last executing test programs: 17.613005109s ago: executing program 0 (id=1): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000000c0)={'pim6reg0\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a30000000000900020073797a32"], 0xa0}}, 0x40880) write$rfkill(r0, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) 15.593242684s ago: executing program 2 (id=13): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0xc}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0x8000, 0x9, 0x100, 0x0, 0x42010008}) 15.530257482s ago: executing program 2 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x4}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x1}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'syztnl2\x00', &(0x7f0000000fc0)={'ip6_vti0\x00', 0x0, 0x29, 0x13, 0x3, 0x6, 0x17, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @loopback, 0x20, 0x720, 0x80000001, 0x97}}) r2 = socket$nl_crypto(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={r3, r4, 0x25, 0x0, @void}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001100)={'ip6_vti0\x00', &(0x7f0000001080)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x8, 0xfff, 0x62, @private2, @local, 0x10, 0x7, 0x8, 0x22}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001140)={0x11, 0x0, 0x0}, &(0x7f0000001180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001240)={'syztnl2\x00', &(0x7f00000011c0)={'erspan0\x00', 0x0, 0x8000, 0x1, 0x8, 0x0, {{0x14, 0x4, 0x0, 0x10, 0x50, 0x67, 0x0, 0x80, 0x4, 0x0, @private=0xa010101, @multicast1, {[@ssrr={0x89, 0x7, 0xa0, [@loopback]}, @timestamp_prespec={0x44, 0x1c, 0x2c, 0x3, 0x2, [{@loopback, 0x4}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x2}]}, @timestamp={0x44, 0x8, 0x38, 0x0, 0x8, [0x480]}, @rr={0x7, 0x7, 0x1b, [@local]}, @ssrr={0x89, 0x7, 0xee, [@dev={0xac, 0x14, 0x14, 0x3f}]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001280)={@rand_addr, 0x0}, &(0x7f00000012c0)=0x14) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r10 = socket(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x70, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11, {0xfff3, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7b49, 0x20000000, 0x1, 0x2, 0xcd69, {0x92, 0x2, 0x2, 0x0, 0x7, 0x8}, {0x7, 0x1, 0xffff, 0x1, 0x1000, 0x10}, 0x7, 0x0, 0x101}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x8c4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000013c0)={'gre0\x00', &(0x7f0000001300)={'gre0\x00', 0x0, 0x7, 0x20, 0x3, 0x6, {{0x20, 0x4, 0x2, 0x0, 0x80, 0x67, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1, {[@lsrr={0x83, 0x1f, 0x93, [@multicast2, @broadcast, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast, @private=0xa010100]}, @rr={0x7, 0x27, 0xac, [@empty, @remote, @multicast2, @remote, @rand_addr=0x64010100, @remote, @remote, @multicast2, @remote]}, @lsrr={0x83, 0x1f, 0x9d, [@private=0xa010102, @private=0xa010102, @private=0xa010100, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local]}, @ssrr={0x89, 0x7, 0x9f, [@multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000014c0)={'gre0\x00', &(0x7f0000001400)={'erspan0\x00', 0x0, 0x20, 0x20, 0x8000, 0x9, {{0x1e, 0x4, 0x3, 0x4, 0x78, 0x67, 0x0, 0x0, 0x2f, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x4b, 0x1, [{0x5, 0x6, "492aeacd"}, {0x2, 0x3, "91"}, {0x2, 0xb, "d22f902a27e488fa3b"}, {0x2, 0x12, "b699faaa2d0fc17136543584c9634eb2"}, {0x7, 0x7, "717e770f0d"}, {0x6, 0x6, "e6b1b186"}, {0x2, 0x3, "e2"}, {0x7, 0xf, "a01e6feb0dac7d94f822d2d0ab"}]}, @cipso={0x86, 0x14, 0x2, [{0x6, 0xe, "4c21aa989ba29e585f42e2f5"}]}, @end]}}}}}) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r16 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r15, @ANYBLOB="00000000ff7f00001c001a800800038004000500080000003e"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001580)={'ip6tnl0\x00', &(0x7f0000001500)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x1, 0x800, 0x21, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x7800, 0x7800, 0x2, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000015c0)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000001600)={0xbac, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x0, 0x5, 0x4}, {0xa, 0x89, 0x6c, 0x2}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x9, 0x6, 0x10001}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0x22, 0x81, 0x2}, {0xff54, 0x1, 0x1, 0x4000000}, {0x6, 0x1, 0x8, 0x100000}, {0x4, 0xf8, 0x10, 0x7}, {0x53, 0x3, 0x5, 0x2}, {0x6, 0x5, 0x6, 0x2}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x61ff}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff80}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x1f8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xbc27}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9, 0x10, 0x3}, {0x4, 0x6, 0x2}, {0x40, 0x7, 0x1, 0x7}, {0xf, 0xb9, 0x4, 0x40}, {0x6, 0x3, 0x8, 0x8}, {0x865, 0xa, 0x4, 0xc}, {0x7f, 0x8, 0x3, 0x6f}, {0x4, 0xb2, 0x79, 0x1}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x1, 0xb, 0x3}, {0x13d, 0xf, 0xfd, 0x2}, {0x200, 0xd, 0x21, 0xd9}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r11}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r15}, {0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}]}}]}, 0xbac}, 0x1, 0x0, 0x0, 0x4000040}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690046000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0xa4, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x74, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0x85, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MACADDR_DATA={0x40, 0x5, 0x0, 0x1, [{0xa, 0x4, @broadcast}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @remote}, {0xa, 0x4, @local}, {0xa}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x12}]}}}]}, 0xa4}}, 0x0) 15.431825409s ago: executing program 2 (id=15): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x10) 15.308811277s ago: executing program 2 (id=16): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000081c0)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xa, 0x4}, {0x2, 0xffff}, {0xfff3, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x40890) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000001f80)={0x1, 0x6, 0x6}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x19, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000240)={0x8000001}, 0x8) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=r6, @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r12, @ANYBLOB="05000300ffaf9c4745e80bc931730f8cd6b895854ec6b43b6d14db14"], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) r13 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000001d00)={'vxcan1\x00', 0x0}) sendmmsg$inet(r13, &(0x7f0000001e80)=[{{&(0x7f0000000140)={0x2, 0x2ced, @broadcast}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)="9047839774088569c61362ca9cd26c35f2c263f9f774f60a4e875c03917454e1b4952a8ee9e3601f69e4fa6e844e40ba2b1951b8524d8c39537ba3f12b3905f66e01894d2c8e6ef8f5dc98fad96969f52970a6b29b5c03a3867868eef25bf79a3e7501ee619a93a9b7ed6db9554a2be9d77781d00ffdaadd0899d2ef619b695d52d559dec1e5f67d757aa965", 0x8c}, {&(0x7f0000000280)="f0444c3a2a22268856c534bee35295d5bcd884ab437b5b346a78528ac83693d2d7c4044b3929a43cc22aa10161900078e9c01b7adff9176904f0e83d64a648", 0x3f}, {&(0x7f00000002c0)="11ceb2f3214c8104f3168b958c22ec928e1bd472f3c3dd2a74ef5135a76c8511d1d2a2305cc3ac0a0d307e637bb469750b551b60de90dfe6", 0x38}, {&(0x7f0000000300)="d7ad82af0376ca88cd19dbd579561c94b4ce3f08761a08b007fc8d64a25129e2d51900b05b2c566e258b13a2bea4b47f77d818bfcc767f3bcbb0271e8051a0ab7b778190ed57457332fc489c3008b4b3edc045abd2e32cc3bffa08c41f786997ca5556f0449cba71209888197577d92ceca51d912d38e068d60c3666e05a3016e479ee4feb4298a35948e3c830c1b734aed51c63f1beb5f2305facef7f564f947460375cb42a9e230306060c0bd3150b3eea4edf363ae7bfeb9177e0e9b0df92f19ac54f3e970eed82f03c97a4647d462522948e67f8d42b697ca0f7ebc9de0d058ba595916f77c27b7d444d14bc10", 0xef}, {&(0x7f0000000400)="0e04d9ee5979cf24ea6129fca39a874295607816637ec6fd70948f8326aed8e276b4231203a041629f2a9b2d9289a890e2f23fb451f53e1066993363b612a2dbf364658c19b06eee664e3249f545786fdfe7b791acf721fa7c63a945a63a272e0412d870", 0x64}, {&(0x7f00000004c0)="b7660eb092d250865af6376d36dd2438b605564c7b7bfb0b1f370a856e2aa45480b8f1fd6fe55e7b2c6048ab7ff033b562468ae2844c5b50e9705c50748fc532c741d9a5c8bb909e17cb46d39771504e33033268e74541ef6cfa76d2b51800bd97b0bef9788c6a556ad32656b80bf7bc966f8079bc9f402d5bf718", 0x7b}], 0x6}}, {{&(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000600)="d8dba123f751f1d2652ba9ad30a3db477d1a3c", 0x13}, {&(0x7f0000000640)="afe8bc9f9f844662ec3cd3082528831e0be715022a5d349a002c557cf3", 0x1d}, {&(0x7f0000000680)="3001617dcce7ccf68df0aec6f2c5f7c28ee4a31eb2b92815cb7c75805a88c3e802ee910d22b5ecb90e600536372e4a0d329b705c62c859c12dd954f30dad0dd6b2da6242f2357ee7aadd0888a2f8bbd4578ddf65cc27861fc5626d5176e6e420c51aa8a7765e50150ccf9236dcdd503068237696b2ee5d3793eb2cbe2abbbce3dd81c6db822fc7d3d27a5db496e7c1c27a6471e159", 