last executing test programs: 18.234633263s ago: executing program 0 (id=1): r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x10000) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r6, &(0x7f0000000000)="8d", 0x1, 0x90, 0x0, 0x0) recvmmsg(r6, &(0x7f0000003440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/140, 0x8c}, 0x7}], 0x1, 0x2001, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000002200)={0x36, 0x8001, 0xc, 0xc, 0x0, 0x81}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) 18.168645229s ago: executing program 2 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)=0x28) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r1, @ANYBLOB="05002abd7000fddbdf2501000000060006004e24000004040880bc00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240001000000000000000000000000000000000000000000000000000000000000000000200004000a004e2000000001ff01000000000000000000000000000102000000240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c08000300070000004c02008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff2402098058000080060001000200000041000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff050003000100000064000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a00000014000200000000000000000000000000000000010500030002000000dc000080060001000a0000001400020000000000000000000000ffffac1414aa05000300030000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000000500030001000000060001000200000008000200640101000500030000000000060001000200000008000200ac1e0101050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff020000000000000000000000000001050003000200000064000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a5499400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e2200000000000000000000000008000100", @ANYRES32=r3], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 18.002944716s ago: executing program 1 (id=2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES8=r3, @ANYBLOB="010329bd7000fcdbdf"], 0x20}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r5 = accept4(r4, 0x0, 0x0, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'macvlan1\x00', 0x3}, 0x18) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820790c200000000", 0xc) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="5216", 0x2}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20044014) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/12, 0xc}], 0x1}, 0x40012121) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r5, @ANYRES16=r9, @ANYRES8=r0], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x400c0d0) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r12) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010141bd7000fddbdf253100000005003300030000000a0001007770616e31000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x84) 17.906177238s ago: executing program 2 (id=6): r0 = socket$inet(0x2, 0x2, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x4c}}, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x9820}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r8}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x24004000) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x14, r5, 0x301, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) unshare(0x62040000) 17.76670452s ago: executing program 0 (id=7): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) listen(r0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) shutdown(r0, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = accept(r3, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) writev(r4, &(0x7f0000002640)=[{&(0x7f00000001c0)="80aceb0fe4", 0x5}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r5}, 0x47) recvmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x80}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}, 0x9d}], 0x1, 0x170, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1041, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x2}]}}}]}, 0x38}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfbf, r8, 0x0, 0xa0028000}, 0x38) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) 17.335555772s ago: executing program 2 (id=8): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001a00010100000000000000000a000004"], 0x20}}, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x8, 0x3, 0x3, 0xfd}, 0x8) unshare(0x62040200) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e0119802a0102"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x100000000001f, 0x0, 0x0) close(0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r7, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0xc000) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="3b667bd2fff43321e79cbb29e411", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008060006080006040001"], 0x0) 16.545327113s ago: executing program 0 (id=9): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x1, @private0, 0x5}, 0x9) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x0, 0x8dc, 0x800, 0x0, 0x54, 0x6}, 0x9c) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRESDEC=0x0, @ANYRESHEX=r1, @ANYBLOB="9e6aabfee626ead41d3447269134481307e5cfa6e554ab6f1e7ca6cb78a9421eb83b6a5037fdb3ad20782f947e278eb0426a40d1223fdac615592f7f5d6172bf2b9cd82d4c1d76fa5df1dcbe4c7eff85455c9ee489ec48ab0d92d10375d9d585b9cd420dce07b05119dd6bcf32ed213f27678dc096b05fa9173a8cfa54620259a863c408ab3e900f208ecca517f5814bb97e0cc1d40e3d48903697d991edf7fffc1bdcbca6a523c400c3331bff6e86aa674135d176"], 0x108}, 0x1, 0x0, 0x0, 0x20000094}, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000e0000000001000c000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x15}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r6, r8, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x7, &(0x7f0000000740)=[&(0x7f00000002c0)='syzkaller\x00', &(0x7f0000000400)='\x00', &(0x7f0000000500)='}\x00', &(0x7f0000000540)='N-([-,.[*\x00', &(0x7f0000000680)='syzkaller\x00', &(0x7f00000006c0)='/+\\*.\\\x00', &(0x7f0000000700)='&\x00'], 0x0, 0x10}}, 0x30) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r8, {0x0, 0x7}, {0x0, 0x4}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close(r9) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) close(r2) epoll_create1(0x80000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="b400000054f66a8df77f162a13ef7670f089a90fcc1877f483c05fc78222cc0cd948e81bee81b834a614", @ANYRES32=r4, @ANYRESDEC=r0, @ANYRES32=r12, @ANYRES16=r9], 0xb4}, 0x1, 0x0, 0x0, 0x48000}, 0x81) 16.434785491s ago: executing program 3 (id=10): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x2}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000100)=0x9, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='ext4_begin_ordered_truncate\x00', r7}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r8}, 0x10) close(r6) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') unshare(0x6a060000) r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r9, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="62202a3a2f257eadabf51cb7cf878ac6c52a20726d00"], 0x9) 15.506259136s ago: executing program 3 (id=11): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}}}}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}]}, 0x6c}}, 0x0) 15.418062527s ago: executing program 3 (id=12): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = socket(0x200000000000011, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001c00)={&(0x7f0000000600)=@can={0x1d, r2}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000680)="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", 0xff1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xd, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r5, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r0, r5, 0x5, 0x0, @val=@tracing={0x0, 0xfff}}, 0x20) 15.254651364s ago: executing program 3 (id=13): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x200eff, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x2, @remote, 0x40}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000200)) ioctl(r2, 0x8b32, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x18) pipe(&(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r4, &(0x7f0000000080), 