401948dee242de0603816f355fda9a1321bbb3e89770928f478fdeceecb7523167c295b67126a259d8732fc4e90637c7"}]}], {0x4e24, 0x4e21, 0x51, 0x0, @opaque="5c012022f78f2747cd6ec1de9cea4b333be8cab2b2498696d5032ffbddb186c9328e061359aa17cb64066f5893cc6e2a2b2cbc158f3cf666fddc365a707a89c26ea9352beaef40042f"}}}}}, 0x1ff) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x4, @remote, 0x5}], 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x4, 0xffffffffffffffdd, 0x400000, 0x0, 0xffffffffffffff1b, 0x3b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003}, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000840)={'tunl0\x00', 0x0, 0x1000e, 0x40, 0x12, 0x101, {{0x2c, 0x4, 0x3, 0x24, 0xb0, 0x64, 0x0, 0x2, 0x2f, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0x1f, 0xc3, [@rand_addr=0x64010102, @broadcast, @loopback, @rand_addr=0x64010101, @rand_addr=0x64010102, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0x57, 0x3, 0x0, [{@loopback, 0x2c9}]}, @ssrr={0x89, 0x13, 0x38, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101, @empty]}, @generic={0x94, 0x10, "c06e82c6951cd30f9b998e6e99e8"}, @generic={0x85, 0xb, "d5ed1c905693554c2f"}, @lsrr={0x83, 0x1f, 0x91, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x11}, @loopback, @rand_addr=0x64010101, @local, @remote, @multicast2]}, @rr={0x7, 0x23, 0x54, [@private=0xa010102, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x15}, @loopback]}]}}}}}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@func={0xf, 0x0, 0x0, 0xc, 0x3}, @const={0xb, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x61]}}, &(0x7f00000003c0)=""/54, 0x33, 0x36, 0x1, 0x7ff, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x40, 0x7, 0x8001, 0x40400, r5, 0x0, '\x00', r8, r9, 0x4, 0x0, 0x1, 0xa}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) socket$kcm(0x29, 0x95aa494c8c9d819f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000100039040000008136eefeee04aea800", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000200010100000800030000000000"], 0x44}}, 0x0) 0s ago: executing program 35 (id=28): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r4, r5}, 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000000)=0x7ff, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000001c4dbeab72195326de00000000000000850000007b0000008500000007"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}, 0x94) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0xb, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000500)=0x4110, 0x4) sendto$inet6(r9, 0x0, 0xffffffffffffff5e, 0x80, &(0x7f0000000580)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x21}, 0x627bcaf8}, 0x1c) recvmmsg(r9, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x12000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r6, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES32], 0x1c}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000000300)={r1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="7001002017e000", @ANYRES16=0x0, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x10}, 0x1) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="08d338be97dcc09db9ff05e20000faa270991fb56a0e9fabaa459965b73d5d"], 0x5}}, 0x4004810) connect$inet(r10, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts. [ 73.101514][ T5816] cgroup: Unknown subsys name 'net' [ 73.257009][ T5816] cgroup: Unknown subsys name 'cpuset' [ 73.266211][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.801851][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.011729][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.034956][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.043959][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.052461][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.061324][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.069916][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.078577][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.080102][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.087378][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.098997][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.101462][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.108033][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.117818][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.130682][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.131036][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.139029][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.147329][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.153470][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.163134][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.186859][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.198362][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.208746][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.216173][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.223647][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.235098][ T5150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.667426][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 77.880284][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.889698][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.897320][ T5834] bridge_slave_0: entered allmulticast mode [ 77.904597][ T5834] bridge_slave_0: entered promiscuous mode [ 77.948605][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.956063][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.964581][ T5834] bridge_slave_1: entered allmulticast mode [ 77.971702][ T5834] bridge_slave_1: entered promiscuous mode [ 78.011193][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 78.095153][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.159935][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.230294][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 78.242747][ T5834] team0: Port device team_slave_0 added [ 78.261123][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 78.288885][ T5834] team0: Port device team_slave_1 added [ 78.374609][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.382016][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.389829][ T5826] bridge_slave_0: entered allmulticast mode [ 78.397636][ T5826] bridge_slave_0: entered promiscuous mode [ 78.434400][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.441394][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.467860][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.480243][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.488203][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.495814][ T5826] bridge_slave_1: entered allmulticast mode [ 78.502798][ T5826] bridge_slave_1: entered promiscuous mode [ 78.515593][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 78.532354][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.539663][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.566906][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.658095][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.703626][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.710841][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.718544][ T5835] bridge_slave_0: entered allmulticast mode [ 78.726473][ T5835] bridge_slave_0: entered promiscuous mode [ 78.736523][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.775915][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.783129][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.790800][ T5835] bridge_slave_1: entered allmulticast mode [ 78.802776][ T5835] bridge_slave_1: entered promiscuous mode [ 78.820694][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.828052][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.835572][ T5827] bridge_slave_0: entered allmulticast mode [ 78.842838][ T5827] bridge_slave_0: entered promiscuous mode [ 78.898190][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.905722][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.913155][ T5827] bridge_slave_1: entered allmulticast mode [ 78.920551][ T5827] bridge_slave_1: entered promiscuous mode [ 78.944067][ T5834] hsr_slave_0: entered promiscuous mode [ 78.950573][ T5834] hsr_slave_1: entered promiscuous mode [ 78.971362][ T5826] team0: Port device team_slave_0 added [ 79.004196][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.015603][ T5826] team0: Port device team_slave_1 added [ 79.032071][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.040333][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.048085][ T5836] bridge_slave_0: entered allmulticast mode [ 79.055439][ T5836] bridge_slave_0: entered promiscuous mode [ 79.067016][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.092167][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.101980][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.109557][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.117008][ T5836] bridge_slave_1: entered allmulticast mode [ 79.124402][ T5836] bridge_slave_1: entered promiscuous mode [ 79.170603][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.194337][ T5846] Bluetooth: hci2: command tx timeout [ 79.210185][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.217575][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.244531][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.273443][ T5846] Bluetooth: hci0: command tx timeout [ 79.273481][ T5150] Bluetooth: hci3: command tx timeout [ 79.285595][ T5844] Bluetooth: hci4: command tx timeout [ 79.291778][ T5833] Bluetooth: hci1: command tx timeout [ 79.312195][ T5835] team0: Port device team_slave_0 added [ 79.319071][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.326506][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.352746][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.379296][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.397634][ T5835] team0: Port device team_slave_1 added [ 79.412548][ T5827] team0: Port device team_slave_0 added [ 79.420969][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.450493][ T5827] team0: Port device team_slave_1 added [ 79.518284][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.525613][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.553329][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.589964][ T5836] team0: Port device team_slave_0 added [ 79.602790][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.610274][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.638091][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.661102][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.668274][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.694870][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.707595][ T5836] team0: Port device team_slave_1 added [ 79.729095][ T5826] hsr_slave_0: entered promiscuous mode [ 79.735764][ T5826] hsr_slave_1: entered promiscuous mode [ 79.741956][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 79.747953][ T5826] Cannot create hsr debugfs directory [ 79.763750][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.770815][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.797196][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.869264][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.877157][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.903466][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.949082][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.956473][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.983545][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.050403][ T5835] hsr_slave_0: entered promiscuous mode [ 80.056822][ T5835] hsr_slave_1: entered promiscuous mode [ 80.062990][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 80.069714][ T5835] Cannot create hsr debugfs directory [ 80.121609][ T5827] hsr_slave_0: entered promiscuous mode [ 80.128231][ T5827] hsr_slave_1: entered promiscuous mode [ 80.135795][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 80.141540][ T5827] Cannot create hsr debugfs directory [ 80.230506][ T5836] hsr_slave_0: entered promiscuous mode [ 80.237262][ T5836] hsr_slave_1: entered promiscuous mode [ 80.244291][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 80.250045][ T5836] Cannot create hsr debugfs directory [ 