0x95}], 0x3, &(0x7f0000000780)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_retopts={{0x18, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x7, 0x8c, [@multicast2]}]}}}], 0x48}}, {{&(0x7f0000000800)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000840)="5abd3bcf18b6419e72c9827881aac8049790935356fee151bc7a3d2290da38fba8b95fb6fa24bbf390b5aac330b1cb730df0e4131496ecd0c5e2bc4fcf604f6aec8ae1794dd2c8a6c6fa120def8a1c57a69b1d2e736285cf6dfcc0beb3bb610de4f81d04412c4f034e1df1cf51c7123af38fb1fe6ff793c46c00fc4f9b568d516b568b730a464669e569a00e615d5f011b8b43391e7381290df855cf1602b7a221a26b25f5875e4e0b5e88002c0871351e508d4c3e96b755bf8bf766cd167ba3be6b22dcb760402a0c82bd57f6d7e453cea251637928891404b4aa0203471b30d306", 0xe2}, {&(0x7f0000000940)="50ad449d26ce8a2fce51e3ae3d317bb95138ae941c3120a570bba6814f6ad6444a7ddfd32606236d2a79fb57e9826d975a8fe6662e5a20904df09b9b09e0e2875930493901bc2d8f8b500ab1c1b91d4daae3b56c1d20002d04d7222b19e8a1a98416658c6422eaaac6787402635bb4f1bb83daf490a6a0720263f7f9ca926f2045c8b0791b2c6399fb387b4996ec3ab329e9eea3d26354bb8d9a1b5f1c13cf0a560c96efc9359650c7ac094462b321a30ca7c335cd36969b510c25f3e08205c702179fdbc6206b9b937738fdaa665327e3196c70c04b410e8c0da86c4d9b9a7ed90614b787e5b9", 0xe7}], 0x2, &(0x7f0000000a80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7460ea2c}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd909}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @remote, @private=0x5}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xca, 0x0, 0x7, [0x274]}]}}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000b80)="db1cb7115474eccb6398d7fa5263fecf1987129631742806365a4bfaec94a6d4f00f5fe8dd0655a9d2323d32746a335af6a47708284b3b07fb878d1de96d0196842bb73dbc3ed1f7e134a94ce65f6f1d79a44e9694058700a80b442f2765f626d278ac1904f69f32999426db01f36cb26dbe48db2521b8a9b3c0100f", 0x7c}, {&(0x7f0000000c00)="d2849b9c85d426fca05c311aaea77f76e7678a628f9c0921c601381d4c0a92119e7314b4d7810f22f8d7c53cde823ed4faa8ecbd50610261d5faf839017c983c3015e837fb52cb8008d50f12df", 0x4d}, {&(0x7f0000000c80)="5003b343fca3eb08347fd84dd7cbf89b32875a58e9467e2f355be5f318c3aff4f01ddb1f5be4b1da3b56cfe3a3256d7210d025ebe5daf31f84be21c08a217be6c41902ea424022c5d079a0c952b4a49cad6435b8323ca22fcf8785c5213f371186a816158355077f5000bcb5abcacefa19c025ff9898753bd6a304686fa4439e4bcf85e8e4cd488fdca8a2eec79a9142248997c44ec399dca92cc1f3e5d9ac7b5bb3379b96c3cb6f1434fcefdacdbd7747a7fd65e84d2885afa37d53802f3b30fe4ca0c7ff1fd05f78eaf21d5462d169658a3aeeb64b2aa33c251d4bec56609fa88d3c494b2749bc2c3d39785e828ee69830752354ecb30e86c8db7a3fc97fb0db0cdc08a296e543b9057f766506c4e624c0c4fe850b2ff9b0a1cd74e756a5feafea0f3f117dede99ee6c65deba75571770d60dcc35db89047311d2d085e2c7661f1fc60b4ae40a78c2b790c05e323743b7f1679cdda40834d8f052d2b36916b6a0de7af21e7ce3faaa0c49214d505486ae8ab05ef793d90ade24067fa93c69a6b5aa3fcab9cec6056729a3f93a924bf7a6787973c59ba13f2747f9c412a99615bac9c2ef5c3ec9f120377bbe07980806c6b131f789d19754147712f634500176eeb1e068d33892f8036309a3dee31d1b52a03dd843ef1c741ad943f04b3d1eee309d8d082bcd22b4b48694d73524c87712039564e41c77b55c063147a52ee41535678514875a45dc147d9eb70a716523576a861ddc993869fea202e1de57dac4eaf23539b8e2df6fbe8bf197e79684371c39fe6c021a0e6c06322a5e02a7c501964cbb03ec5be8d8b3f6a1ea9a19a5c8b4a28f7b3802e497d9c3d59edd29c7378eec3131cb9e2740326ddddf923d1c4f2c565d0f59f17039a9094dc56c3c9f566460807e9a05479e67cc5e38c6805d66b914589d79ebc701f773224610f8fe8d97c52cad75f1e8a8c933ed250e5c746c59165ce6a97f3bb2698c999fb178a062883819675801c6975fdfd1cf9323f1ad893ebb69f036f5fd2859ea03f808c7ca13b13e8abcccdce70e39b5bda95f6f5787acd27941c987b570d3c4e271fcda83aa8bbd01a1ab1dcaf52b03de137c935e851bb619f70fb53003e9b5a1babd8149ed53ea881ad290c7192077590ef4fe236889dda9ec532691b1934ab70df1810d1ae0dea0e09ddcc23fadc81286e1014818f871f9cf2d4455567baaae7285175696852cb8e98c3e84ffd12a35fb1b8c1343ced481e4cb29315d09bc4339e2281af0105764ee389b5e961ee8084ab354103c623cc64a1319baa04aacd41b9de67c867f1fa371845489c988337088583ca68f0f520a417e26c1a91c06a08e2513254ac4086b638d69d5cea2add6f0060f5efd4887010b310ca4bb665f7b0c0cdaa747c9096538c63c5d16dc53249634006e429d2504265e0bf42ef80dd8674f651a114a8c3ea80bbab7fcfc91cc8a7a039144ec8346d338ff22421811483e24e38210658499528a07b8a31d8d8484c7d8d3ea2b3c2e672756bb905d10b2961dd32ec0f59209670f07eb18566a7febc668a300b045c2cd685338c870f56d317af646bfae0d095414f958d2f522a51fe7a86ec11c93095221e63d26f2b3089dd5d0670589088d74b42ae7cd4ea193e9be293454ee8c698eec94a190c06ceaa00fc4ea5ce776192232fbdda1523546fdb166ab1f05fa47a6661c3e4d9f17009a4f9fcb92c0312d9878ce693f76eba8ddaa644f7b97d3626cd3b712df0c780a038f6c73cf8db7111642cf7461199f260b696393bba0567340ffd823c04912641d94b1a8336f4aaaf61ef6d5381c2d1c24dbabbe306e3135ade3ce2434968c43453adc9bc95e53db48a9c05f0213e7b46c2fc26cc0cbdf84c0587730129d21759d5c81fc9528b5e8fb340e54e5561aca01f5756adba37ed3c2eec488beed48dc6cc64a132ecdb1e76ddb334853dc4f08d9d4d98b6265b7f41909550d328896dd62a13195c2bb94adebf2e8ff5dae4bb1fd8c0948f0e322f4e09b55ec7b0805af957abb3425238f7d075bbec45f58d2f3dbb157dde2ded14536668852495bf0b7dc0517fd204bced3d3e4eb1c0f77d5122c2652d38a774215e8c1ba2b72fbba259af5b5546fc30cc19af8225d21c704c2cd57af98e5fc440124200d7fbf1dfdaab3e1e5ea02db43d807a58991bc03b9aabc5a3b40a785798c192cd09fe13ebcbb3147f0e68238d994b317b98cd6e26d8c494489d9d4406f5f1c454e8bb5519ee3b146d71a35ca31084b0ca59e0c65b1c7b99dcac499ba2cdc36f7383d5ce32e7209771f86a567d226ef7da6c17540a9d35660578effb20495205d0d756065248d3dcd56e9e0f70f1a8e10b1f82ac00d1b954b852bb0fed9fbd532ae895c7e50d1dfc0baca4e92ec8a03f8767e42d587f175fe1dcbf47af65ce55a84773544c6146ed208077bffe8355a3fcf6b477bf1009f8473e909c35510f5ca22121ec27062e7fc9d686c9304c6da13a9877a149fa3d3b43a1a42fc3c8bae3fa9b31d9eb1b4c282420c805c0566342ffdbec1e454eb6c1a8d04f00d22fa4e13e3d720c30453ea5c15de00d8b30204e7861006dce79a65a5877c8e55ab36787a2a98994eec711ba5b859579b6175a1ebb9bf9544879a4d24da92ba8c4d8208133075d71ed9df5c7b45fe33d45512eb2dcc604979ff534db5354ff4e69d700aada1db580183ff0e32fc20ed438d5d4ee0ac0f99482990acf03a17b5c07bcf62f550d4954c459a7827381a4476d7d53fd38783ef673862d7452b866dcd66bf78c871255b9bb1e4b7c0114c99a662542828a2d853845d9fe9385d6a7d33f3f13eaf4cf1e3ee5963b1c11a4694ae713103eec97fb05a746dfef1458e4b8f87e5522000149f8fc4252e9ef86f3dd26933d75cf3f91bf0828d662a6034eb61914bdccc72470ab2ac20f08417bd50bee106ef393fe34ef5d5207a4d3fa04552feabd3bf02f91bc0f272902b09e74f9b17363e9ac74c5f9e11a9d8bb3e9e45abac95a5af5b78dd82ff4b7c231eed7dfe64453781a4ec7990c9963997bbed83bd507e4fcbbdbdaf0625309b4eabb788ce7b5087c42a78cdc58dcd33980cd0715ca2a9929d7c5161283bead7840a6fd1f6c8c6dc08935d3a5713ff3832fbc1c461431edc6810e4771dd941e9e6dbd0ee4fe4463d1f99e676056f08551f4f10feae4b82b135ae034d78018b6d30224e617c4e7211f0a767c1f109feaf36fcdb357eaa4673b26815fe113c543ea9bb941138198bddd8ae42fa17713a233c6aecda342f5e8e6bd4393dd204e16f6e21dc34c396fb8b9c27c9c2fbc34bb5746d1170a5cfd6c1014b4ea5cf68cd2d07b59c334a19c8bf7d367d1dab64d636ca354cd37c16c565d85de4db1142e43c2ab7cefa5b11d0b5a35e1d6d327e6b6609380eeaa0f8b2691b68d5af8de4a3e25f75bcc636bf6555c5ebc49a86908ad622bb3a0d2404e3dab25cb3c7aa469972fbe1647be2d254855c5d01a5e8b2790fa216c4ec2f78d0da0c8e6a7c0426606a7e313fa629742e3ca8d85a5e766127071f26d0b78bbffef3defaf1f7f9f47d3b51303c648bfb9a635d35375b6708be7b9757d80edd4ba17762c54cb4179b7215d75131421d53da29fb46478d367403996a20295187e782545f0df9eeac0c28fa3488f4934c885777314437cd9b71ee19bcd8af1038c4c5aad89e0ba81c6f751ccfbb01cfe1e6d3c58a810ba92a2d57be7295f11bcb3f7bf8cf91d5fcd1c083652f39732f4caffe2269d179d56d9eb90e9c6f93209ba6ee9d37fa58c009636eef7db688cdcba7d7eb98feb7db84ae6ef1120fbb0fb4d2931468cef7858cf920b5d009fac5146a338ea1febc51d9541f44b19a270018787803d0c52a94a5243eac2e9f94b35064a0528ee8f80b359a6008266bb4ed0697b3e9fa56776083a70c75a2c6bf9f32dc47b31e47b8b775c728054831b18917358e27efbea65f8741e03285f739ced79417ba0abfff93d806d3b511a91592852c20423adfbd5556786dfa654b1e6935de2491ee3573ff5db4613849558792eecf498d154481afdf16df2e3c0b3a1b5eaad6b652406ffca21b0ebc09aae0806a385a863da07f1cd57e6bf17a06b73925471d54a7128bed7e1be3cfd01c13a75eab3e6a06a31f5bda4efe1730789456b797228ab4f1bd54934518d35c8f272e9da268e936d7a4773451db76a6ae4305298d82105ae5dc92ea633ffaeb1ced76ebe9d01bec86d9cda4bd904a0c70848211f92e2b51fe225d03108a37d43d7a35bc02cdbbcb549875ffe97cbf7dd321fbac6bed89c5bee10e011e7d3f30dcc3d3a426b6fa1fd21f62fe1f3a23f6acbd946b6bbaea84e1648f12005182594ae35947a87e1438752c03ca387141f6414f3f16b368c91a953e33c68d8f7d2145f29a2924c2039cd02d7de3caefb27885ba139e793296c25c9ff8b89d827676140a17670022497b9ef477981430d60d3aed0dd4345255cc852da590e917d621a3583f20b79b6c5290f137e997162858c4bf503fa6127fae3e70aaddc868baffdf98cd2b8d31fb28c099d9b40851d88e6e5f19057167f36a4270cea49c104e1ca7ca0e44a58651a220e2be537dc86f345e3c2a26da0c39fd665c476c5dcc3ca99f91202900866615bace3bb071fff7fe6cfb45dd83fe66ba73202d245eda9ebf38e2e6ce3f705648bd447e0721c45d393ba1e84dd7b558f8dc23e8c71d53ebbe1dbcd61ce36f9bafbf8619b340