0x12) write$cgroup_devices(r4, 0x0, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff3, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) bind$unix(r10, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) connect$unix(r9, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x1c) getpeername(r9, 0x0, &(0x7f0000000080)) 15.151089549s ago: executing program 3 (id=14): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80440, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f000000cc00)=0x200, 0x4) bind$inet(r1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x2000}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1, 0x16bf5125}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x400, 0x0, @private2}, 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000008d00), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='snd_soc_jack_irq\x00', r4, 0x0, 0x1ff}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400100011000300000000c400000000000000000000459adcd2ce377a5e1a376b0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000600000008001b00d70f000008001e000900000008000d00eb0000000a000100aaaaaaaaaa290000"], 0x44}, 0x1, 0x0, 0x0, 0x40080c5}, 0x4000000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xfffffffffffffeec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r8, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r7, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r7, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r7, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) 15.09093271s ago: executing program 3 (id=15): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}}, 0x28000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a00", 0x36}], 0x1, 0x0, 0x0, 0x7400}, 0x4000010) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x40000104}, 0x4000841) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@ipv6_newroute={0x68, 0x18, 0x200, 0x70bd2a, 0x25dfdbfe, {0xa, 0x20, 0x0, 0x87, 0xfe, 0x0, 0xfd, 0x2, 0x100}, [@RTA_OIF={0x8}, @RTA_GATEWAY={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @RTA_OIF={0x8}, @RTA_PRIORITY={0x8, 0x6, 0x1}, @RTA_GATEWAY={0x14, 0x5, @mcast2}, @RTA_MULTIPATH={0xc, 0x9, {0x3ff, 0x4, 0x8}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x200000c1}, 0x8000850) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r6) pipe(0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x41) 2.081320717s ago: executing program 32 (id=2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES8=r3, @ANYBLOB="010329bd7000fcdbdf"], 0x20}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r5 = accept4(r4, 0x0, 0x0, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'macvlan1\x00', 0x3}, 0x18) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820790c200000000", 0xc) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="5216", 0x2}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20044014) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/12, 0xc}], 0x1}, 0x40012121) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r5, @ANYRES16=r9, @ANYRES8=r0], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x400c0d0) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r12) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010141bd7000fddbdf253100000005003300030000000a0001007770616e31000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x84) 2.051156068s ago: executing program 33 (id=8): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001a00010100000000000000000a000004"], 0x20}}, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x8, 0x3, 0x3, 0xfd}, 0x8) unshare(0x62040200) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e0119802a0102"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x100000000001f, 0x0, 0x0) close(0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r7, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0xc000) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="3b667bd2fff43321e79cbb29e411", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008060006080006040001"], 0x0) 1.020472332s ago: executing program 34 (id=9): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x1, @private0, 0x5}, 0x9) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x0, 0x8dc, 0x800, 0x0, 0x54, 0x6}, 0x9c) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRESDEC=0x0, @ANYRESHEX=r1, @ANYBLOB="9e6aabfee626ead41d3447269134481307e5cfa6e554ab6f1e7ca6cb78a9421eb83b6a5037fdb3ad20782f947e278eb0426a40d1223fdac615592f7f5d6172bf2b9cd82d4c1d76fa5df1dcbe4c7eff85455c9ee489ec48ab0d92d10375d9d585b9cd420dce07b05119dd6bcf32ed213f27678dc096b05fa9173a8cfa54620259a863c408ab3e900f208ecca517f5814bb97e0cc1d40e3d48903697d991edf7fffc1bdcbca6a523c400c3331bff6e86aa674135d176"], 0x108}, 0x1, 0x0, 0x0, 0x20000094}, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000e0000000001000c000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x15}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r6, r8, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x7, &(0x7f0000000740)=[&(0x7f00000002c0)='syzkaller\x00', &(0x7f0000000400)='\x00', &(0x7f0000000500)='}\x00', &(0x7f0000000540)='N-([-,.[*\x00', &(0x7f0000000680)='syzkaller\x00', &(0x7f00000006c0)='/+\\*.\\\x00', &(0x7f0000000700)='&\x00'], 0x0, 0x10}}, 0x30) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r8, {0x0, 0x7}, {0x0, 0x4}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close(r9) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) close(r2) epoll_create1(0x80000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="b400000054f66a8df77f162a13ef7670f089a90fcc1877f483c05fc78222cc0cd948e81bee81b834a614", @ANYRES32=r4, @ANYRESDEC=r0, @ANYRES32=r12, @ANYRES16=r9], 0xb4}, 0x1, 0x0, 0x0, 0x48000}, 0x81) 0s ago: executing program 35 (id=15): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}}, 0x28000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a00", 0x36}], 0x1, 0x0, 0x0, 0x7400}, 0x4000010) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x40000104}, 0x4000841) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@ipv6_newroute={0x68, 0x18, 0x200, 0x70bd2a, 0x25dfdbfe, {0xa, 0x20, 0x0, 0x87, 0xfe, 0x0, 0xfd, 0x2, 0x100}, [@RTA_OIF={0x8}, @RTA_GATEWAY={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @RTA_OIF={0x8}, @RTA_PRIORITY={0x8, 0x6, 0x1}, @RTA_GATEWAY={0x14, 0x5, @mcast2}, @RTA_MULTIPATH={0xc, 0x9, {0x3ff, 0x4, 0x8}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x200000c1}, 0x8000850) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r6) pipe(0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x41) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.229' (ED25519) to the list of known hosts. [ 66.549170][ T5815] cgroup: Unknown subsys name 'net' [ 66.679377][ T5815] cgroup: Unknown subsys name 'cpuset' [ 66.687832][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.043092][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.489015][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.515652][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.516368][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.523858][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.538969][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.546981][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.547807][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.561638][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.569101][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.571099][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.585199][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.585284][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.605045][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.605115][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.620455][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.628642][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.638199][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.651712][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.665354][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.678084][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.685960][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.695235][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.704733][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.737549][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.755428][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.284493][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 