last executing test programs: 15.914985512s ago: executing program 1 (id=2): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010003b150000b4000000000000000000", @ANYRES32=0x0, @ANYRES8=r0], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010003b150000b4000000000000000000", @ANYRES32=0x0, @ANYRES8=r0], 0x48}}, 0x0) (async) 15.723292751s ago: executing program 1 (id=6): socket$inet6_sctp(0xa, 0x801, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x2, @private1, 0x28}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="dcdb", 0x2}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x280}}], 0x1, 0x880) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000b000000060000000000000800000000060000000000000c03000000000000000400000d0002000000000000000000000efaffffff00008b0f000000000000000e00000001000000000000000000ff"], 0x0, 0x67, 0x0, 0x1}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000b000000060000000000000800000000060000000000000c03000000000000000400000d0002000000000000000000000efaffffff00008b0f000000000000000e00000001000000000000000000ff"], 0x0, 0x67, 0x0, 0x1}, 0x20) r1 = socket(0xa, 0x3, 0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"ea293c1693b06613f13f1578bfeda9cb", 0x0, 0x0, {0x7, 0x85c}, {0x84f}, 0x9, [0xffff, 0x4, 0xfffffffffffffff9, 0x1, 0x5, 0x225b, 0x5a42, 0xb, 0x9, 0x200, 0x6, 0x0, 0x2, 0x1, 0x7fffffffffffffff, 0x9db]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000008c0)={{r1}, r2, 0x10, @unused=[0x9, 0x0, 0x3, 0x2], @subvolid=0x6}) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') 15.64787677s ago: executing program 2 (id=3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$nci(r1, &(0x7f0000000400)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x0, 0x2, 0x6, 0x4}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9, @random="0f1cb52efa55"}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000240)='syz1\x00', 0x1ff) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x38, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe, 0x68}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0x5}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4d}]}, 0x38}}, 0x4) sendfile(r2, r3, 0x0, 0xffffffff000) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x40000030, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x3) 15.59931195s ago: executing program 1 (id=7): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, 0x800}, 0x28) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be34c6e17aa310769876c1d0000007ea60864160af36514001ac004000202080002000600010076e6f06cea2618c3ecb525c89c32f292b156a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 15.456879622s ago: executing program 1 (id=8): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008884}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x2, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x2d, 0x11, 0x4, {0x6, @tcp_ip4_spec={@remote, @multicast1, 0x4e21, 0x4e22, 0x4}, {0x0, @empty, 0xa7, 0x0, [0x40, 0x56c]}, @udp_ip6_spec={@mcast1, @private2, 0x4e20, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x0, 0x2, [0x1c00]}, 0x7, 0x7}}}) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f0000003040)=""/4109, 0x100d}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000002bc0)=""/118, 0x76}, {&(0x7f0000000600)=""/149, 0x95}, {&(0x7f0000000240)=""/280, 0x118}, {&(0x7f0000002d00)=""/118, 0x76}, {&(0x7f0000000400)=""/60, 0x3c}], 0xa}, 0x10}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1008}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) 15.342081019s ago: executing program 1 (id=9): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'pim6reg1\x00'}) 15.28138721s ago: executing program 1 (id=10): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) shutdown(r0, 0x1) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 15.10135584s ago: executing program 0 (id=1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="890538e4", 0x667) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x1ff, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x70, 0x12, 0xa, 0x3, 0x0, 0x0, {0x3}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0x5c, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_OPTS={0x20, 0x9, 0x0, 0x1, @NFTA_TUNNEL_KEY_OPTS_VXLAN={0x1c, 0x1, 0x0, 0x1, [@NFTA_TUNNEL_KEY_VXLAN_GBP={0x8, 0x1, 0x1, 0x0, 0x43b7204f}, @NFTA_TUNNEL_KEY_VXLAN_GBP={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_TUNNEL_KEY_VXLAN_GBP={0x8, 0x1, 0x1, 0x0, 0x6}]}}, @NFTA_TUNNEL_KEY_DPORT={0x6, 0x8, 0x1, 0x0, 0x4e22}, @NFTA_TUNNEL_KEY_TTL={0x5, 0x6, 0x7}, @NFTA_TUNNEL_KEY_FLAGS={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY_ID={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_TUNNEL_KEY_DPORT={0x6, 0x8, 0x1, 0x0, 0x4e20}, @NFTA_TUNNEL_KEY_FLAGS={0x8}, @NFTA_TUNNEL_KEY_SPORT={0x6, 0x7, 0x1, 0x0, 0x4e23}]}}, @NFT_MSG_DELSET={0x54, 0xb, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000010101020000000000000000020000000c001980"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x58, r4, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) 67.705821ms ago: executing program 32 (id=1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="890538e4", 0x667) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x1ff, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x70, 0x12, 0xa, 0x3, 0x0, 0x0, {0x3}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0x5c, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_OPTS={0x20, 0x9, 0x0, 0x1, @NFTA_TUNNEL_KEY_OPTS_VXLAN={0x1c, 0x1, 0x0, 0x1, [@NFTA_TUNNEL_KEY_VXLAN_GBP={0x8, 0x1, 0x1, 0x0, 0x43b7204f}, @NFTA_TUNNEL_KEY_VXLAN_GBP={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_TUNNEL_KEY_VXLAN_GBP={0x8, 0x1, 0x1, 0x0, 0x6}]}}, @NFTA_TUNNEL_KEY_DPORT={0x6, 0x8, 0x1, 0x0, 0x4e22}, @NFTA_TUNNEL_KEY_TTL={0x5, 0x6, 0x7}, @NFTA_TUNNEL_KEY_FLAGS={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY_ID={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_TUNNEL_KEY_DPORT={0x6, 0x8, 0x1, 0x0, 0x4e20}, @NFTA_TUNNEL_KEY_FLAGS={0x8}, @NFTA_TUNNEL_KEY_SPORT={0x6, 0x7, 0x1, 0x0, 0x4e23}]}}, @NFT_MSG_DELSET={0x54, 0xb, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000010101020000000000000000020000000c001980"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x58, r4, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) 22.397929ms ago: executing program 33 (id=10): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) shutdown(r0, 0x1) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 0s ago: executing program 34 (id=3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$nci(r1, &(0x7f0000000400)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x0, 0x2, 0x6, 0x4}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9, @random="0f1cb52efa55"}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000240)='syz1\x00', 