bc7021ee0e33bde80afd0d307061ae2a4097bdab2e45d6daad632f91f5c1ead3032233d0d5357660e7e05b4597a3451bc037f42a1ed1592ca1125568ac174a98c0186dafe2e1ab7eba2d097b22cc7e6bd9428f22cd723a04768d3589ea742dfed38d11301c8e1d454989a1d6904eec4acf5f8de0679e1f793337b42fee4fb1ace6a4b629fae777f233943b88cd3be4b2c45b837eeeb9415ff7a593e95f564d109d9a44c3e0ef4551fa2d643e0e50da474da87b47f59ad5554402ed0cb236866a74fcb53df648b74b9b4b57c31f5170d9455c87258b88f8467d253e5efa647effd5813cf24e1c64504fdb3c25502ed1372caf7a26a28dc21df3a1dfd2a9d8a65757506c42afcecf3b0ec199d21c992a4d8890adac13ba368b93c64195a6604b1ad9be7aef96caa1c4546322009ff6d06802340f07b4896c2d6af7b26ab885b28f4fc6d4b1ce7a3d04072603c9f7be279c2b295341092a8a2992e2a2357efd04ffbdcf83de61e435a2cd912263cda101bd6c04c313ca35b2df48e669df548409dc0d37e547f3f617521005844418a6ed44136cc8c03151e79a4bbf333ff055501598c196707cc2ed93a5c42ab19ef04f54e6bf3dad0301a6e0ce5cce5565f7e7e07f967d2a982540e7d4e2415db78ffeff1564cc4e0b11c5e946b41be1acd369c2b1d3bae63e90fa6049e767bf2d9ef09f4de238f70082b1eaa1f1fc1ed3b3aca99650fdb650c967de47e1083c1a06266293f0fffd62c8df5591248c580dcd0b2a4576fda8e1f14e24e25e4971c2dacf25b998f75dc6650a221aad20668e972894b54b6fb0eff251117653c3e6437f93167b0de48187db5dacafb6e589d3bb0ed41c4d175174c7128516a01322971d1755976b7ab21438bed305ed231825a88404efafd5a84930a69abf942bf172999fda040161f4194d12b864757e306b533fbd5c811caba1ecd0a1c7453a660c7ec1296827e463f2a6c76420eb5e0535ccef12d1f7ef4a2b1056e07a60235ea45242b74ffd76d4c8b79e742f89022fad793ce5a3db9ec73", 0x1000}, {&(0x7f0000001c80)="98d823ce92d81962e2e3542a99f7ff0f205ddc0c7057aaf9e2992b619e655e4ac1806200a7fadfafa4201a8f341262eabd134fdca629070ab5f493ef6461a146", 0x40}], 0x4, &(0x7f0000001d40)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x30, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xd, 0x1, 0x4, [{@multicast1, 0x81}]}, @noop, @generic={0x86, 0x12, "23eb20054c356266dbef9d6fa76d7408"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @rand_addr=0x64010101, @broadcast}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x58, [@dev={0xac, 0x14, 0x14, 0x43}, @broadcast]}, @end, @rr={0x7, 0x1f, 0xcb, [@empty, @broadcast, @empty, @multicast2, @multicast1, @multicast1, @remote]}, @lsrr={0x83, 0xb, 0xb6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @timestamp={0x44, 0x1c, 0xf4, 0x0, 0x7, [0x4, 0x9, 0x7, 0x9, 0x0, 0x8001]}]}}}, @ip_retopts={{0x50, 0x0, 0x7, {[@cipso={0x86, 0x40, 0x0, [{0x0, 0x5, "d0d5fc"}, {0x1, 0x10, "effb4a5cf6c7d13a6c6209f6fb74"}, {0x7, 0x8, "b8d36a308d65"}, {0x7, 0x5, "f3c311"}, {0x2, 0xc, "55a619f96102b973a081"}, {0x5, 0xc, "f2341581431b2db1a2c4"}]}]}}}], 0x120}}], 0x4, 0x4040000) 15.27289157s ago: executing program 2 (id=17): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x9c, r2, 0x410, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x15}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "54bc3209d9"}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, '.'}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "b68e87f84a"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a7a6406d25"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "dc7fe74dfd"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "25c917f973abffe3d9f459d726"}, @NL80211_KEY_SEQ={0xa, 0x4, "0f4c994dc68e"}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x400f091}, 0x1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0xffffff1f, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x44104, 0x3f00}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e24, 0xffffffff, @empty, 0x9}, {0xa, 0x4e20, 0x1, @mcast2, 0x1}, 0x0, {[0x2, 0x2, 0x10001, 0x6, 0x6, 0x5, 0x34a, 0x7]}}, 0x5c) 15.102529142s ago: executing program 2 (id=18): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x0, 0x8c, 0x4}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4044) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}]}], {0x14}}, 0x6c}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x6e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa03049078120018ab7e3f25000000009be8f4ec0100007f00ffffffff000000006371ae9b"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_deladdr={0x3c, 0x15, 0x400, 0x70bd2c, 0x25dfdbfe, {0xa, 0x20, 0x80, 0xff, r5}, [@IFA_ADDRESS={0x14, 0x1, @private1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x10004004) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r6, &(0x7f0000000200)={@void, @void, @eth={@multicast, @broadcast, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "280400", 0x11, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x11, 0x0, @opaque="715c6fd5536167bd28"}}}}}}}, 0x47) (async) setsockopt(r0, 0x22, 0xfffffff1, 0x0, 0x0) 2.024040839s ago: executing program 32 (id=1): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000000c0)={'pim6reg0\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a30000000000900020073797a32"], 0xa0}}, 0x40880) write$rfkill(r0, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) 0s ago: executing program 33 (id=18): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x0, 0x8c, 0x4}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4044) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}]}], {0x14}}, 0x6c}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x6e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa03049078120018ab7e3f25000000009be8f4ec0100007f00ffffffff000000006371ae9b"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_deladdr={0x3c, 0x15, 0x400, 0x70bd2c, 0x25dfdbfe, {0xa, 0x20, 0x80, 0xff, r5}, [@IFA_ADDRESS={0x14, 0x1, @private1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x10004004) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r6, &(0x7f0000000200)={@void, @void, @eth={@multicast, @broadcast, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "280400", 0x11, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x11, 0x0, @opaque="715c6fd5536167bd28"}}}}}}}, 0x47) (async) setsockopt(r0, 0x22, 0xfffffff1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. [ 69.454326][ T5810] cgroup: Unknown subsys name 'net' [ 69.580297][ T5810] cgroup: Unknown subsys name 'cpuset' [ 69.588649][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.019910][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.450369][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.456815][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 75.336191][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.344805][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.353734][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.363045][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.371690][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.380548][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.388025][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.400159][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.407695][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.409179][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.420523][ T5144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.428102][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.437739][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.445349][ T5144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.447376][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.470450][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.481430][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.485519][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.489338][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.503153][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.526829][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.535928][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.544343][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.553418][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.561933][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.189608][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 76.210847][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 76.363347][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 76.376508][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 76.439264][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 76.552651][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.559937][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.568234][ T5820] bridge_slave_0: entered allmulticast mode [ 76.575281][ T5820] bridge_slave_0: entered promiscuous mode [ 76.583949][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.591119][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.598498][ T5822] bridge_slave_0: entered allmulticast mode [ 76.605502][ T5822] bridge_slave_0: entered promiscuous mode [ 76.641458][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.648797][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.655947][ T5820] bridge_slave_1: entered allmulticast mode [ 76.663329][ T5820] bridge_slave_1: entered promiscuous mode [ 76.670286][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.677711][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.684879][ T5822] bridge_slave_1: entered allmulticast mode [ 76.692024][ T5822] bridge_slave_1: entered promiscuous mode [ 76.759367][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.767083][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.774315][ T5829] bridge_slave_0: entered allmulticast mode [ 76.783443][ T5829] bridge_slave_0: entered promiscuous mode [ 76.792790][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.800111][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.808210][ T5829] bridge_slave_1: entered allmulticast mode [ 76.815396][ T5829] bridge_slave_1: entered promiscuous mode [ 76.834400][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.841701][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.848962][ T5824] bridge_slave_0: entered allmulticast mode [ 76.856058][ T5824] bridge_slave_0: entered promiscuous mode [ 76.900784][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.908222][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.915360][ T5824] bridge_slave_1: entered allmulticast mode [ 76.923351][ T5824] bridge_slave_1: entered promiscuous mode [ 76.933364][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.945342][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.987031][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.998412][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.021972][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.067971][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.075161][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.082908][ T5821] bridge_slave_0: entered allmulticast mode [ 77.090157][ T5821] bridge_slave_0: entered promiscuous mode [ 77.100232][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.114695][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.144761][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.152362][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.159613][ T5821] bridge_slave_1: entered allmulticast mode [ 77.167331][ T5821] bridge_slave_1: entered promiscuous mode [ 77.186318][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.211271][ T5820] team0: Port device team_slave_0 added [ 77.218759][ T5822] team0: Port device team_slave_0 added [ 77.226518][ T5820] team0: Port device team_slave_1 added [ 77.277187][ T5822] team0: Port device team_slave_1 added [ 77.307080][ T5829] team0: Port device team_slave_0 added [ 77.316166][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.327874][ T5824] team0: Port device team_slave_0 added [ 77.335860][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.357245][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.364197][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.394169][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.408298][ T5829] team0: Port device team_slave_1 added [ 77.414814][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.421847][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.448464][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.461083][ T5824] team0: Port device team_slave_1 added [ 77.527994][ T5832] Bluetooth: hci0: command tx timeout [ 77.527998][ T5825] Bluetooth: hci2: command tx timeout [ 77.536943][ T5832] Bluetooth: hci3: command tx timeout [ 77.539615][ T5828] Bluetooth: hci1: command tx timeout [ 77.551316][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.558355][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.584360][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.607015][ T5828] Bluetooth: hci4: command tx timeout [ 77.633012][ T5821] team0: Port device team_slave_0 added [ 77.639726][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.646998][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.673714][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.685311][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.692714][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.718862][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.741220][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.748343][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.774480][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.787271][ T5821] team0: Port device team_slave_1 added [ 77.801061][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.808100][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.834579][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.850292][ T5820] hsr_slave_0: entered promiscuous mode [ 77.856838][ T5820] hsr_slave_1: entered promiscuous mode [ 77.863824][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.871100][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.897263][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.935610][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.942640][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.968601][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.010556][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.017855][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.044508][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.099288][ T5822] hsr_slave_0: entered promiscuous mode [ 78.105736][ T5822] hsr_slave_1: entered promiscuous mode [ 78.112259][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 78.118097][ T5822] Cannot create hsr debugfs directory [ 78.203100][ T5829] hsr_slave_0: entered promiscuous mode [ 78.210371][ T5829] hsr_slave_1: entered promiscuous mode [ 78.216439][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 78.222397][ T5829] Cannot create hsr debugfs directory [ 78.252299][ T5824] hsr_slave_0: entered promiscuous mode [ 78.259256][ T5824] hsr_slave_1: entered promiscuous mode [ 78.265740][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 78.271583][ T5824] Cannot create hsr debugfs directory [ 78.295961][ T5821] hsr_slave_0: entered promiscuous mode [ 78.303185][ T5821] hsr_slave_1: entered promiscuous mode [ 78.309724][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 78.315452][ T5821] Cannot create hsr debugfs directory [ 78.834548][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.846801][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.857072][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.878155][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.922821][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.939005][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.957850][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.980283][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.041923][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.054584][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.083631][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.102810][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.181700][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.209025][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.244098][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.280466][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.330923][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.363522][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.373857][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.386222][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.408837][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.429332][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.496204][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.509717][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.534820][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.553630][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.561209][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.572290][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.579768][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.607045][ T5828] Bluetooth: hci2: command tx timeout [ 79.607146][ T5825] Bluetooth: hci1: command tx timeout [ 79.612469][ T5828] Bluetooth: hci3: command tx timeout [ 79.622489][ T5832] Bluetooth: hci0: command tx timeout [ 79.639757][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.647014][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.656178][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.663377][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.681599][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.698179][ T5825] Bluetooth: hci4: command tx timeout [ 