80.432363][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.450698][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.479583][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.514842][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.666818][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.680350][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.697775][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.711322][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.795460][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.809187][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.832947][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.860085][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.986858][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.006633][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.022097][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.046636][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.056805][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.128982][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.144339][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.179388][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.195066][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.209284][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.216606][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.235485][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.252981][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.260231][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.271347][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.286662][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.293502][ T5833] Bluetooth: hci2: command tx timeout [ 81.338123][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.345423][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.353391][ T5833] Bluetooth: hci1: command tx timeout [ 81.359023][ T5833] Bluetooth: hci3: command tx timeout [ 81.365604][ T5150] Bluetooth: hci4: command tx timeout [ 81.371267][ T5844] Bluetooth: hci0: command tx timeout [ 81.411765][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.419291][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.436241][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.519121][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.553868][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.561000][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.585726][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.592901][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.634314][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.705674][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.740489][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.775217][ T3851] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.782546][ T3851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.793214][ T3851] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.800410][ T3851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.898379][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.972373][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.979909][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.036321][ T3851] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.043554][ T3851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.084393][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.197395][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.332338][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.346368][ T5834] veth0_vlan: entered promiscuous mode [ 82.410811][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.428169][ T5834] veth1_vlan: entered promiscuous mode [ 82.448670][ T5826] veth0_vlan: entered promiscuous mode [ 82.480202][ T5826] veth1_vlan: entered promiscuous mode [ 82.566487][ T5835] veth0_vlan: entered promiscuous mode [ 82.585723][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.634059][ T5834] veth0_macvtap: entered promiscuous mode [ 82.666989][ T5835] veth1_vlan: entered promiscuous mode [ 82.685165][ T5826] veth0_macvtap: entered promiscuous mode [ 82.696282][ T5834] veth1_macvtap: entered promiscuous mode [ 82.746431][ T5826] veth1_macvtap: entered promiscuous mode [ 82.756678][ T5836] veth0_vlan: entered promiscuous mode [ 82.792804][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.821535][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.846261][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.860591][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.872259][ T5836] veth1_vlan: entered promiscuous mode [ 82.901070][ T3851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.919593][ T3851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.939247][ T3851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.952235][ T3851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.968605][ T3851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.980103][ T5835] veth0_macvtap: entered promiscuous mode [ 82.991686][ T3851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.010464][ T3851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.026719][ T3851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.039154][ T5835] veth1_macvtap: entered promiscuous mode [ 83.165090][ T5836] veth0_macvtap: entered promiscuous mode [ 83.193163][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.220658][ T3851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.224121][ T5836] veth1_macvtap: entered promiscuous mode [ 83.230192][ T3851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.264431][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.309218][ T3851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.319325][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.333626][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.338938][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.340982][ T3851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.355286][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.365617][ T5844] Bluetooth: hci2: command tx timeout [ 83.374277][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.435537][ T5150] Bluetooth: hci4: command tx timeout [ 83.436694][ T5833] Bluetooth: hci1: command tx timeout [ 83.441712][ T5150] Bluetooth: hci3: command tx timeout [ 83.453417][ T5844] Bluetooth: hci0: command tx timeout [ 83.461893][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.471708][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.483840][ T5827] veth0_vlan: entered promiscuous mode [ 83.491761][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.507159][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.521070][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.544509][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.559061][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.568601][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.580685][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.596397][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.682488][ T5827] veth1_vlan: entered promiscuous mode [ 83.765243][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.790908][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.944755][ T4316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.955714][ T4316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.006241][ T5954] gretap1: entered promiscuous mode [ 84.012210][ T5827] veth0_macvtap: entered promiscuous mode [ 84.016680][ T5951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6'. [ 84.040668][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.050806][ T5827] veth1_macvtap: entered promiscuous mode [ 84.071981][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.136200][ T5953] tipc: Started in network mode [ 84.148010][ T5953] tipc: Node identity 3e513ecda692, cluster identity 4711 [ 84.157447][ T5953] tipc: Enabled bearer , priority 0 [ 84.183810][ T5953] syzkaller0: entered promiscuous mode [ 84.191539][ T5953] syzkaller0: entered allmulticast mode [ 84.210810][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.230763][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.247573][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.268534][ T5953] syzkaller0: left promiscuous mode [ 84.274001][ T5953] syzkaller0: left allmulticast mode [ 84.281407][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.300400][ T5961] netlink: 'syz.2.8': attribute type 2 has an invalid length. [ 84.318883][ T5952] tipc: Resetting bearer [ 84.355386][ T5952] tipc: Disabling bearer [ 84.419569][ T5959] syzkaller0: entered promiscuous mode [ 84.434559][ T5959] syzkaller0: entered allmulticast mode [ 84.470680][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.486700][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.534284][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.582292][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.724303][ T5970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 84.739734][ T5983] Cannot find add_set index 1 as target [ 84.758219][ T5977] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 84.817789][ T5990] netlink: 'syz.2.11': attribute type 1 has an invalid length. [ 85.051506][ T5995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11'. [ 85.434368][ T5844] Bluetooth: hci2: command tx timeout [ 85.513738][ T5844] Bluetooth: hci1: command tx timeout [ 85.515407][ T5150] Bluetooth: hci0: command tx timeout [ 85.520321][ T5833] Bluetooth: hci3: command tx timeout [ 85.525642][ T5846] Bluetooth: hci4: command tx timeout [ 85.813781][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 85.834545][ T6001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13'. [ 85.925716][ T6004] Zero length message leads to an empty skb [ 86.747395][ T6016] openvswitch: netlink: Flow actions attr not present in new flow. [ 86.889114][ T6023] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 86.899099][ T24] cfg80211: failed to load regulatory.db [ 86.900229][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 87.040369][ T6029] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.081133][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 88.219997][ T6042] Bluetooth: MGMT ver 1.23 [ 132.966731][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.974948][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.399205][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.405783][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.595254][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 201.608564][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 201.613556][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 201.615011][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 236.636345][ T31] INFO: task syz-executor:5827 blocked for more than 143 seconds. [ 236.644466][ T31] Not tainted syzkaller #0 [ 236.649424][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.662912][ T31] task:syz-executor state:D stack:21432 pid:5827 tgid:5827 ppid:1 task_flags:0x400140 flags:0x00080002 [ 236.674941][ T31] Call Trace: [ 236.678249][ T31] [ 236.681233][ T31] __schedule+0x14bc/0x5000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 236.685933][ T31] ? __pfx___schedule+0x10/0x10 [ 236.690816][ T31] ? schedule+0x91/0x360 [ 236.695169][ T31] schedule+0x165/0x360 [ 236.699360][ T31] schedule_preempt_disabled+0x13/0x30 [ 236.704916][ T31] __mutex_lock+0x7e6/0x1350 [ 236.709551][ T31] ? __mutex_lock+0x5bb/0x1350 [ 236.714468][ T31] ? rfkill_fop_open+0x12d/0x820 [ 236.719435][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 236.724606][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 236.729928][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 236.735735][ T31] rfkill_fop_open+0x12d/0x820 [ 236.740536][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 236.783221][ T31] misc_open+0x2d5/0x350 [ 236.787530][ T31] chrdev_open+0x4cc/0x5e0 [ 236.808637][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 236.821375][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 236.828105][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 236.833072][ T31] do_dentry_open+0x7ce/0x1420 [ 236.837925][ T31] vfs_open+0x3b/0x340 [ 236.841999][ T31] ? path_openat+0x33f3/0x3dd0 [ 236.846981][ T31] path_openat+0x340e/0x3dd0 [ 236.851575][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 236.856996][ T31] ? stack_depot_save_flags+0x40/0x850 [ 236.862483][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 236.869091][ T31] ? getname_flags+0xb8/0x540 [ 236.877505][ T31] ? __pfx_path_openat+0x10/0x10 [ 236.882573][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 236.887575][ T31] do_filp_open+0x1fa/0x410 [ 236.892087][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 236.897209][ T31] ? _raw_spin_unlock+0x28/0x50 [ 236.902074][ T31] ? alloc_fd+0x64c/0x6c0 [ 236.906467][ T31] do_sys_openat2+0x121/0x200 [ 236.911179][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 236.916475][ T31] ? fput_close_sync+0x113/0x220 [ 236.921453][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 236.926799][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 236.932186][ T31] __x64_sys_openat+0x138/0x170 [ 236.937088][ T31] do_syscall_64+0xfa/0xf80 [ 236.941695][ T31] ? rcu_is_watching+0x15/0xb0 [ 236.946672][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.952742][ T31] ? clear_bhb_loop+0x60/0xb0 [ 236.957471][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.963494][ T31] RIP: 0033:0x7f8fa9d8df90 [ 236.967985][ T31] RSP: 002b:00007ffea32f1b60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 236.977452][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f8fa9d8df90 [ 236.985615][ T31] RDX: 0000000000000002 RSI: 00007f8fa9e14a62 RDI: 00000000ffffff9c [ 236.993656][ T31] RBP: 00007f8fa9e14a62 