71.364818][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 71.482202][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.489138][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.510923][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 71.613134][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 71.647960][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 71.731503][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.739143][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.746841][ T5835] bridge_slave_0: entered allmulticast mode [ 71.753939][ T5835] bridge_slave_0: entered promiscuous mode [ 71.788838][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.795967][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.803495][ T5825] bridge_slave_0: entered allmulticast mode [ 71.810546][ T5825] bridge_slave_0: entered promiscuous mode [ 71.844683][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.852035][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.859414][ T5835] bridge_slave_1: entered allmulticast mode [ 71.866580][ T5835] bridge_slave_1: entered promiscuous mode [ 71.890668][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.897933][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.905186][ T5825] bridge_slave_1: entered allmulticast mode [ 71.912419][ T5825] bridge_slave_1: entered promiscuous mode [ 71.935142][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.942777][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.950014][ T5843] bridge_slave_0: entered allmulticast mode [ 71.957746][ T5843] bridge_slave_0: entered promiscuous mode [ 72.000226][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.008035][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.015307][ T5843] bridge_slave_1: entered allmulticast mode [ 72.022577][ T5843] bridge_slave_1: entered promiscuous mode [ 72.065169][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.087639][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.123070][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.149379][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.170063][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.177323][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.184502][ T5833] bridge_slave_0: entered allmulticast mode [ 72.191778][ T5833] bridge_slave_0: entered promiscuous mode [ 72.213497][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.233395][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.240749][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.248096][ T5827] bridge_slave_0: entered allmulticast mode [ 72.255128][ T5827] bridge_slave_0: entered promiscuous mode [ 72.265767][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.273051][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.280717][ T5833] bridge_slave_1: entered allmulticast mode [ 72.287792][ T5833] bridge_slave_1: entered promiscuous mode [ 72.307820][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.341438][ T5835] team0: Port device team_slave_0 added [ 72.347321][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.354453][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.362129][ T5827] bridge_slave_1: entered allmulticast mode [ 72.369327][ T5827] bridge_slave_1: entered promiscuous mode [ 72.401148][ T5825] team0: Port device team_slave_0 added [ 72.419616][ T5835] team0: Port device team_slave_1 added [ 72.427364][ T5843] team0: Port device team_slave_0 added [ 72.457567][ T5825] team0: Port device team_slave_1 added [ 72.475788][ T5843] team0: Port device team_slave_1 added [ 72.497602][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.509464][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.555538][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.567687][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.589486][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.596889][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.623073][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.635344][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.642397][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.668458][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.679617][ T5840] Bluetooth: hci1: command tx timeout [ 72.681603][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.685525][ T5148] Bluetooth: hci3: command tx timeout [ 72.692135][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.692164][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.748328][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.755302][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.756915][ T5148] Bluetooth: hci2: command tx timeout [ 72.782449][ T5840] Bluetooth: hci0: command tx timeout [ 72.787956][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.803854][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.811279][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.837357][ T5840] Bluetooth: hci4: command tx timeout [ 72.837494][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.883941][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.891311][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.917594][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.953182][ T5827] team0: Port device team_slave_0 added [ 72.961096][ T5833] team0: Port device team_slave_0 added [ 72.996394][ T5827] team0: Port device team_slave_1 added [ 73.008876][ T5843] hsr_slave_0: entered promiscuous mode [ 73.015439][ T5843] hsr_slave_1: entered promiscuous mode [ 73.025200][ T5833] team0: Port device team_slave_1 added [ 73.101538][ T5835] hsr_slave_0: entered promiscuous mode [ 73.108041][ T5835] hsr_slave_1: entered promiscuous mode [ 73.114782][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 73.120921][ T5835] Cannot create hsr debugfs directory [ 73.128505][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.135473][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.161865][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.183933][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.191037][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.217101][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.249332][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.256570][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.282895][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.305417][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.312494][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.338522][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.384053][ T5825] hsr_slave_0: entered promiscuous mode [ 73.390754][ T5825] hsr_slave_1: entered promiscuous mode [ 73.397202][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 73.402938][ T5825] Cannot create hsr debugfs directory [ 73.602986][ T5827] hsr_slave_0: entered promiscuous mode [ 73.609737][ T5827] hsr_slave_1: entered promiscuous mode [ 73.616602][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 73.622437][ T5827] Cannot create hsr debugfs directory [ 73.634460][ T5833] hsr_slave_0: entered promiscuous mode [ 73.640908][ T5833] hsr_slave_1: entered promiscuous mode [ 73.647622][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 73.653356][ T5833] Cannot create hsr debugfs directory [ 