79.701321][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.710801][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.759679][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.766834][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.885232][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.924714][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.958405][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.993734][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.000915][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.092261][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.099447][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.141993][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.213669][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.220853][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.311313][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.318519][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.386215][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.434882][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.521217][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.644263][ T5822] veth0_vlan: entered promiscuous mode [ 80.686075][ T5822] veth1_vlan: entered promiscuous mode [ 80.715057][ T5820] veth0_vlan: entered promiscuous mode [ 80.749178][ T5820] veth1_vlan: entered promiscuous mode [ 80.810644][ T5822] veth0_macvtap: entered promiscuous mode [ 80.883515][ T5822] veth1_macvtap: entered promiscuous mode [ 80.896005][ T5820] veth0_macvtap: entered promiscuous mode [ 80.943612][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.956268][ T5820] veth1_macvtap: entered promiscuous mode [ 80.971507][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.005290][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.021788][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.042725][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.081749][ T1148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.092866][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.113260][ T1148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.122898][ T1148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.154304][ T1148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.163531][ T1148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.194016][ T1148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.203215][ T1148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.227600][ T1148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.258524][ T5829] veth0_vlan: entered promiscuous mode [ 81.278768][ T5824] veth0_vlan: entered promiscuous mode [ 81.304880][ T5824] veth1_vlan: entered promiscuous mode [ 81.345890][ T5821] veth0_vlan: entered promiscuous mode [ 81.352739][ T5829] veth1_vlan: entered promiscuous mode [ 81.404741][ T5821] veth1_vlan: entered promiscuous mode [ 81.435931][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.435931][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.435972][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.461457][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.487606][ T5824] veth0_macvtap: entered promiscuous mode [ 81.516254][ T5824] veth1_macvtap: entered promiscuous mode [ 81.571425][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.572367][ T5829] veth0_macvtap: entered promiscuous mode [ 81.585105][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.619331][ T5829] veth1_macvtap: entered promiscuous mode [ 81.627888][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.635715][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.641337][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.665280][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.681974][ T5821] veth0_macvtap: entered promiscuous mode [ 81.687403][ T5825] Bluetooth: hci1: command tx timeout [ 81.689333][ T5832] Bluetooth: hci0: command tx timeout [ 81.693144][ T5827] Bluetooth: hci3: command tx timeout [ 81.700410][ T5832] Bluetooth: hci2: command tx timeout [ 81.723155][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.746438][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.766941][ T5832] Bluetooth: hci4: command tx timeout [ 81.785670][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.795628][ T5821] veth1_macvtap: entered promiscuous mode [ 81.809358][ T1164] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.838206][ T1164] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.909703][ T1164] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.933251][ T1164] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.990468][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.021615][ T5939] ipvlan2: entered promiscuous mode [ 82.033399][ T1164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.078149][ T1164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.091251][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 82.103088][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 82.112653][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 82.124904][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 82.140647][ T5948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6'. [ 82.277965][ T1164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.311347][ T1164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.355369][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.410285][ T1164] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.458106][ T1164] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.477555][ T1164] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.486309][ T1164] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.651134][ T5966] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.767294][ T5832] Bluetooth: hci3: command tx timeout [ 83.767702][ T5828] Bluetooth: hci1: command tx timeout [ 83.772725][ T5832] Bluetooth: hci0: command tx timeout [ 83.778377][ T5828] Bluetooth: hci2: command tx timeout [ 83.853767][ T5832] Bluetooth: hci4: command tx timeout [ 83.976410][ T6020] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.230271][ T6029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16'. [ 84.335913][ T6034] netlink: 'syz.2.17': attribute type 1 has an invalid length. [ 84.352988][ T6034] ip6gretap1: entered promiscuous mode [ 84.407115][ T5941] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 84.422460][ T5941] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 84.564623][ T6042] syz.2.18 uses obsolete (PF_INET,SOCK_PACKET) [ 84.973544][ T5941] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 84.979583][ T5941] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 84.993662][ T5941] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.000842][ T5941] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 85.012665][ T5941] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.018942][ T5941] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 85.030027][ T5941] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 85.035958][ T5941] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 86.818659][ T979] cfg80211: failed to load regulatory.db [ 132.899455][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.905800][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.331514][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.339303][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 233.369371][ T31] INFO: task syz-executor:5821 blocked for more than 143 seconds. [ 233.377474][ T31] Not tainted syzkaller #0 [ 233.382464][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 233.391472][ T31] task:syz-executor state:D stack:21800 pid:5821 tgid:5821 ppid:1 task_flags:0x400140 flags:0x00080002 [ 233.403620][ T31] Call Trace: [ 233.407032][ T31] [ 233.409983][ T31] __schedule+0x1798/0x4cc0 [ 233.414537][ T31] ? kasan_save_free_info+0x46/0x50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 233.419838][ T31] ? __lock_acquire+0xab9/0xd20 [ 233.424724][ T31] ? __lock_acquire+0xab9/0xd20 [ 233.429743][ T31] ? __pfx___schedule+0x10/0x10 [ 233.434655][ T31] ? schedule+0x91/0x360 [ 233.451332][ T31] schedule+0x165/0x360 [ 233.455849][ T31] schedule_preempt_disabled+0x13/0x30 [ 233.466147][ T31] __mutex_lock+0x7e6/0x1350 [ 233.496534][ T31] ? __mutex_lock+0x5bb/0x1350 [ 233.506839][ T31] ? misc_open+0x51/0x330 [ 233.511220][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 233.526598][ T31] misc_open+0x51/0x330 [ 233.530967][ T31] chrdev_open+0x4c9/0x5e0 [ 233.537857][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 233.542834][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 233.549715][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 233.554673][ T31] do_dentry_open+0x950/0x13f0 [ 233.559940][ T31] vfs_open+0x3b/0x340 [ 233.564033][ T31] ? path_openat+0x2ecd/0x3830 [ 233.569251][ T31] path_openat+0x2ee5/0x3830 [ 233.573871][ T31] ? arch_stack_walk+0xfc/0x150 [ 233.578913][ T31] ? stack_depot_save_flags+0x40/0x860 [ 233.584412][ T31] ? do_syscall_64+0xfa/0xfa0 [ 233.589139][ T31] ? __pfx_path_openat+0x10/0x10 [ 233.594101][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.600360][ T31] do_filp_open+0x1fa/0x410 [ 233.604877][ T31] ? __lock_acquire+0xab9/0xd20 [ 233.610161][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 233.615545][ T31] ? _raw_spin_unlock+0x28/0x50 [ 233.620610][ T31] ? alloc_fd+0x64c/0x6c0 [ 233.624959][ T31] do_sys_openat2+0x121/0x1c0 [ 233.629958][ T31] ? kmem_cache_free+0x309/0x400 [ 233.635005][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 233.640442][ T31] ? fput_close_sync+0x119/0x200 [ 233.645514][ T31] ? dnotify_flush+0x1db/0x5e0 [ 233.650381][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 233.655687][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 233.661068][ T31] __x64_sys_openat+0x138/0x170 [ 233.665952][ T31] do_syscall_64+0xfa/0xfa0 [ 233.670612][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.675829][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.682012][ T31] ? clear_bhb_loop+0x60/0xb0 [ 233.687037][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.692960][ T31] RIP: 0033:0x7f4adb18d710 [ 233.697520][ T31] RSP: 002b:00007ffe5d613ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 233.705966][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4adb18d710 [ 233.714086][ T31] RDX: 0000000000000002 RSI: 00007f4adb212a45 RDI: 00000000ffffff9c [ 233.722273][ T31] RBP: 00007f4adb212a45 R08: 0000000000000000 R09: 0000000000000000 [ 233.730310][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 233.738325][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 233.746306][ T31] [ 233.749395][ T31] INFO: task syz-executor:5824 blocked for more than 143 seconds. [ 233.757649][ T31] Not tainted syzkaller #0 [ 233.762572][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 233.771375][ T31] task:syz-executor state:D stack:20904 pid:5824 tgid:5824 ppid:1 task_flags:0x400140 flags:0x00080002 [ 233.783443][ T31] Call Trace: [ 233.786798][ T31] [ 233.789745][ T31] __schedule+0x1798/0x4cc0 [ 233.794281][ T31] ? __lock_acquire+0xab9/0xd20 [ 233.799209][ T31] ? __lock_acquire+0xab9/0xd20 [ 233.804099][ T31] ? __pfx___schedule+0x10/0x10 [ 233.809089][ T31] ? schedule+0x91/0x360 [ 233.813352][ T31] schedule+0x165/0x360 [ 233.817580][ T31] schedule_preempt_disabled+0x13/0x30 [ 233.823054][ T31] __mutex_lock+0x7e6/0x1350 [ 233.827875][ T31] ? __mutex_lock+0x5bb/0x1350 [ 233.832650][ T31] ? misc_open+0x51/0x330 [ 233.837058][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 233.842102][ T31] misc_open+0x51/0x330 [ 233.846252][ T31] chrdev_open+0x4c9/0x5e0 [ 233.851380][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 233.856362][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 233.862783][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 233.867798][ T31] do_dentry_open+0x950/0x13f0 [ 233.872566][ T31] vfs_open+0x3b/0x340 [ 233.876695][ T31] ? path_openat+0x2ecd/0x3830 [ 233.881470][ T31] path_openat+0x2ee5/0x3830 [ 233.886056][ T31] ? arch_stack_walk+0xfc/0x150 [ 233.890973][ T31] ? stack_depot_save_flags+0x40/0x860 [ 233.896523][ T31] ? do_syscall_64+0xfa/0xfa0 [ 233.901233][ T31] ? __pfx_path_openat+0x10/0x10 [ 233.906174][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.912346][ T31] do_filp_open+0x1fa/0x410 [ 233.916923][ T31] ? __lock_acquire+0xab9/0xd20 [ 233.921804][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 233.927090][ T31] ? _raw_spin_unlock+0x28/0x50 [ 233.932014][ T31] ? alloc_fd+0x64c/0x6c0 [ 233.936341][ T31] do_sys_openat2+0x121/0x1c0 [ 233.941237][ T31] ? kmem_cache_free+0x309/0x400 [ 233.946198][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 233.951437][ T31] ? fput_close_sync+0x119/0x200 [ 233.956389][ T31] ? dnotify_flush+0x1db/0x5e0 [ 233.961358][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 233.966720][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 233.972037][ T31] __x64_sys_openat+0x138/0x170 [ 233.976970][ T31] do_syscall_64+0xfa/0xfa0 [ 233.981483][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.987625][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 233.993796][ T31] ? clear_bhb_loop+0x60/0xb0 [ 233.998573][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.004652][ T31] RIP: 0033:0x7f3d20d8d710 [ 234.009095][ T31] RSP: 002b:00007ffeea0e8f30 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 234.017609][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f3d20d8d710 [ 234.025591][ T31] RDX: 0000000000000002 RSI: 00007f3d20e12a45 RDI: 00000000ffffff9c [ 234.033998][ T31] RBP: 00007f3d20e12a45 R08: 0000000000000000 R09: 0000000000000000 [ 234.042428][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 234.050534][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 234.058628][ T31] [ 234.061662][ T31] INFO: task syz-executor:5829 blocked for more than 144 seconds. [ 234.069816][ T31] Not tainted syzkaller #0 [ 234.074758][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 234.083527][ T31] task:syz-executor state:D stack:21768 pid:5829 tgid:5829 ppid:1 task_flags:0x400140 flags:0x00080002 [ 234.095853][ T31] Call Trace: [ 234.100975][ T31] [ 234.104012][ T31] __schedule+0x1798/0x4cc0 [ 234.108620][ T31] ? __lock_acquire+0xab9/0xd20 [ 234.113493][ T31] ? __lock_acquire+0xab9/0xd20 [ 234.118411][ T31] ? __pfx___schedule+0x10/0x10 [ 234.123282][ T31] ? schedule+0x91/0x360 [ 234.127582][ T31] schedule+0x165/0x360 [ 234.131746][ T31] schedule_preempt_disabled+0x13/0x30 [ 234.137302][ T31] __mutex_lock+0x7e6/0x1350 [ 234.141903][ T31] ? __mutex_lock+0x5bb/0x1350 [ 234.146794][ T31] ? rfkill_fop_open+0x12d/0x820 [ 234.151749][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 234.156832][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 234.162131][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 234.167781][ T31] rfkill_fop_open+0x12d/0x820 [ 234.172569][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 234.177886][ T31] misc_open+0x2b9/0x330 [ 234.182142][ T31] chrdev_open+0x4c9/0x5e0 [ 234.186650][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 234.191597][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 234.198059][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 234.203008][ T31] do_dentry_open+0x950/0x13f0 [ 234.207874][ T31] vfs_open+0x3b/0x340 [ 234.212040][ T31] ? path_openat+0x2ecd/0x3830 [ 234.216937][ T31] path_openat+0x2ee5/0x3830 [ 234.221538][ T31] ? arch_stack_walk+0xfc/0x150 [ 234.226386][ T31] ? stack_depot_save_flags+0x40/0x860 [ 234.231964][ T31] ? do_syscall_64+0xfa/0xfa0 [ 234.236726][ T31] ? __pfx_path_openat+0x10/0x10 [ 234.241654][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.247923][ T31] do_filp_open+0x1fa/0x410 [ 234.252440][ T31] ? __lock_acquire+0xab9/0xd20 [ 234.257375][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 234.262429][ T31] ? _raw_spin_unlock+0x28/0x50 [ 234.267320][ T31] ? alloc_fd+0x64c/0x6c0 [ 234.271668][ T31] do_sys_openat2+0x121/0x1c0 [ 234.276374][ T31] ? kmem_cache_free+0x309/0x400 [ 234.281574][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 234.287087][ T31] ? fput_close_sync+0x119/0x200 [ 234.292042][ T31] ? dnotify_flush+0x1db/0x5e0 [ 234.296859][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 234.302164][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 234.307462][ T31] __x64_sys_openat+0x138/0x170 [ 234.312329][ T31] do_syscall_64+0xfa/0xfa0 [ 234.317068][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.322282][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.328468][ T31] ? clear_bhb_loop+0x60/0xb0 [ 234.333175][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.339111][ T31] RIP: 0033:0x7fddb998d710 [ 234.343618][ T31] RSP: 002b:00007ffd0b8c0660 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 234.352332][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fddb998d710 [ 234.360376][ T31] RDX: 0000000000000002 RSI: 00007fddb9a12a45 RDI: 00000000ffffff9c [ 234.368427][ T31] RBP: 00007fddb9a12a45 R08: 0000000000000000 R09: 0000000000000000 [ 234.376401][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 234.384430][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 234.392483][ T31] [ 234.395749][ T31] INFO: task kworker/0:3:5893 blocked for more than 144 seconds. [ 234.403532][ T31] Not tainted syzkaller #0 [ 234.408589][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 234.417307][ T31] task:kworker/0:3 state:D stack:24232 pid:5893 tgid:5893 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 234.429347][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 234.436137][ T31] Call Trace: [ 234.439467][ T31] [ 234.442404][ T31] __schedule+0x1798/0x4cc0 [ 234.447073][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 234.452461][ T31] ? __pfx___schedule+0x10/0x10 [ 234.457411][ T31] ? schedule+0x91/0x360 [ 234.461675][ T31] schedule+0x165/0x360 [ 234.465855][ T31] schedule_preempt_disabled+0x13/0x30 [ 234.471481][ T31] __mutex_lock+0x7e6/0x1350 [ 234.476080][ T31] ? __mutex_lock+0x5bb/0x1350 [ 234.480932][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 234.487315][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 234.492413][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 234.498241][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 234.504122][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 234.510567][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 234.516347][ T31] process_scheduled_works+0xade/0x17b0 [ 234.522077][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 234.528127][ T31] worker_thread+0x8a0/0xda0 [ 234.532717][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 234.539080][ T31] ? __kthread_parkme+0x7b/0x200 [ 234.544034][ T31] kthread+0x711/0x8a0 [ 234.548149][ T31] ? __pfx_worker_thread+0x10/0x10 [ 234.553358][ T31] ? __pfx_kthread+0x10/0x10 [ 234.558000][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 234.563218][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.568549][ T31] ? __pfx_kthread+0x10/0x10 [ 234.573167][ T31] ret_from_fork+0x4b9/0x870 [ 234.577794][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 234.582925][ T31] ? __switch_to_asm+0x39/0x70 [ 234.587801][ T31] ? __switch_to_asm+0x33/0x70 [ 234.592577][ T31] ? __pfx_kthread+0x10/0x10 [ 234.597209][ T31] ret_from_fork_asm+0x1a/0x30 [ 234.601985][ T31] [ 234.605099][ T31] INFO: task syz.0.1:5940 blocked for more than 144 seconds. [ 234.612668][ T31] Not tainted syzkaller #0 [ 234.617713][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 234.626497][ T31] task:syz.0.1 state:D stack:26440 pid:5940 tgid:5940 ppid:5822 task_flags:0x400040 flags:0x00080002 [ 234.638669][ T31] Call Trace: [ 234.641959][ T31] [ 234.644879][ T31] __schedule+0x1798/0x4cc0 [ 234.649584][ T31] ? __lock_acquire+0xab9/0xd20 [ 234.654468][ T31] ? __lock_acquire+0xab9/0xd20 [ 234.659369][ T31] ? __pfx___schedule+0x10/0x10 [ 234.664240][ T31] ? schedule+0x91/0x360 [ 234.668531][ T31] schedule+0x165/0x360 [ 234.672694][ T31] schedule_preempt_disabled+0x13/0x30 [ 234.678195][ T31] __mutex_lock+0x7e6/0x1350 [ 234.682801][ T31] ? __mutex_lock+0x5bb/0x1350 [ 234.687612][ T31] ? rfkill_unregister+0xc8/0x220 [ 234.692659][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 234.697792][ T31] ? __pfx_device_del+0x10/0x10 [ 234.702666][ T31] rfkill_unregister+0xc8/0x220 [ 234.707558][ T31] nfc_unregister_device+0x96/0x2a0 [ 234.712760][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 234.718512][ T31] virtual_ncidev_close+0x56/0x90 [ 234.723547][ T31] __fput+0x44c/0xa70 [ 234.727702][ T31] task_work_run+0x1d1/0x260 [ 234.732305][ T31] ? __pfx_task_work_run+0x10/0x10 [ 234.737466][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 234.742938][ T31] exit_to_user_mode_loop+0xe9/0x110 [ 234.748388][ T31] do_syscall_64+0x2bd/0xfa0 [ 234.752986][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.759096][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.765298][ T31] ? clear_bhb_loop+0x60/0xb0 [ 234.772839][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.779313][ T31] RIP: 0033:0x7f5b1e78eec9 [ 234.783726][ T31] RSP: 002b:00007fff0aafadf8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 234.792700][ T31] RAX: 0000000000000000 RBX: 00007f5b1e9e7da0 RCX: 00007f5b1e78eec9 [ 234.800834][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 234.809085][ T31] RBP: 00007f5b1e9e7da0 R08: 0000000000000090 R09: 000000080aafb0ef [ 234.817119][ T31] R10: 00007f5b1e9e7cb0 R11: 0000000000000246 R12: 0000000000014351 [ 234.825095][ T31] R13: 00007fff0aafaef0 R14: ffffffffffffffff R15: 00007fff0aafaf10 [ 234.833151][ T31] [ 234.836261][ T31] INFO: task syz.0.1:5941 blocked for more than 144 seconds. [ 234.843710][ T31] Not tainted syzkaller #0 [ 234.848676][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 234.857532][ T31] task:syz.0.1 state:D stack:23960 pid:5941 tgid:5940 ppid:5822 task_flags:0x400140 flags:0x00080003 [ 234.869561][ T31] Call Trace: [ 234.872830][ T31] [ 234.875749][ T31] __schedule+0x1798/0x4cc0 [ 234.880327][ T31] ? __lock_acquire+0xab9/0xd20 [ 234.885282][ T31] ? __lock_acquire+0xab9/0xd20 [ 234.890357][ T31] ? __pfx___schedule+0x10/0x10 [ 234.895239][ T31] ? schedule+0x91/0x360 [ 234.899537][ T31] schedule+0x165/0x360 [ 234.903703][ T31] schedule_preempt_disabled+0x13/0x30 [ 234.909224][ T31] __mutex_lock+0x7e6/0x1350 [ 234.913819][ T31] ? __mutex_lock+0x5bb/0x1350 [ 234.918676][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 234.923977][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 234.929050][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.934265][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 234.940181][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 234.946559][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 234.952307][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 234.957481][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 234.963203][ T31] rfkill_set_block+0x1d2/0x440 [ 234.968531][ T31] rfkill_fop_write+0x44b/0x570 [ 234.973398][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 234.978799][ T31] ? security_kernfs_init_security+0x220/0x290 [ 234.984961][ T31] ? rw_verify_area+0x255/0x4d0 [ 234.989835][ T31] ? __lock_acquire+0xab9/0xd20 [ 234.994694][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 235.000096][ T31] vfs_write+0x27e/0xb30 [ 235.004348][ T31] ? __pfx_vfs_write+0x10/0x10 [ 235.009191][ T31] ? __fget_files+0x2a/0x420 [ 235.013807][ T31] ? __fget_files+0x2a/0x420 [ 235.018458][ T31] ? __fget_files+0x3a0/0x420 [ 235.023143][ T31] ? __fget_files+0x2a/0x420 [ 235.027903][ T31] ksys_write+0x145/0x250 [ 235.032253][ T31] ? __pfx_ksys_write+0x10/0x10 [ 235.037171][ T31] ? do_syscall_64+0xbe/0xfa0 [ 235.042048][ T31] do_syscall_64+0xfa/0xfa0 [ 235.046665][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.051881][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.058018][ T31] ? clear_bhb_loop+0x60/0xb0 [ 235.062702][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.068632][ T31] RIP: 0033:0x7f5b1e78eec9 [ 235.073051][ T31] RSP: 002b:00007f5b1f6e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 235.081507][ T31] RAX: ffffffffffffffda RBX: 00007f5b1e9e5fa0 RCX: 00007f5b1e78eec9 [ 235.089510][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 235.097508][ T31] RBP: 00007f5b1e811f91 R08: 0000000000000000 R09: 0000000000000000 [ 235.105491][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.113539][ T31] R13: 00007f5b1e9e6038 R14: 00007f5b1e9e5fa0 R15: 00007fff0aafac98 [ 235.121569][ T31] [ 235.124595][ T31] INFO: task syz.2.18:6043 blocked for more than 145 seconds. [ 235.132696][ T31] Not tainted syzkaller #0 [ 235.137715][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 235.146390][ T31] task:syz.2.18 state:D stack:28296 pid:6043 tgid:6041 ppid:5820 task_flags:0x400040 flags:0x00080002 [ 235.158507][ T31] Call Trace: [ 235.161827][ T31] [ 235.164840][ T31] __schedule+0x1798/0x4cc0 [ 235.169443][ T31] ? kasan_save_free_info+0x46/0x50 [ 235.174673][ T31] ? __lock_acquire+0xab9/0xd20 [ 235.179580][ T31] ? __lock_acquire+0xab9/0xd20 [ 235.184445][ T31] ? __pfx___schedule+0x10/0x10 [ 235.189362][ T31] ? schedule+0x91/0x360 [ 235.193619][ T31] schedule+0x165/0x360 [ 235.197898][ T31] schedule_preempt_disabled+0x13/0x30 [ 235.203369][ T31] __mutex_lock+0x7e6/0x1350 [ 235.208084][ T31] ? __mutex_lock+0x5bb/0x1350 [ 235.212971][ T31] ? misc_open+0x51/0x330 [ 235.217350][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 235.222388][ T31] misc_open+0x51/0x330 [ 235.226572][ T31] chrdev_open+0x4c9/0x5e0 [ 235.231015][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 235.235941][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 235.242320][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 235.247682][ T31] do_dentry_open+0x950/0x13f0 [ 235.252471][ T31] vfs_open+0x3b/0x340 [ 235.256588][ T31] ? path_openat+0x2ecd/0x3830 [ 235.261356][ T31] path_openat+0x2ee5/0x3830 [ 235.265931][ T31] ? arch_stack_walk+0xfc/0x150 [ 235.270896][ T31] ? stack_depot_save_flags+0x40/0x860 [ 235.276367][ T31] ? __pfx_path_openat+0x10/0x10 [ 235.281328][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.287883][ T31] do_filp_open+0x1fa/0x410 [ 235.292405][ T31] ? __lock_acquire+0xab9/0xd20 [ 235.297309][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 235.302348][ T31] ? _raw_spin_unlock+0x28/0x50 [ 235.307277][ T31] ? alloc_fd+0x64c/0x6c0 [ 235.311623][ T31] do_sys_openat2+0x121/0x1c0 [ 235.316510][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.321815][ T31] ? rcu_is_watching+0x15/0xb0 [ 235.326654][ T31] __x64_sys_openat+0x138/0x170 [ 235.331615][ T31] do_syscall_64+0xfa/0xfa0 [ 