0x1ff) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x38, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe, 0x68}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0x5}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4d}]}, 0x38}}, 0x4) sendfile(r2, r3, 0x0, 0xffffffff000) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x40000030, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts. [ 48.932137][ T5844] cgroup: Unknown subsys name 'net' [ 49.001106][ T5844] cgroup: Unknown subsys name 'cpuset' [ 49.008395][ T5844] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.107318][ T5844] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.012607][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.020456][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.027807][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.035800][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.043710][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.050905][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.058090][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.065601][ T5863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 52.072925][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.080512][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.087757][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.093075][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 52.102774][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 52.110228][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.117405][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.117662][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.125036][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.131635][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.146554][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 52.154656][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.163558][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.165293][ T5872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 52.170930][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.184657][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.186103][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.434048][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 52.554537][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 52.564686][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 52.633260][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.640475][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.647730][ T5864] bridge_slave_0: entered allmulticast mode [ 52.655046][ T5864] bridge_slave_0: entered promiscuous mode [ 52.677775][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 52.696058][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.703319][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.710518][ T5864] bridge_slave_1: entered allmulticast mode [ 52.716963][ T5864] bridge_slave_1: entered promiscuous mode [ 52.774946][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.788589][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.821354][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 52.854558][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.861725][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.868930][ T5866] bridge_slave_0: entered allmulticast mode [ 52.875772][ T5866] bridge_slave_0: entered promiscuous mode [ 52.885394][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.892542][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.899898][ T5855] bridge_slave_0: entered allmulticast mode [ 52.906282][ T5855] bridge_slave_0: entered promiscuous mode [ 52.914124][ T5864] team0: Port device team_slave_0 added [ 52.921825][ T5864] team0: Port device team_slave_1 added [ 52.930897][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.937994][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.945342][ T5866] bridge_slave_1: entered allmulticast mode [ 52.952039][ T5866] bridge_slave_1: entered promiscuous mode [ 52.961502][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.968672][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.975763][ T5855] bridge_slave_1: entered allmulticast mode [ 52.982733][ T5855] bridge_slave_1: entered promiscuous mode [ 53.048112][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.056077][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.082006][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.107816][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.117322][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.124562][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.132277][ T5859] bridge_slave_0: entered allmulticast mode [ 53.139330][ T5859] bridge_slave_0: entered promiscuous mode [ 53.147199][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.156932][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.164178][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.190635][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.201518][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.208830][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.215995][ T5858] bridge_slave_0: entered allmulticast mode [ 53.222645][ T5858] bridge_slave_0: entered promiscuous mode [ 53.231252][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.247610][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.254929][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.262079][ T5859] bridge_slave_1: entered allmulticast mode [ 53.268914][ T5859] bridge_slave_1: entered promiscuous mode [ 53.276611][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.290103][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.297256][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.304449][ T5858] bridge_slave_1: entered allmulticast mode [ 53.310908][ T5858] bridge_slave_1: entered promiscuous mode [ 53.349745][ T5866] team0: Port device team_slave_0 added [ 53.364884][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.375228][ T5855] team0: Port device team_slave_0 added [ 53.382900][ T5855] team0: Port device team_slave_1 added [ 53.397570][ T5866] team0: Port device team_slave_1 added [ 53.411754][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.435069][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.469641][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.495292][ T5864] hsr_slave_0: entered promiscuous mode [ 53.502251][ T5864] hsr_slave_1: entered promiscuous mode [ 53.509833][ T5859] team0: Port device team_slave_0 added [ 