74.010398][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.043303][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.054435][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.067034][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.168637][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.179138][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.193011][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.203738][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.288750][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.327922][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.339316][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.358546][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.444224][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.460259][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.478243][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.494001][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.505584][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.592207][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.605231][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.620845][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.631928][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.649266][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.656618][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.678455][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.689876][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.719285][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.726421][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.757839][ T5840] Bluetooth: hci3: command tx timeout [ 74.757879][ T5148] Bluetooth: hci1: command tx timeout [ 74.770822][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.791989][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.799128][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.809376][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.816710][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.836885][ T5148] Bluetooth: hci2: command tx timeout [ 74.837451][ T5840] Bluetooth: hci0: command tx timeout [ 74.875345][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.917321][ T5840] Bluetooth: hci4: command tx timeout [ 74.967318][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.028185][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.035356][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.073546][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.080796][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.197664][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.312370][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.345191][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.352516][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.383229][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.405112][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.412348][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.433930][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.466899][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.530063][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.550835][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.558063][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.581178][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.588333][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.710625][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.728810][ T5843] veth0_vlan: entered promiscuous mode [ 75.743213][ T5835] veth0_vlan: entered promiscuous mode [ 75.781427][ T5835] veth1_vlan: entered promiscuous mode [ 75.790667][ T5843] veth1_vlan: entered promiscuous mode [ 75.914188][ T5825] veth0_vlan: entered promiscuous mode [ 75.945864][ T5835] veth0_macvtap: entered promiscuous mode [ 75.972134][ T5825] veth1_vlan: entered promiscuous mode [ 75.988297][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.005121][ T5843] veth0_macvtap: entered promiscuous mode [ 76.014719][ T5835] veth1_macvtap: entered promiscuous mode [ 76.033245][ T5843] veth1_macvtap: entered promiscuous mode [ 76.061316][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.073663][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.110628][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.128631][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.145176][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.172700][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.188619][ T5825] veth0_macvtap: entered promiscuous mode [ 76.209354][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.225356][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.253393][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.264699][ T5825] veth1_macvtap: entered promiscuous mode [ 76.293760][ T1135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.342214][ T1135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.362341][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.378135][ T1135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.389218][ T1135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.409072][ T5827] veth0_vlan: entered promiscuous mode [ 76.441658][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.464375][ T5827] veth1_vlan: entered promiscuous mode [ 76.553034][ T1135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.570716][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.580851][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.595083][ T1135] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.610311][ T1135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.639393][ T1135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.672195][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.680927][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.731301][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.741474][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.742616][ T5827] veth0_macvtap: entered promiscuous mode [ 76.764157][ T5833] veth0_vlan: entered promiscuous mode [ 76.774895][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.783422][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.796643][ T5827] veth1_macvtap: entered promiscuous mode [ 76.838403][ T5833] veth1_vlan: entered promiscuous mode [ 76.849437][ T5840] Bluetooth: hci1: command tx timeout [ 76.849447][ T5148] Bluetooth: hci3: command tx timeout [ 76.880748][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.891100][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.901517][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.917989][ T5840] Bluetooth: hci2: command tx timeout [ 76.923429][ T5840] Bluetooth: hci0: command tx timeout [ 76.942983][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.954841][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.973017][ T5833] veth0_macvtap: entered promiscuous mode [ 76.996472][ T151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.996730][ T5840] Bluetooth: hci4: command tx timeout [ 77.008025][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.058947][ T5833] veth1_macvtap: entered promiscuous mode [ 77.075131][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.087387][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.114403][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.138219][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.185588][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.186648][ T5942] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.260303][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.329866][ T1135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.352841][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 77.409935][ T1135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.423866][ T1135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.461407][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.479892][ T1135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.495740][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.655174][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.664176][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.115811][ T5978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.134239][ T5978] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 78.916371][ T5840] Bluetooth: hci3: command tx timeout [ 78.922224][ T5148] Bluetooth: hci1: command tx timeout [ 78.996719][ T5840] Bluetooth: hci0: command tx timeout [ 79.002170][ T5840] Bluetooth: hci2: command tx timeout [ 79.010526][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'. [ 79.086682][ T5840] Bluetooth: hci4: command tx timeout [ 79.891796][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 79.901879][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'. [ 79.923335][ T1135] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.923540][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 79.932233][ T1135] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.932280][ T1135] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.932310][ T1135] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.941777][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'. [ 79.981607][ T5997] Zero length message leads to an empty skb [ 80.280589][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 80.290064][ T6004] bridge_slave_1: left allmulticast mode [ 80.295729][ T6004] bridge_slave_1: left promiscuous mode [ 80.301968][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.313423][ T6004] bridge_slave_0: left allmulticast mode [ 80.320221][ T6004] bridge_slave_0: left promiscuous mode [ 80.325989][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.847441][ T981] cfg80211: failed to load regulatory.db [ 132.923395][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.929872][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.361995][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.385231][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.443829][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 196.450645][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 196.457175][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 196.463867][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 201.556421][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 230.199045][ T31] INFO: task syz-executor:5833 blocked for more than 143 seconds. [ 230.208205][ T31] Not tainted syzkaller #0 [ 230.213229][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 230.221985][ T31] task:syz-executor state:D stack:21528 pid:5833 tgid:5833 ppid:1 task_flags:0x400140 flags:0x00080003 [ 230.233997][ T31] Call Trace: [ 230.238182][ T31] [ 230.241137][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 230.245781][ T31] ? __lock_acquire+0xab9/0xd20 [ 230.250716][ T31] ? __lock_acquire+0xab9/0xd20 [ 230.255604][ T31] ? __pfx___schedule+0x10/0x10 [ 230.260591][ T31] ? schedule+0x91/0x360 [ 230.265207][ T31] schedule+0x165/0x360 [ 230.270362][ T31] schedule_preempt_disabled+0x13/0x30 [ 230.275856][ T31] __mutex_lock+0x7e6/0x1350 [ 230.281446][ T31] ? rcu_is_watching+0x15/0xb0 [ 230.287409][ T31] ? __mutex_lock+0x5bb/0x1350 [ 230.292485][ T31] ? rfkill_register+0x37/0x8e0 [ 230.334382][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 230.339530][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 230.344497][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.361336][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 230.366747][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 230.372407][ T31] rfkill_register+0x37/0x8e0 [ 230.378380][ T31] wiphy_register+0x246a/0x2d20 [ 230.383792][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 230.389066][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 230.394365][ T31] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 230.399792][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 230.408385][ T31] ieee80211_register_hw+0x3473/0x40d0 [ 230.413914][ T31] ? ieee80211_register_hw+0x1461/0x40d0 [ 230.419684][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 230.425501][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 230.431495][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 230.437424][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 230.443752][ T31] ? __hrtimer_setup+0x187/0x210 [ 230.448796][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 230.454609][ T31] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 230.460414][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 230.466594][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 230.472153][ T31] ? do_syscall_64+0xfa/0xfa0 [ 230.476875][ T31] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 230.482006][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 230.488045][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 230.493606][ T31] ? rcu_is_watching+0x15/0xb0 [ 230.498485][ T31] ? __nla_parse+0x40/0x60 [ 230.502965][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 230.510056][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 230.515640][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 230.521979][ T31] ? bpf_lsm_capable+0x9/0x20 [ 230.526726][ T31] ? security_capable+0x7e/0x2e0 [ 230.531776][ T31] genl_rcv_msg+0x60e/0x790 [ 230.536465][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 230.541538][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 230.547203][ T31] ? __asan_memcpy+0x40/0x70 [ 230.551823][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 230.557235][ T31] netlink_rcv_skb+0x208/0x470 [ 230.562007][ T31] ? __lock_acquire+0xab9/0xd20 [ 230.566954][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 230.572009][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 230.577367][ T31] ? down_read+0x1ad/0x2e0 [ 230.581794][ T31] genl_rcv+0x28/0x40 [ 230.585769][ T31] netlink_unicast+0x82f/0x9e0 [ 230.590647][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 230.595949][ T31] ? netlink_sendmsg+0x642/0xb30 [ 230.601103][ T31] ? skb_put+0x11b/0x210 [ 230.605358][ T31] netlink_sendmsg+0x805/0xb30 [ 230.611621][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.616980][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 230.621921][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 230.627398][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.632696][ T31] __sock_sendmsg+0x21c/0x270 [ 230.637430][ T31] __sys_sendto+0x3bd/0x520 [ 230.641954][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 230.647100][ T31] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 230.653192][ T31] __x64_sys_sendto+0xde/0x100 [ 230.657993][ T31] do_syscall_64+0xfa/0xfa0 [ 230.662509][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.667827][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.673911][ T31] ? clear_bhb_loop+0x60/0xb0 [ 230.679897][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.685818][ T31] RIP: 0033:0x7eff60d90e5c [ 230.690387][ T31] RSP: 002b:00007fffc908bbd0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 230.698838][ T31] RAX: ffffffffffffffda RBX: 00007eff61b14620 RCX: 00007eff60d90e5c [ 230.706846][ T31] RDX: 0000000000000024 RSI: 00007eff61b14670 RDI: 0000000000000003 [ 230.715427][ T31] RBP: 0000000000000000 R08: 00007fffc908bc24 R09: 000000000000000c [ 230.723501][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 230.731579][ T31] R13: 0000000000000000 R14: 00007eff61b14670 R15: 0000000000000000 [ 230.739704][ T31] [ 230.742870][ T31] INFO: task kworker/1:4:5936 blocked for more than 143 seconds. [ 230.750841][ T31] Not tainted syzkaller #0 [ 230.755807][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 230.764714][ T31] task:kworker/1:4 state:D stack:24808 pid:5936 tgid:5936 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 230.776808][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 230.783585][ T31] Call Trace: [ 230.786925][ T31] [ 230.789863][ T31] __schedule+0x1798/0x4cc0 [ 230.794406][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 230.799880][ T31] ? __pfx___schedule+0x10/0x10 [ 230.804771][ T31] ? schedule+0x91/0x360 [ 230.809081][ T31] schedule+0x165/0x360 [ 230.813246][ T31] schedule_preempt_disabled+0x13/0x30 [ 230.819477][ T31] __mutex_lock+0x7e6/0x1350 [ 230.824103][ T31] ? __mutex_lock+0x5bb/0x1350 [ 230.828922][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 230.835186][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 