R08: 0000000000000000 R09: 0000000000000000 [ 237.003032][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 237.011292][ T31] R13: 0000000000000003 R14: 00007ffea32f1f38 R15: 0000000000000000 [ 237.019561][ T31] [ 237.022917][ T31] INFO: task kworker/1:4:5890 blocked for more than 143 seconds. [ 237.031370][ T31] Not tainted syzkaller #0 [ 237.037552][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.047472][ T31] task:kworker/1:4 state:D stack:22872 pid:5890 tgid:5890 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 237.061100][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 237.070007][ T31] Call Trace: [ 237.074690][ T31] [ 237.077751][ T31] __schedule+0x14bc/0x5000 [ 237.082378][ T31] ? __pfx___schedule+0x10/0x10 [ 237.088016][ T31] ? schedule+0x91/0x360 [ 237.093970][ T31] schedule+0x165/0x360 [ 237.098601][ T31] schedule_preempt_disabled+0x13/0x30 [ 237.104705][ T31] __mutex_lock+0x7e6/0x1350 [ 237.109597][ T31] ? __mutex_lock+0x5bb/0x1350 [ 237.114663][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 237.120935][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 237.126073][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 237.131822][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 237.137594][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 237.143723][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 237.149458][ T31] process_scheduled_works+0xad1/0x1770 [ 237.155069][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 237.161062][ T31] worker_thread+0x8a0/0xda0 [ 237.165713][ T31] kthread+0x711/0x8a0 [ 237.169788][ T31] ? __pfx_worker_thread+0x10/0x10 [ 237.176276][ T31] ? __pfx_kthread+0x10/0x10 [ 237.180897][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.186135][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 237.191345][ T31] ? __pfx_kthread+0x10/0x10 [ 237.196329][ T31] ret_from_fork+0x599/0xb30 [ 237.200933][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 237.206103][ T31] ? __switch_to_asm+0x39/0x70 [ 237.210873][ T31] ? __switch_to_asm+0x33/0x70 [ 237.215674][ T31] ? __pfx_kthread+0x10/0x10 [ 237.220269][ T31] ret_from_fork_asm+0x1a/0x30 [ 237.225094][ T31] [ 237.228236][ T31] INFO: task syz.0.9:5977 blocked for more than 143 seconds. [ 237.235659][ T31] Not tainted syzkaller #0 [ 237.240593][ T31] Blocked by coredump. [ 237.245215][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.253913][ T31] task:syz.0.9 state:D stack:25576 pid:5977 tgid:5967 ppid:5826 task_flags:0x40054c flags:0x00080001 [ 237.265861][ T31] Call Trace: [ 237.269223][ T31] [ 237.272142][ T31] __schedule+0x14bc/0x5000 [ 237.277807][ T31] ? __pfx___schedule+0x10/0x10 [ 237.282768][ T31] ? schedule+0x91/0x360 [ 237.287360][ T31] schedule+0x165/0x360 [ 237.291523][ T31] schedule_preempt_disabled+0x13/0x30 [ 237.297049][ T31] __mutex_lock+0x7e6/0x1350 [ 237.301659][ T31] ? __mutex_lock+0x5bb/0x1350 [ 237.306514][ T31] ? rfkill_unregister+0xc8/0x220 [ 237.311564][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 237.316647][ T31] ? __pfx_device_del+0x10/0x10 [ 237.321500][ T31] ? __cancel_work_sync+0x5c/0x110 [ 237.326667][ T31] rfkill_unregister+0xc8/0x220 [ 237.331521][ T31] nfc_unregister_device+0x96/0x300 [ 237.336763][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 237.342533][ T31] virtual_ncidev_close+0x56/0x90 [ 237.347682][ T31] __fput+0x44c/0xa70 [ 237.351676][ T31] task_work_run+0x1d4/0x260 [ 237.356418][ T31] ? __pfx_task_work_run+0x10/0x10 [ 237.361547][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 237.366807][ T31] do_exit+0x6c5/0x2310 [ 237.370975][ T31] ? do_raw_spin_lock+0x121/0x290 [ 237.376070][ T31] ? __pfx_do_exit+0x10/0x10 [ 237.381486][ T31] do_group_exit+0x21c/0x2d0 [ 237.386161][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 237.391379][ T31] get_signal+0x1285/0x1340 [ 237.395949][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 237.401513][ T31] ? fput+0xa0/0xd0 [ 237.405353][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 237.411513][ T31] ? __x64_sys_sendmsg+0x230/0x260 [ 237.416690][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 237.422295][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 237.427783][ T31] ? rcu_is_watching+0x15/0xb0 [ 237.432733][ T31] do_syscall_64+0x2d0/0xf80 [ 237.437432][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.443564][ T31] ? clear_bhb_loop+0x60/0xb0 [ 237.448257][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.454226][ T31] RIP: 0033:0x7f461738f749 [ 237.458691][ T31] RSP: 002b:00007f461816c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.467147][ T31] RAX: 000000000000002c RBX: 00007f46175e6090 RCX: 00007f461738f749 [ 237.475165][ T31] RDX: 0000000000000804 RSI: 0000200000000380 RDI: 0000000000000005 [ 237.484192][ T31] RBP: 00007f4617413f91 R08: 0000000000000000 R09: 0000000000000000 [ 237.492198][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.500368][ T31] R13: 00007f46175e6128 R14: 00007f46175e6090 R15: 00007ffd0fa43fe8 [ 237.508397][ T31] [ 237.511585][ T31] INFO: task syz.3.4:5991 blocked for more than 144 seconds. [ 237.522510][ T31] Not tainted syzkaller #0 [ 237.527515][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.536268][ T31] task:syz.3.4 state:D stack:26744 pid:5991 tgid:5976 ppid:5836 task_flags:0x400040 flags:0x00080002 [ 237.548232][ T31] Call Trace: [ 237.551513][ T31] [ 237.554499][ T31] __schedule+0x14bc/0x5000 [ 237.559054][ T31] ? __pfx___schedule+0x10/0x10 [ 237.563974][ T31] ? schedule+0x91/0x360 [ 237.568232][ T31] schedule+0x165/0x360 [ 237.572423][ T31] schedule_preempt_disabled+0x13/0x30 [ 237.577915][ T31] __mutex_lock+0x7e6/0x1350 [ 237.582524][ T31] ? __mutex_lock+0x5bb/0x1350 [ 237.588287][ T31] ? nfc_dev_down+0x3b/0x290 [ 237.593856][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 237.598891][ T31] ? do_raw_spin_lock+0x121/0x290 [ 237.603981][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 237.609888][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 237.615127][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 237.620848][ T31] nfc_dev_down+0x3b/0x290 [ 237.625322][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 237.631060][ T31] nfc_rfkill_set_block+0x2d/0x100 [ 237.636281][ T31] rfkill_set_block+0x1d2/0x440 [ 237.641185][ T31] rfkill_fop_write+0x44b/0x570 [ 237.646080][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 237.651470][ T31] ? security_kernfs_init_security+0x220/0x290 [ 237.657666][ T31] ? rw_verify_area+0x255/0x4d0 [ 237.662520][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 