235.336122][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.341422][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.347540][ T31] ? clear_bhb_loop+0x60/0xb0 [ 235.352215][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.358160][ T31] RIP: 0033:0x7f2b1db8eec9 [ 235.362587][ T31] RSP: 002b:00007f2b1eacb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 235.371103][ T31] RAX: ffffffffffffffda RBX: 00007f2b1dde6090 RCX: 00007f2b1db8eec9 [ 235.379191][ T31] RDX: 00000000000a2f01 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 235.387217][ T31] RBP: 00007f2b1dc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 235.395206][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.403224][ T31] R13: 00007f2b1dde6128 R14: 00007f2b1dde6090 R15: 00007ffebf414f38 [ 235.411293][ T31] [ 235.414415][ T31] [ 235.414415][ T31] Showing all locks held in the system: [ 235.422183][ T31] 1 lock held by khungtaskd/31: [ 235.427071][ T31] #0: ffffffff8e13a960 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 235.437007][ T31] 2 locks held by getty/5584: [ 235.441681][ T31] #0: ffff88802fa550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 235.451566][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 235.461736][ T31] 1 lock held by syz-executor/5821: [ 235.466982][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 235.475473][ T31] 1 lock held by syz-executor/5824: [ 235.480726][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 235.489242][ T31] 2 locks held by syz-executor/5829: [ 235.494513][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 235.502983][ T31] #1: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 235.513049][ T31] 3 locks held by kworker/0:3/5893: [ 235.518278][ T31] #0: ffff88801a481148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 235.529365][ T31] #1: ffffc9000458fba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 235.542953][ T31] #2: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 235.554410][ T31] 2 locks held by syz.0.1/5940: [ 235.559280][ T31] #0: ffff888028200100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 235.569094][ T31] #1: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 235.579238][ T31] 2 locks held by syz.0.1/5941: [ 235.584089][ T31] #0: ffffffff8f7b21c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 235.594241][ T31] #1: ffff888028200100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 235.603964][ T31] 1 lock held by syz.2.18/6043: [ 235.608874][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 235.617378][ T31] 1 lock held by syz-executor/6069: [ 235.622569][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 235.631084][ T31] 1 lock held by syz-executor/6072: [ 235.636314][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 235.644974][ T31] 1 lock held by syz-executor/6086: [ 235.650205][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 235.658706][ T31] 1 lock held by syz-executor/6087: [ 235.663898][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 235.672414][ T31] 1 lock held by syz-executor/6088: [ 235.677650][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 235.686080][ T31] 1 lock held by syz-executor/6090: [ 235.691342][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 235.699863][ T31] 1 lock held by syz-executor/6092: [ 235.705067][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 235.713579][ T31] 1 lock held by syz-executor/6100: [ 235.718811][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 235.727304][ T31] 1 lock held by syz-executor/6101: [ 235.732494][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 235.741005][ T31] 1 lock held by syz-executor/6102: [ 235.746203][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 235.754728][ T31] 1 lock held by syz-executor/6104: [ 235.759948][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 235.768427][ T31] 1 lock held by syz-executor/6106: [ 235.773645][ T31] #0: ffffffff8e9822a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 235.782181][ T31] [ 235.784512][ T31] ============================================= [ 235.784512][ T31] [ 235.792995][ T31] NMI backtrace for cpu 0 [ 235.793018][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 235.793033][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 235.793041][ T31] Call Trace: [ 235.793048][ T31] [ 235.793055][ T31] dump_stack_lvl+0x189/0x250 [ 235.793078][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.793099][ T31] ? __pfx__printk+0x10/0x10 [ 235.793124][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 235.793146][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 235.793167][ T31] ? __pfx__printk+0x10/0x10 [ 235.793185][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 235.793211][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 235.793233][ T31] watchdog+0xf93/0xfe0 [ 235.793261][ T31] ? watchdog+0x1de/0xfe0 [ 235.793288][ T31] kthread+0x711/0x8a0 [ 235.793309][ T31] ? __pfx_watchdog+0x10/0x10 [ 235.793330][ T31] ? __pfx_kthread+0x10/0x10 [ 235.793351][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 235.793373][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.793395][ T31] ? __pfx_kthread+0x10/0x10 [ 235.793415][ T31] ret_from_fork+0x4b9/0x870 [ 235.793442][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 235.793473][ T31] ? __switch_to_asm+0x39/0x70 [ 235.793490][ T31] ? __switch_to_asm+0x33/0x70 [ 235.793506][ T31] ? __pfx_kthread+0x10/0x10 [ 235.793525][ T31] ret_from_fork_asm+0x1a/0x30 [ 235.793560][ T31] [ 235.793566][ T31] Sending NMI from CPU 0 to CPUs 1: [ 235.938801][ C1] NMI backtrace for cpu 1 [ 235.938819][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 235.938842][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 235.938851][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 235.938876][ C1] Code: 43 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 66 23 00 f3 0f 1e fa fb f4 18 e8 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 235.938890][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 235.938904][ C1] RAX: 04d82a7958ed8600 RBX: ffffffff81958c97 RCX: 04d82a7958ed8600 [ 235.938916][ C1] RDX: 0000000000000001 RSI: ffffffff8d7ddd10 RDI: ffffffff8bc03b60 [ 235.938927][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 235.938938][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f9d4c30 [ 235.938950][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d6b58 [ 235.938960][ C1] FS: 0000000000000000(0000) GS:ffff888125e3b000(0000) knlGS:0000000000000000 [ 235.938972][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.938983][ C1] CR2: 0000560ab0b50f70 CR3: 000000000df36000 CR4: 00000000003526f0 [ 235.938997][ C1] Call Trace: [ 235.939003][ C1] [ 235.939009][ C1] default_idle+0x13/0x20 [ 235.939025][ C1] default_idle_call+0x73/0xb0 [ 235.939040][ C1] do_idle+0x1e7/0x510 [ 235.939060][ C1] ? asm_common_interrupt+0x26/0x40 [ 235.939077][ C1] ? __pfx_do_idle+0x10/0x10 [ 235.939101][ C1] ? do_idle+0x10/0x510 [ 235.939122][ C1] cpu_startup_entry+0x44/0x60 [ 235.939142][ C1] start_secondary+0x101/0x110 [ 235.939161][ C1] common_startup_64+0x13e/0x147 [ 235.939186][ C1] [ 235.939840][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 235.939854][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 235.939873][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 235.939884][ T31] Call Trace: [ 235.939892][ T31] [ 235.939899][ T31] dump_stack_lvl+0x99/0x250 [ 235.939920][ T31] ? __asan_memcpy+0x40/0x70 [ 235.939944][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.939961][ T31] ? __pfx__printk+0x10/0x10 [ 235.939991][ T31] vpanic+0x281/0x750 [ 235.940016][ T31] ? __pfx_vpanic+0x10/0x10 [ 235.940036][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 235.940055][ T31] ? preempt_schedule+0xae/0xc0 [ 235.940086][ T31] ? preempt_schedule_common+0x83/0xd0 [ 235.940115][ T31] panic+0xb9/0xc0 [ 235.940137][ T31] ? __pfx_panic+0x10/0x10 [ 235.940160][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 235.940187][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 235.940211][ T31] watchdog+0xfd2/0xfe0 [ 235.940239][ T31] ? watchdog+0x1de/0xfe0 [ 235.940267][ T31] kthread+0x711/0x8a0 [ 235.940290][ T31] ? __pfx_watchdog+0x10/0x10 [ 235.940311][ T31] ? __pfx_kthread+0x10/0x10 [ 235.940332][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 235.940353][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.940375][ T31] ? __pfx_kthread+0x10/0x10 [ 235.940395][ T31] ret_from_fork+0x4b9/0x870 [ 235.940422][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 235.940452][ T31] ? __switch_to_asm+0x39/0x70 [ 235.940470][ T31] ? __switch_to_asm+0x33/0x70 [ 235.940487][ T31] ? __pfx_kthread+0x10/0x10 [ 235.940507][ T31] ret_from_fork_asm+0x1a/0x30 [ 235.940542][ T31] [ 236.271609][ T31] Kernel Offset: disabled [ 236.275924][ T31] Rebooting in 86400 seconds..