230.840341][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 230.846118][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 230.851849][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 230.857965][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 230.863698][ T31] process_scheduled_works+0xae1/0x17b0 [ 230.869313][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 230.875309][ T31] worker_thread+0x8a0/0xda0 [ 230.880062][ T31] kthread+0x711/0x8a0 [ 230.884152][ T31] ? __pfx_worker_thread+0x10/0x10 [ 230.889301][ T31] ? __pfx_kthread+0x10/0x10 [ 230.893903][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 230.899152][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.904363][ T31] ? __pfx_kthread+0x10/0x10 [ 230.909000][ T31] ret_from_fork+0x4bc/0x870 [ 230.913611][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 230.919826][ T31] ? __switch_to_asm+0x39/0x70 [ 230.924621][ T31] ? __switch_to_asm+0x33/0x70 [ 230.929488][ T31] ? __pfx_kthread+0x10/0x10 [ 230.934178][ T31] ret_from_fork_asm+0x1a/0x30 [ 230.939014][ T31] [ 230.942250][ T31] INFO: task syz.1.2:5947 blocked for more than 144 seconds. [ 230.949753][ T31] Not tainted syzkaller #0 [ 230.954698][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 230.963412][ T31] task:syz.1.2 state:D stack:24744 pid:5947 tgid:5947 ppid:5825 task_flags:0x400040 flags:0x00080003 [ 230.975426][ T31] Call Trace: [ 230.978747][ T31] [ 230.981679][ T31] __schedule+0x1798/0x4cc0 [ 230.986244][ T31] ? __lock_acquire+0xab9/0xd20 [ 230.991110][ T31] ? __lock_acquire+0xab9/0xd20 [ 230.995949][ T31] ? __pfx___schedule+0x10/0x10 [ 231.000995][ T31] ? schedule+0x91/0x360 [ 231.005254][ T31] schedule+0x165/0x360 [ 231.009472][ T31] schedule_preempt_disabled+0x13/0x30 [ 231.014940][ T31] __mutex_lock+0x7e6/0x1350 [ 231.020344][ T31] ? __mutex_lock+0x5bb/0x1350 [ 231.025137][ T31] ? rfkill_unregister+0xc8/0x220 [ 231.030213][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 231.035261][ T31] ? __pfx_device_del+0x10/0x10 [ 231.040206][ T31] rfkill_unregister+0xc8/0x220 [ 231.045076][ T31] nfc_unregister_device+0x96/0x2a0 [ 231.050372][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 231.056315][ T31] virtual_ncidev_close+0x56/0x90 [ 231.061339][ T31] __fput+0x44c/0xa70 [ 231.065319][ T31] task_work_run+0x1d4/0x260 [ 231.069944][ T31] ? __pfx_task_work_run+0x10/0x10 [ 231.075079][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 231.080707][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 231.086005][ T31] do_syscall_64+0x2bd/0xfa0 [ 231.090667][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.095890][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.101999][ T31] ? clear_bhb_loop+0x60/0xb0 [ 231.106715][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.112600][ T31] RIP: 0033:0x7fa5d478efc9 [ 231.117122][ T31] RSP: 002b:00007fff32a7a548 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 231.126196][ T31] RAX: 0000000000000000 RBX: 00007fa5d49e7da0 RCX: 00007fa5d478efc9 [ 231.134195][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 231.142216][ T31] RBP: 00007fa5d49e7da0 R08: 0000000000017e5c R09: 0000001e32a7a83f [ 231.150341][ T31] R10: 00007fa5d49e7cb0 R11: 0000000000000246 R12: 0000000000013138 [ 231.158872][ T31] R13: 00007fa5d49e6180 R14: ffffffffffffffff R15: 00007fff32a7a660 [ 231.166921][ T31] [ 231.170061][ T31] INFO: task syz.2.8:5975 blocked for more than 144 seconds. [ 231.180345][ T31] Not tainted syzkaller #0 [ 231.185285][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 231.193989][ T31] task:syz.2.8 state:D stack:26376 pid:5975 tgid:5973 ppid:5835 task_flags:0x400140 flags:0x00080002 [ 231.206066][ T31] Call Trace: [ 231.209353][ T31] [ 231.212276][ T31] __schedule+0x1798/0x4cc0 [ 231.216830][ T31] ? __lock_acquire+0xab9/0xd20 [ 231.221689][ T31] ? __lock_acquire+0xab9/0xd20 [ 231.227248][ T31] ? __pfx___schedule+0x10/0x10 [ 231.232142][ T31] ? schedule+0x91/0x360 [ 231.236451][ T31] schedule+0x165/0x360 [ 231.240675][ T31] schedule_preempt_disabled+0x13/0x30 [ 231.246164][ T31] __mutex_lock+0x7e6/0x1350 [ 231.250772][ T31] ? __mutex_lock+0x5bb/0x1350 [ 231.255550][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 231.260887][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 231.265929][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.271217][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 231.277174][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 231.283520][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 231.289360][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 231.294489][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 231.300295][ T31] rfkill_set_block+0x1d2/0x440 [ 231.305169][ T31] rfkill_fop_write+0x44b/0x570 [ 231.310182][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 231.315692][ T31] ? security_file_permission+0x10/0x290 [ 231.321619][ T31] ? rw_verify_area+0x255/0x4d0 [ 231.327312][ T31] ? __lock_acquire+0xab9/0xd20 [ 231.332194][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 231.337632][ T31] vfs_write+0x27e/0xb30 [ 231.341909][ T31] ? __pfx_vfs_write+0x10/0x10 [ 231.346763][ T31] ? __fget_files+0x2a/0x420 [ 231.351379][ T31] ? __fget_files+0x2a/0x420 [ 231.355982][ T31] ? __fget_files+0x3a0/0x420 [ 231.360849][ T31] ? __fget_files+0x2a/0x420 [ 231.365457][ T31] ksys_write+0x145/0x250 [ 231.369844][ T31] ? __pfx_ksys_write+0x10/0x10 [ 231.374715][ T31] ? do_syscall_64+0xbe/0xfa0 [ 231.379468][ T31] do_syscall_64+0xfa/0xfa0 [ 231.383981][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.389458][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.395549][ T31] ? clear_bhb_loop+0x60/0xb0 [ 231.400653][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.406650][ T31] RIP: 0033:0x7f76e178efc9 [ 231.411077][ T31] RSP: 002b:00007f76e26f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 231.419585][ T31] RAX: ffffffffffffffda RBX: 00007f76e19e5fa0 RCX: 00007f76e178efc9 [ 231.427589][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000005 [ 231.436292][ T31] RBP: 00007f76e1811f91 R08: 0000000000000000 R09: 0000000000000000 [ 231.444293][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.452313][ T31] R13: 00007f76e19e6038 R14: 00007f76e19e5fa0 R15: 00007ffd27195f68 [ 231.460346][ T31] [ 231.463485][ T31] INFO: task syz.0.9:5984 blocked for more than 144 seconds. [ 231.470923][ T31] Not tainted syzkaller #0 [ 231.475860][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 231.484573][ T31] task:syz.0.9 state:D stack:24776 pid:5984 tgid:5983 ppid:5843 task_flags:0x400140 flags:0x00080002 [ 231.496713][ T31] Call Trace: [ 231.499996][ T31] [ 231.502937][ T31] __schedule+0x1798/0x4cc0 [ 231.507526][ T31] ? __lock_acquire+0xab9/0xd20 [ 231.512399][ T31] ? __lock_acquire+0xab9/0xd20 [ 231.517295][ T31] ? __pfx___schedule+0x10/0x10 [ 231.522177][ T31] ? schedule+0x91/0x360 [ 231.526475][ T31] schedule+0x165/0x360 [ 231.531506][ T31] schedule_preempt_disabled+0x13/0x30 [ 231.537031][ T31] __mutex_lock+0x7e6/0x1350 [ 231.541646][ T31] ? __mutex_lock+0x5bb/0x1350 [ 231.546465][ T31] ? genl_rcv_msg+0x10d/0x790 [ 231.551150][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 231.556345][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 231.561885][ T31] ? radix_tree_lookup+0x240/0x290 [ 231.567338][ T31] genl_rcv_msg+0x10d/0x790 [ 231.571887][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 231.576961][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 231.581996][ T31] ? __asan_memcpy+0x40/0x70 [ 231.586632][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 231.592016][ T31] netlink_rcv_skb+0x208/0x470 [ 231.596838][ T31] ? __lock_acquire+0xab9/0xd20 [ 231.601703][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 231.606787][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 231.612092][ T31] ? down_read+0x1ad/0x2e0 [ 231.616683][ T31] genl_rcv+0x28/0x40 [ 231.620939][ T31] netlink_unicast+0x82f/0x9e0 [ 231.625786][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 231.631117][ T31] ? netlink_sendmsg+0x642/0xb30 [ 231.636916][ T31] ? skb_put+0x11b/0x210 [ 231.641196][ T31] netlink_sendmsg+0x805/0xb30 [ 231.645953][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.651361][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 231.656361][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 231.661689][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.667038][ T31] __sock_sendmsg+0x21c/0x270 [ 231.671725][ T31] __sys_sendto+0x3bd/0x520 [ 231.676291][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 231.681421][ T31] ? count_memcg_event_mm+0x21/0x260 [ 231.686858][ T31] ? exc_page_fault+0x82/0x100 [ 231.691642][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 231.696983][ T31] __x64_sys_sendto+0xde/0x100 [ 231.701847][ T31] do_syscall_64+0xfa/0xfa0 [ 231.706503][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.711723][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.718015][ T31] ? clear_bhb_loop+0x60/0xb0 [ 231.722710][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.728658][ T31] RIP: 0033:0x7f475ed90e5c [ 231.733085][ T31] RSP: 002b:00007f475fc4fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 231.742222][ T31] RAX: ffffffffffffffda RBX: 00007f475fc4ffc0 RCX: 00007f475ed90e5c [ 231.750378][ T31] RDX: 0000000000000020 RSI: 00007f475fc50010 RDI: 000000000000000e [ 231.758399][ T31] RBP: 0000000000000000 R08: 00007f475fc4ff14 R09: 000000000000000c [ 231.766400][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000e [ 231.774397][ T31] R13: 00007f475fc4ff68 R14: 00007f475fc50010 R15: 0000000000000000 [ 231.782466][ T31] [ 231.785519][ T31] INFO: task syz.3.15:6005 blocked for more than 144 seconds. [ 231.793183][ T31] Not tainted syzkaller #0 [ 231.798177][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 231.806882][ T31] task:syz.3.15 state:D stack:28296 pid:6005 tgid:6003 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 231.818859][ T31] Call Trace: [ 231.822139][ T31] [ 231.825155][ T31] __schedule+0x1798/0x4cc0 [ 231.829799][ T31] ? __lock_acquire+0xab9/0xd20 [ 231.834657][ T31] ? __lock_acquire+0xab9/0xd20 [ 231.840458][ T31] ? __pfx___schedule+0x10/0x10 [ 231.845371][ T31] ? schedule+0x91/0x360 [ 231.849673][ T31] schedule+0x165/0x360 [ 231.853836][ T31] schedule_preempt_disabled+0x13/0x30 [ 231.859354][ T31] __mutex_lock+0x7e6/0x1350 [ 231.864017][ T31] ? __mutex_lock+0x5bb/0x1350 [ 231.868903][ T31] ? genl_rcv_msg+0x10d/0x790 [ 231.873598][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 231.878709][ T31] ? stack_trace_save+0x9c/0xe0 [ 231.883633][ T31] ? radix_tree_lookup+0x240/0x290 [ 231.888801][ T31] genl_rcv_msg+0x10d/0x790 [ 231.893336][ T31] ? __lock_acquire+0xab9/0xd20 [ 231.898269][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 231.903321][ T31] netlink_rcv_skb+0x208/0x470 [ 231.908119][ T31] ? __lock_acquire+0xab9/0xd20 [ 231.912970][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 231.918066][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 231.923387][ T31] ? down_read+0x1ad/0x2e0 [ 231.927843][ T31] genl_rcv+0x28/0x40 [ 231.931843][ T31] netlink_unicast+0x82f/0x9e0 [ 231.936672][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 231.942606][ T31] ? netlink_sendmsg+0x642/0xb30 [ 231.947623][ T31] ? skb_put+0x11b/0x210 [ 231.951887][ T31] netlink_sendmsg+0x805/0xb30 [ 231.956975][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.962277][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 231.967298][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 231.972594][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.977919][ T31] __sock_sendmsg+0x21c/0x270 [ 231.982631][ T31] __sys_sendto+0x3bd/0x520 [ 231.987168][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 231.992199][ T31] ? count_memcg_event_mm+0x21/0x260 [ 231.997546][ T31] ? exc_page_fault+0x82/0x100 [ 232.002347][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 232.007729][ T31] __x64_sys_sendto+0xde/0x100 [ 232.012598][ T31] do_syscall_64+0xfa/0xfa0 [ 232.017338][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.022554][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.028666][ T31] ? clear_bhb_loop+0x60/0xb0 [ 232.033356][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.039332][ T31] RIP: 0033:0x7f72d2190e5c [ 232.044581][ T31] RSP: 002b:00007f72d2fdaec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 232.053074][ T31] RAX: ffffffffffffffda RBX: 00007f72d2fdafc0 RCX: 00007f72d2190e5c [ 232.061099][ T31] RDX: 0000000000000024 RSI: 00007f72d2fdb010 RDI: 0000000000000009 [ 232.069147][ T31] RBP: 0000000000000000 R08: 00007f72d2fdaf14 R09: 000000000000000c [ 232.077163][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 232.085185][ T31] R13: 00007f72d2fdaf68 R14: 00007f72d2fdb010 R15: 0000000000000000 [ 232.093197][ T31] [ 232.096274][ T31] INFO: task syz.3.15:6006 blocked for more than 145 seconds. [ 232.103735][ T31] Not tainted syzkaller #0 [ 232.108701][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 232.117704][ T31] task:syz.3.15 state:D stack:28552 pid:6006 tgid:6003 ppid:5827 task_flags:0x400040 flags:0x00080002 [ 232.129716][ T31] Call Trace: [ 232.133004][ T31] [ 232.135926][ T31] __schedule+0x1798/0x4cc0 [ 232.140507][ T31] ? __lock_acquire+0xab9/0xd20 [ 232.146136][ T31] ? __lock_acquire+0xab9/0xd20 [ 232.151009][ T31] ? __pfx___schedule+0x10/0x10 [ 232.155863][ T31] ? schedule+0x91/0x360 [ 232.160164][ T31] schedule+0x165/0x360 [ 232.164332][ T31] schedule_preempt_disabled+0x13/0x30 [ 232.169833][ T31] __mutex_lock+0x7e6/0x1350 [ 232.174445][ T31] ? __mutex_lock+0x5bb/0x1350 [ 232.179260][ T31] ? genl_rcv_msg+0x10d/0x790 [ 232.183950][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 232.189033][ T31] ? stack_trace_save+0x9c/0xe0 [ 232.193954][ T31] ? radix_tree_lookup+0x240/0x290 [ 232.199126][ T31] genl_rcv_msg+0x10d/0x790 [ 232.203651][ T31] ? __lock_acquire+0xab9/0xd20 [ 232.208561][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.213602][ T31] netlink_rcv_skb+0x208/0x470 [ 232.218427][ T31] ? __lock_acquire+0xab9/0xd20 [ 232.223281][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.228349][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 232.233659][ T31] ? down_read+0x1ad/0x2e0 [ 232.238144][ T31] genl_rcv+0x28/0x40 [ 232.242136][ T31] netlink_unicast+0x82f/0x9e0 [ 232.247061][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 232.253005][ T31] ? netlink_sendmsg+0x642/0xb30 [ 232.258036][ T31] ? skb_put+0x11b/0x210 [ 232.262290][ T31] netlink_sendmsg+0x805/0xb30 [ 232.267086][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.272390][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 232.277413][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 232.282710][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.288060][ T31] __sock_sendmsg+0x21c/0x270 [ 232.292748][ T31] __sys_sendto+0x3bd/0x520 [ 232.297294][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 232.302336][ T31] ? count_memcg_event_mm+0x21/0x260 [ 232.307674][ T31] ? exc_page_fault+0x82/0x100 [ 232.312450][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 232.317802][ T31] __x64_sys_sendto+0xde/0x100 [ 232.322595][ T31] do_syscall_64+0xfa/0xfa0 [ 232.327191][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.332397][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.338540][ T31] ? clear_bhb_loop+0x60/0xb0 [ 232.343225][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.349153][ T31] RIP: 0033:0x7f72d2190e5c [ 232.354169][ T31] RSP: 002b:00007f72d2fb9ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 232.362677][ T31] RAX: ffffffffffffffda RBX: 00007f72d2fb9fc0 RCX: 00007f72d2190e5c [ 232.370687][ T31] RDX: 0000000000000024 RSI: 00007f72d2fba010 RDI: 0000000000000009 [ 232.378793][ T31] RBP: 0000000000000000 R08: 00007f72d2fb9f14 R09: 000000000000000c [ 232.386806][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 232.394793][ T31] R13: 00007f72d2fb9f68 R14: 00007f72d2fba010 R15: 0000000000000000 [ 232.403035][ T31] [ 232.406135][ T31] [ 232.406135][ T31] Showing all locks held in the system: [ 232.413853][ T31] 1 lock held by khungtaskd/31: [ 232.418749][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 232.428665][ T31] 