237.667931][ T31] vfs_write+0x27e/0xb30 [ 237.672208][ T31] ? __pfx_vfs_write+0x10/0x10 [ 237.677095][ T31] ? __fget_files+0x2a/0x420 [ 237.681695][ T31] ? __fget_files+0x2a/0x420 [ 237.687409][ T31] ? __fget_files+0x3a0/0x420 [ 237.692106][ T31] ? __fget_files+0x2a/0x420 [ 237.696759][ T31] ksys_write+0x145/0x250 [ 237.701116][ T31] ? __pfx_ksys_write+0x10/0x10 [ 237.706036][ T31] ? do_syscall_64+0xbe/0xf80 [ 237.710812][ T31] do_syscall_64+0xfa/0xf80 [ 237.715368][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.721436][ T31] ? clear_bhb_loop+0x60/0xb0 [ 237.726151][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.732048][ T31] RIP: 0033:0x7ffb12f8f749 [ 237.736598][ T31] RSP: 002b:00007ffb13de3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 237.745098][ T31] RAX: ffffffffffffffda RBX: 00007ffb131e6180 RCX: 00007ffb12f8f749 [ 237.753075][ T31] RDX: 0000000000000008 RSI: 00002000000002c0 RDI: 0000000000000003 [ 237.761108][ T31] RBP: 00007ffb13013f91 R08: 0000000000000000 R09: 0000000000000000 [ 237.769117][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.777127][ T31] R13: 00007ffb131e6218 R14: 00007ffb131e6180 R15: 00007ffc73b9f998 [ 237.785214][ T31] [ 237.789512][ T31] INFO: task syz.2.22:6031 blocked for more than 144 seconds. [ 237.799086][ T31] Not tainted syzkaller #0 [ 237.804103][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.812775][ T31] task:syz.2.22 state:D stack:28152 pid:6031 tgid:6030 ppid:5834 task_flags:0x400140 flags:0x00080002 [ 237.824738][ T31] Call Trace: [ 237.828021][ T31] [ 237.830940][ T31] __schedule+0x14bc/0x5000 [ 237.835521][ T31] ? __pfx___schedule+0x10/0x10 [ 237.840402][ T31] ? schedule+0x91/0x360 [ 237.844885][ T31] schedule+0x165/0x360 [ 237.849061][ T31] schedule_preempt_disabled+0x13/0x30 [ 237.854586][ T31] __mutex_lock+0x7e6/0x1350 [ 237.859199][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 237.864217][ T31] ? __mutex_lock+0x5bb/0x1350 [ 237.869001][ T31] ? misc_open+0x51/0x350 [ 237.873416][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 237.878461][ T31] misc_open+0x51/0x350 [ 237.882617][ T31] chrdev_open+0x4cc/0x5e0 [ 237.887092][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 237.892843][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 237.899353][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 237.904324][ T31] do_dentry_open+0x7ce/0x1420 [ 237.909094][ T31] vfs_open+0x3b/0x340 [ 237.913148][ T31] ? path_openat+0x33f3/0x3dd0 [ 237.921114][ T31] path_openat+0x340e/0x3dd0 [ 237.926122][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 237.931523][ T31] ? stack_depot_save_flags+0x40/0x850 [ 237.937101][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 237.942866][ T31] ? getname_flags+0xb8/0x540 [ 237.948392][ T31] ? __pfx_path_openat+0x10/0x10 [ 237.954689][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 237.959635][ T31] do_filp_open+0x1fa/0x410 [ 237.964169][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 237.969205][ T31] ? _raw_spin_unlock+0x28/0x50 [ 237.974737][ T31] ? alloc_fd+0x64c/0x6c0 [ 237.979086][ T31] do_sys_openat2+0x121/0x200 [ 237.983815][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 237.989029][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 237.995583][ T31] __x64_sys_openat+0x138/0x170 [ 238.000598][ T31] do_syscall_64+0xfa/0xf80 [ 238.005253][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.011334][ T31] ? clear_bhb_loop+0x60/0xb0 [ 238.016048][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.021944][ T31] RIP: 0033:0x7f0884f8f749 [ 238.026398][ T31] RSP: 002b:00007f0885e59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 238.034866][ T31] RAX: ffffffffffffffda RBX: 00007f08851e5fa0 RCX: 00007f0884f8f749 [ 238.042931][ T31] RDX: 00000000001c1842 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 238.050941][ T31] RBP: 00007f0885013f91 R08: 0000000000000000 R09: 0000000000000000 [ 238.059040][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.067070][ T31] R13: 00007f08851e6038 R14: 00007f08851e5fa0 R15: 00007fff62eedb58 [ 238.075160][ T31] [ 238.078237][ T31] INFO: task syz.2.22:6034 blocked for more than 144 seconds. [ 238.085972][ T31] Not tainted syzkaller #0 [ 238.091042][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 238.100784][ T31] task:syz.2.22 state:D stack:24280 pid:6034 tgid:6030 ppid:5834 task_flags:0x400140 flags:0x00080002 [ 238.112777][ T31] Call Trace: [ 238.116097][ T31] [ 238.119035][ T31] __schedule+0x14bc/0x5000 [ 238.123625][ T31] ? __pfx___schedule+0x10/0x10 [ 238.128574][ T31] ? schedule+0x91/0x360 [ 238.132823][ T31] schedule+0x165/0x360 [ 238.137060][ T31] schedule_preempt_disabled+0x13/0x30 [ 238.142538][ T31] __mutex_lock+0x7e6/0x1350 [ 238.147196][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 238.152153][ T31] ? __mutex_lock+0x5bb/0x1350 [ 238.157104][ T31] ? misc_open+0x51/0x350 [ 238.161544][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 238.166710][ T31] misc_open+0x51/0x350 [ 238.171056][ T31] chrdev_open+0x4cc/0x5e0 [ 238.175607][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 238.180558][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 238.186954][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 238.191919][ T31] do_dentry_open+0x7ce/0x1420 [ 238.196748][ T31] vfs_open+0x3b/0x340 [ 238.201634][ T31] ? path_openat+0x33f3/0x3dd0 [ 238.206506][ T31] path_openat+0x340e/0x3dd0 [ 238.211148][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 238.216603][ T31] ? stack_depot_save_flags+0x40/0x850 [ 238.222186][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 238.227885][ T31] ? getname_flags+0xb8/0x540 [ 238.232589][ T31] ? __pfx_path_openat+0x10/0x10 [ 238.237861][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 238.242828][ T31] do_filp_open+0x1fa/0x410 [ 238.247414][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 238.252483][ T31] ? _raw_spin_unlock+0x28/0x50 [ 238.257398][ T31] ? alloc_fd+0x64c/0x6c0 [ 238.261749][ T31] do_sys_openat2+0x121/0x200 [ 238.266533][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 238.271850][ T31] ? rcu_is_watching+0x15/0xb0 [ 238.276765][ T31] __x64_sys_openat+0x138/0x170 [ 238.281648][ T31] do_syscall_64+0xfa/0xf80 [ 238.286216][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.292304][ T31] ? clear_bhb_loop+0x60/0xb0 [ 238.297040][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.304040][ T31] RIP: 0033:0x7f0884f8f749 [ 238.308492][ T31] RSP: 002b:00007f0885e38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 