53.516349][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.524138][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.550110][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.561774][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.568776][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.594994][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.612010][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.619164][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.645158][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.663515][ T5859] team0: Port device team_slave_1 added [ 53.673780][ T5858] team0: Port device team_slave_0 added [ 53.680102][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.687056][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.713124][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.745284][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.752416][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.778374][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.790569][ T5858] team0: Port device team_slave_1 added [ 53.812106][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.819101][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.845141][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.893855][ T5866] hsr_slave_0: entered promiscuous mode [ 53.900160][ T5866] hsr_slave_1: entered promiscuous mode [ 53.906244][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 53.912350][ T5866] Cannot create hsr debugfs directory [ 53.919394][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.926339][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.952446][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.978798][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.985743][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.012207][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.028963][ T5855] hsr_slave_0: entered promiscuous mode [ 54.035016][ T5855] hsr_slave_1: entered promiscuous mode [ 54.041234][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 54.046954][ T5855] Cannot create hsr debugfs directory [ 54.084532][ T5859] hsr_slave_0: entered promiscuous mode [ 54.090744][ T5859] hsr_slave_1: entered promiscuous mode [ 54.096608][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 54.102448][ T5859] Cannot create hsr debugfs directory [ 54.182828][ T5858] hsr_slave_0: entered promiscuous mode [ 54.189724][ T5858] hsr_slave_1: entered promiscuous mode [ 54.195731][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 54.201584][ T5858] Cannot create hsr debugfs directory [ 54.228907][ T5865] Bluetooth: hci4: command tx timeout [ 54.229828][ T5183] Bluetooth: hci2: command tx timeout [ 54.234342][ T5865] Bluetooth: hci1: command tx timeout [ 54.239722][ T5183] Bluetooth: hci0: command tx timeout [ 54.245173][ T5857] Bluetooth: hci3: command tx timeout [ 54.391307][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.405392][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.421376][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.440714][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.475941][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.497031][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.506801][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.525757][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.552383][ T5859] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.563469][ T5859] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.573968][ T5859] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.590851][ T5859] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.625829][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.650925][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.672426][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.691533][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.720780][ T5858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.730529][ T5858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.739973][ T5858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.748774][ T5858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.762659][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.800237][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.813977][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.831387][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.838537][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.866451][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.874760][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.881888][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.922925][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.930005][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.951861][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.958989][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.977243][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.033470][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.065983][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.073114][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.085193][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.100990][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.108154][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.134602][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.170019][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.177119][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.193582][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.205442][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.241816][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.248968][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.276994][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.326882][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.334041][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.372241][ T5864] veth0_vlan: entered promiscuous mode [ 55.382209][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.389336][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.460745][ T5864] veth1_vlan: entered promiscuous mode [ 55.486337][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.546740][ T5864] veth0_macvtap: entered promiscuous mode [ 55.575466][ T5864] veth1_macvtap: entered promiscuous mode [ 55.593606][ T5866] veth0_vlan: entered promiscuous mode [ 55.622762][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.640896][ T5866] veth1_vlan: entered promiscuous mode [ 55.656045][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.676246][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.689326][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.734002][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.791808][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.802187][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.826029][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.843565][ T5866] veth0_macvtap: entered promiscuous