2 locks held by getty/5586: [ 232.433335][ T31] #0: ffff88814dc200a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 232.443145][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 232.454036][ T31] 3 locks held by syz-executor/5833: [ 232.459464][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 232.467712][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 232.477187][ T31] #2: ffffffff8f5aa428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 232.487178][ T31] 3 locks held by kworker/1:4/5936: [ 232.492363][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 232.503478][ T31] #1: ffffc90004edfba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 232.517031][ T31] #2: ffffffff8f5aa428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 232.528427][ T31] 2 locks held by syz.1.2/5947: [ 232.533285][ T31] #0: ffff888027045100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 232.543094][ T31] #1: ffffffff8f5aa428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 232.553278][ T31] 2 locks held by syz.2.8/5975: [ 232.558837][ T31] #0: ffffffff8f5aa428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 232.569033][ T31] #1: ffff888027045100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 232.578768][ T31] 2 locks held by syz.0.9/5984: [ 232.583615][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 232.591868][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 232.601016][ T31] 2 locks held by syz.3.15/6005: [ 232.605976][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 232.614334][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 232.623396][ T31] 2 locks held by syz.3.15/6006: [ 232.628357][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 232.636595][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 232.645584][ T31] 2 locks held by syz-executor/6013: [ 232.650951][ T31] #0: ffff88807d1f4918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 232.661729][ T31] #1: ffffffff8f5aa428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 232.671773][ T31] 2 locks held by syz-executor/6014: [ 232.677211][ T31] #0: ffff88807d1f6918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 232.687338][ T31] #1: ffffffff8f5aa428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 232.697415][ T31] 2 locks held by syz-executor/6016: [ 232.702684][ T31] #0: ffff888059682918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 232.712766][ T31] #1: ffffffff8f5aa428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 232.722744][ T31] 2 locks held by syz-executor/6018: [ 232.728200][ T31] #0: ffff88807d6a8118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 232.738290][ T31] #1: ffffffff8f5aa428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 232.748240][ T31] 2 locks held by syz-executor/6033: [ 232.753534][ T31] #0: ffff888023ab6118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 232.764678][ T31] #1: ffffffff8f5aa428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 232.774696][ T31] 2 locks held by syz-executor/6037: [ 232.780028][ T31] #0: ffff88805b051918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 232.790072][ T31] #1: ffffffff8f5aa428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 232.800123][ T31] 2 locks held by syz-executor/6038: [ 232.805390][ T31] #0: ffff88805d801118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 232.815466][ T31] #1: ffffffff8f5aa428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 232.825464][ T31] 2 locks held by syz-executor/6042: [ 232.830806][ T31] #0: ffff888057598118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 232.840891][ T31] #1: ffffffff8f5aa428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 232.850893][ T31] 2 locks held by syz-executor/6044: [ 232.856224][ T31] #0: ffff8880275c5918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 232.867076][ T31] #1: ffffffff8f5aa428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 232.877144][ T31] 2 locks held by syz-executor/6052: [ 232.882441][ T31] #0: ffff888049fdf918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 232.892521][ T31] #1: ffffffff8f5aa428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 232.902604][ T31] 2 locks held by syz-executor/6058: [ 232.907926][ T31] #0: ffff888028d8a918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 232.918063][ T31] #1: ffffffff8f5aa428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 232.928087][ T31] 2 locks held by syz-executor/6062: [ 232.933388][ T31] #0: ffff88807d063918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 232.943650][ T31] #1: ffffffff8f5aa428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 232.953666][ T31] 2 locks held by syz-executor/6063: [ 232.959125][ T31] #0: ffff888046dfd118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 232.969791][ T31] #1: ffffffff8f5aa428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 232.979903][ T31] 2 locks held by syz-executor/6065: [ 232.985203][ T31] #0: ffff888029419918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 232.995289][ T31] #1: ffffffff8f5aa428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 233.005592][ T31] [ 233.007978][ T31] ============================================= [ 233.007978][ T31] [ 233.016432][ T31] NMI backtrace for cpu 0 [ 233.016450][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 233.016461][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 233.016467][ T31] Call Trace: [ 233.016471][ T31] [ 233.016476][ T31] dump_stack_lvl+0x189/0x250 [ 233.016495][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.016507][ T31] ? __pfx__printk+0x10/0x10 [ 233.016523][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 233.016536][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 233.016547][ T31] ? __pfx__printk+0x10/0x10 [ 233.016558][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 233.016575][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 233.016586][ T31] watchdog+0xf60/0xfa0 [ 233.016598][ T31] ? watchdog+0x1e2/0xfa0 [ 233.016610][ T31] kthread+0x711/0x8a0 [ 233.016624][ T31] ? __pfx_watchdog+0x10/0x10 [ 233.016633][ T31] ? __pfx_kthread+0x10/0x10 [ 233.016646][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 233.016658][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.016669][ T31] ? __pfx_kthread+0x10/0x10 [ 233.016681][ T31] ret_from_fork+0x4bc/0x870 [ 233.016693][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 233.016705][ T31] ? __switch_to_asm+0x39/0x70 [ 233.016713][ T31] ? __switch_to_asm+0x33/0x70 [ 233.016720][ T31] ? __pfx_kthread+0x10/0x10 [ 233.016732][ T31] ret_from_fork_asm+0x1a/0x30 [ 233.016748][ T31] [ 233.016752][ T31] Sending NMI from CPU 0 to CPUs 1: [ 233.163574][ C1] NMI backtrace for cpu 1 [ 233.163593][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 233.163610][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 233.163619][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 233.163643][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 f1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 233.163657][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 233.163672][ C1] RAX: e196511426f4d400 RBX: ffffffff81967be7 RCX: e196511426f4d400 [ 233.163684][ C1] RDX: 0000000000000001 RSI: ffffffff8d70d771 RDI: ffffffff8bbf05e0 [ 233.163696][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 233.163708][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cd170 [ 233.163719][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100395db58 [ 233.163730][ C1] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 233.163743][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.163753][ C1] CR2: 00007ffe4c3f0ff0 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 233.163768][ C1] Call Trace: [ 233.163775][ C1] [ 233.163781][ C1] default_idle+0x13/0x20 [ 233.163802][ C1] default_idle_call+0x73/0xb0 [ 233.163824][ C1] do_idle+0x1e7/0x510 [ 233.163843][ C1] ? __pfx_do_idle+0x10/0x10 [ 233.163866][ C1] cpu_startup_entry+0x44/0x60 [ 233.163882][ C1] start_secondary+0x101/0x110 [ 233.163904][ C1] common_startup_64+0x13e/0x147 [ 233.163931][ C1]