238.317226][ T31] RAX: ffffffffffffffda RBX: 00007f08851e6090 RCX: 00007f0884f8f749 [ 238.325430][ T31] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 238.333457][ T31] RBP: 00007f0885013f91 R08: 0000000000000000 R09: 0000000000000000 [ 238.341440][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.353392][ T31] R13: 00007f08851e6128 R14: 00007f08851e6090 R15: 00007fff62eedb58 [ 238.362714][ T31] [ 238.366056][ T31] INFO: task syz.1.28:6060 blocked for more than 145 seconds. [ 238.374720][ T31] Not tainted syzkaller #0 [ 238.380317][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 238.390234][ T31] task:syz.1.28 state:D stack:24088 pid:6060 tgid:6059 ppid:5835 task_flags:0x400140 flags:0x00080002 [ 238.405310][ T31] Call Trace: [ 238.409316][ T31] [ 238.412776][ T31] __schedule+0x14bc/0x5000 [ 238.417921][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 238.425051][ T31] ? __pfx___schedule+0x10/0x10 [ 238.431070][ T31] ? schedule+0x91/0x360 [ 238.436267][ T31] schedule+0x165/0x360 [ 238.441665][ T31] schedule_preempt_disabled+0x13/0x30 [ 238.448166][ T31] __mutex_lock+0x7e6/0x1350 [ 238.453615][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 238.460717][ T31] ? __mutex_lock+0x5bb/0x1350 [ 238.466425][ T31] ? misc_open+0x51/0x350 [ 238.473576][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 238.480488][ T31] misc_open+0x51/0x350 [ 238.486267][ T31] chrdev_open+0x4cc/0x5e0 [ 238.490831][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 238.496098][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 238.502738][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 238.509220][ T31] do_dentry_open+0x7ce/0x1420 [ 238.514105][ T31] vfs_open+0x3b/0x340 [ 238.518209][ T31] ? path_openat+0x33f3/0x3dd0 [ 238.523001][ T31] path_openat+0x340e/0x3dd0 [ 238.528000][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 238.533459][ T31] ? stack_depot_save_flags+0x40/0x850 [ 238.538963][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 238.544650][ T31] ? getname_flags+0xb8/0x540 [ 238.549341][ T31] ? __pfx_path_openat+0x10/0x10 [ 238.554613][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 238.559677][ T31] do_filp_open+0x1fa/0x410 [ 238.564268][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 238.569321][ T31] ? _raw_spin_unlock+0x28/0x50 [ 238.574334][ T31] ? alloc_fd+0x64c/0x6c0 [ 238.578685][ T31] do_sys_openat2+0x121/0x200 [ 238.583422][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 238.588640][ T31] ? rcu_is_watching+0x15/0xb0 [ 238.593472][ T31] __x64_sys_openat+0x138/0x170 [ 238.598357][ T31] do_syscall_64+0xfa/0xf80 [ 238.602879][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.610048][ T31] ? clear_bhb_loop+0x60/0xb0 [ 238.614814][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.620715][ T31] RIP: 0033:0x7f22c838f749 [ 238.625176][ T31] RSP: 002b:00007f22c91dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 238.633788][ T31] RAX: ffffffffffffffda RBX: 00007f22c85e5fa0 RCX: 00007f22c838f749 [ 238.641781][ T31] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 238.649955][ T31] RBP: 00007f22c8413f91 R08: 0000000000000000 R09: 0000000000000000 [ 238.658078][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.668432][ T31] R13: 00007f22c85e6038 R14: 00007f22c85e5fa0 R15: 00007fff8d93c0a8 [ 238.681601][ T31] [ 238.684816][ T31] [ 238.684816][ T31] Showing all locks held in the system: [ 238.692549][ T31] 1 lock held by khungtaskd/31: [ 238.697548][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 238.707488][ T31] 2 locks held by getty/5591: [ 238.713051][ T31] #0: ffff88814cb960a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 238.722893][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 238.733054][ T31] 1 lock held by syz-executor/5826: [ 238.738283][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 238.748492][ T31] 2 locks held by syz-executor/5827: [ 238.753842][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 238.762308][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 238.772387][ T31] 3 locks held by kworker/1:4/5890: [ 238.777801][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 238.788913][ T31] #1: ffffc9000449fb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 238.802604][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 238.815410][ T31] 2 locks held by syz.0.9/5977: [ 238.820322][ T31] #0: ffff888053144100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300 [ 238.830156][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 238.840403][ T31] 2 locks held by syz.3.4/5991: [ 238.845333][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 238.855484][ T31] #1: ffff888053144100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290 [ 238.864526][ T31] 1 lock held by syz.2.22/6031: [ 238.869411][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 238.878091][ T31] 1 lock held by syz.2.22/6034: [ 238.882971][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 238.891860][ T31] 1 lock held by syz.1.28/6060: [ 238.896761][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 238.905245][ T31] 1 lock held by syz-executor/6068: [ 238.910449][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 238.919924][ T31] 1 lock held by syz-executor/6069: [ 238.925201][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 238.933720][ T31] 1 lock held by syz-executor/6071: [ 238.939003][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 238.947509][ T31] 1 lock held by syz-executor/6074: [ 238.952809][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 238.961405][ T31] 1 lock held by syz-executor/6087: [ 238.966649][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 238.975159][ T31] 1 lock held by syz-executor/6090: [ 238.980366][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 238.989053][ T31] 1 lock held by syz-executor/6091: [ 238.994487][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 239.003020][ T31] 1 lock held by syz-executor/6093: [ 239.008352][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 239.017885][ T31] 1 lock held by syz-executor/6095: [ 239.023101][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 239.031807][ T31] 1 lock held by syz-executor/6103: [ 239.037329][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 239.046165][ T31] 1 lock held by syz-executor/6108: [ 239.051354][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 239.059850][ T31] 1 lock held by syz-executor/6109: [ 239.065210][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 239.073732][ T31] 1 lock held by syz-executor/6111: [ 239.078937][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 239.087475][ T31] 1 lock held by syz-executor/6113: [ 239.092712][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 239.101234][ T31] [ 239.103712][ T31] ============================================= [ 239.103712][ T31] [ 239.112109][ T31] NMI backtrace for cpu 1 [ 239.112132][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 239.112144][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.112149][ T31] Call Trace: [ 239.112155][ T31] [ 239.112160][ T31] dump_stack_lvl+0x189/0x250 [ 239.112177][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.112188][ T31] ? __pfx__printk+0x10/0x10 [ 239.112207][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 239.112222][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 239.112235][ T31] ? __pfx__printk+0x10/0x10 [ 239.112250][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 239.112266][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 239.112279][ T31] sys_info+0x135/0x170 [ 239.112290][ T31] watchdog+0xf95/0xfe0 [ 239.112306][ T31] ? watchdog+0x20a/0xfe0 [ 239.112321][ T31] kthread+0x711/0x8a0 [ 239.112334][ T31] ? __pfx_watchdog+0x10/0x10 [ 239.112346][ T31] ? __pfx_kthread+0x10/0x10 [ 239.112358][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 239.112372][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 239.112381][ T31] ? __pfx_kthread+0x10/0x10 [ 239.112393][ T31] ret_from_fork+0x599/0xb30 [ 239.112404][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 239.112417][ T31] ? __switch_to_asm+0x39/0x70 [ 239.112428][ T31] ? __switch_to_asm+0x33/0x70 [ 239.112439][ T31] ? __pfx_kthread+0x10/0x10 [ 239.112450][ T31] ret_from_fork_asm+0x1a/0x30 [ 239.112470][ T31] [ 239.112474][ T31] Sending NMI from CPU 1 to CPUs 0: [ 239.264517][ C0] NMI backtrace for cpu 0 [ 239.264533][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 239.264550][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.264559][ C0] Workqueue: events_unbound toggle_allocation_gate [ 239.264582][ C0] RIP: 0010:text_poke_memcpy+0x25/0x40 [ 239.264602][ C0] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 48 89 d3 49 89 f6 49 89 ff e8 79 2a 59 00 0f 1f 00 4c 89 f6 4c 89 ff 48 89 d9 f3 a4 <0f> 1f 00 5b 41 5e 41 5f c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 [ 239.264614][ C0] RSP: 0018:ffffc90000127660 EFLAGS: 00000093 [ 239.264626][ C0] RAX: ffffffff816887d7 RBX: 0000000000000001 RCX: 0000000000000000 [ 239.264636][ C0] RDX: 0000000000000000 RSI: ffffc900001278b1 RDI: 00002aaaaaaab57b [ 239.264647][ C0] RBP: ffffc900001277d0 R08: ffff88813ff18a13 R09: 1ffff11027fe3142 [ 239.264658][ C0] R10: dffffc0000000000 R11: ffffffff816887c0 R12: 0000000000000001 [ 239.264668][ C0] R13: 1ffff11027fe4aab R14: ffffc900001278b0 R15: 00002aaaaaaab57a [ 239.264678][ C0] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 239.264690][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.264700][ C0] CR2: 00007ffdacfb5dc8 CR3: 000000013ff20000 CR4: 00000000003526f0 [ 239.264714][ C0] Call Trace: [ 239.264721][ C0] [ 239.264736][ C0] __text_poke+0x67d/0x9f0 [ 239.264756][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 239.264773][ C0] ? perf_event_text_poke+0x13d/0x190 [ 239.264797][ C0] ? kmem_cache_alloc_bulk_noprof+0xaa/0x720 [ 239.264814][ C0] ? __pfx___text_poke+0x10/0x10 [ 239.264829][ C0] ? rcu_is_watching+0x15/0xb0 [ 239.264847][ C0] ? trace_contention_end+0x39/0x100 [ 239.264871][ C0] smp_text_poke_batch_finish+0xd0f/0x1130 [ 239.264894][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 239.264914][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 239.264940][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 239.264959][ C0] static_key_disable_cpuslocked+0xc5/0x1a0 [ 239.264980][ C0] static_key_disable+0x1a/0x20 [ 239.264998][ C0] toggle_allocation_gate+0x1a1/0x240 [ 239.265015][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 239.265031][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 239.265054][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 239.265069][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 239.265084][ C0] process_scheduled_works+0xad1/0x1770 [ 239.265118][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 239.265140][ C0] worker_thread+0x8a0/0xda0 [ 239.265167][ C0] kthread+0x711/0x8a0 [ 239.265186][ C0] ? __pfx_worker_thread+0x10/0x10 [ 239.265200][ C0] ? __pfx_kthread+0x10/0x10 [ 239.265218][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 239.265238][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 239.265252][ C0] ? __pfx_kthread+0x10/0x10 [ 239.265270][ C0] ret_from_fork+0x599/0xb30 [ 239.265285][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 239.265304][ C0] ? __switch_to_asm+0x39/0x70 [ 239.265321][ C0] ? __switch_to_asm+0x33/0x70 [ 239.265338][ C0] ? __pfx_kthread+0x10/0x10 [ 239.265355][ C0] ret_from_fork_asm+0x1a/0x30 [ 239.265380][ C0] [ 239.582277][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 239.589138][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 239.598239][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.608310][ T31] Call Trace: [ 239.611579][ T31] [ 239.614501][ T31] dump_stack_lvl+0x99/0x250 [ 239.619074][ T31] ? __asan_memcpy+0x40/0x70 [ 239.623649][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.628847][ T31] ? __pfx__printk+0x10/0x10 [ 239.633447][ T31] vpanic+0x237/0x6d0 [ 239.637456][ T31] ? __pfx_vpanic+0x10/0x10 [ 239.641954][ T31] ? preempt_schedule_common+0x83/0xd0 [ 239.647397][ T31] panic+0xb9/0xc0 [ 239.651126][ T31] ? __pfx_panic+0x10/0x10 [ 239.655536][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 239.660891][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 239.667054][ T31] watchdog+0xfdf/0xfe0 [ 239.671195][ T31] ? watchdog+0x20a/0xfe0 [ 239.675525][ T31] kthread+0x711/0x8a0 [ 239.679602][ T31] ? __pfx_watchdog+0x10/0x10 [ 239.684269][ T31] ? __pfx_kthread+0x10/0x10 [ 239.688844][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 239.694042][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 239.699218][ T31] ? __pfx_kthread+0x10/0x10 [ 239.703845][ T31] ret_from_fork+0x599/0xb30 [ 239.708428][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 239.713547][ T31] ? __switch_to_asm+0x39/0x70 [ 239.718319][ T31] ? __switch_to_asm+0x33/0x70 [ 239.723113][ T31] ? __pfx_kthread+0x10/0x10 [ 239.727710][ T31] ret_from_fork_asm+0x1a/0x30 [ 239.732482][ T31] [ 239.735880][ T31] Kernel Offset: disabled [ 239.740213][ T31] Rebooting in 86400 seconds..