mode [ 55.863329][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.873658][ T5866] veth1_macvtap: entered promiscuous mode [ 55.887408][ T5855] veth0_vlan: entered promiscuous mode [ 55.939088][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.952822][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.960227][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.965853][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.979782][ T5855] veth1_vlan: entered promiscuous mode [ 56.006810][ T1341] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.015684][ T1341] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.035765][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.046638][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.050516][ T5859] veth0_vlan: entered promiscuous mode [ 56.060335][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.072242][ T1341] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.086593][ T5859] veth1_vlan: entered promiscuous mode [ 56.126340][ T5858] veth0_vlan: entered promiscuous mode [ 56.134768][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.146289][ T5858] veth1_vlan: entered promiscuous mode [ 56.160356][ T5855] veth0_macvtap: entered promiscuous mode [ 56.179669][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.186630][ T5855] veth1_macvtap: entered promiscuous mode [ 56.200724][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.213139][ T5859] veth0_macvtap: entered promiscuous mode [ 56.245963][ T5969] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 56.254283][ T5858] veth0_macvtap: entered promiscuous mode [ 56.266902][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.285523][ T5969] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 56.289835][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.295685][ T5859] veth1_macvtap: entered promiscuous mode [ 56.308049][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.317330][ T5858] veth1_macvtap: entered promiscuous mode [ 56.318840][ T5857] Bluetooth: hci3: command tx timeout [ 56.323302][ T5861] Bluetooth: hci1: command tx timeout [ 56.330168][ T5857] Bluetooth: hci2: command tx timeout [ 56.334052][ T5183] Bluetooth: hci4: command tx timeout [ 56.339578][ T5865] Bluetooth: hci0: command tx timeout [ 56.351634][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.394800][ T2980] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.405054][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.424615][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.433571][ T2980] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.445170][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.473471][ T2980] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.493759][ T2980] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.511125][ T2980] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.525262][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.544364][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.554040][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.578619][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.636042][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.679183][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.688187][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.699217][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.803283][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.833175][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.858798][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.868166][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.898147][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.910651][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.939880][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.962591][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.045713][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 57.686392][ T5991] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 57.693121][ T5991] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 57.710835][ T5991] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.718915][ T5991] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 57.728111][ T5991] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 57.737122][ T5991] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 57.753428][ T5991] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 57.772114][ T5991] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 57.784145][ T5991] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 57.792629][ T5991] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 71.430805][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.437114][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.560068][ T9] cfg80211: failed to load regulatory.db [ 132.870782][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.877159][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.311172][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.317519][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.868460][ T31] INFO: task syz-executor:5858 blocked for more than 143 seconds. [ 212.876296][ T31] Not tainted syzkaller #0 [ 212.881261][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 212.889951][ T31] task:syz-executor state:D stack:21960 pid:5858 tgid:5858 ppid:1 task_flags:0x400140 flags:0x00004004 [ 212.901917][ T31] Call Trace: [ 212.905201][ T31] [ 212.908193][ T31] __schedule+0x1798/0x4cc0 [ 212.912733][ T31] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 212.917594][ T31] ? schedule+0x91/0x360 [ 212.921932][ T31] ? rcu_is_watching+0x15/0xb0 [ 212.926713][ T31] ? lock_release+0x4b/0x3e0 [ 212.931363][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 212.937270][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 212.943941][ T31] schedule+0x165/0x360 [ 212.948115][ T31] schedule_preempt_disabled+0x13/0x30 [ 212.953765][ T31] __mutex_lock+0x7e6/0x1350 [ 212.958413][ T31] ? __mutex_lock+0x5bb/0x1350 [ 212.968191][ T31] ? genl_rcv_msg+0x10d/0x790 [ 212.972889][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 212.977920][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 213.011516][ T31] ? radix_tree_lookup+0x240/0x290 [ 213.016777][ T31] genl_rcv_msg+0x10d/0x790 [ 213.021379][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.026520][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 213.031647][ T31] ? __asan_memcpy+0x40/0x70 [ 213.036245][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 213.041965][ T31] ? __skb_clone+0x63/0x7a0 [ 213.046487][ T31] netlink_rcv_skb+0x208/0x470 [ 213.051264][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.056286][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 213.062198][ T31] ? lock_release+0x4b/0x3e0 [ 213.066805][ T31] ? down_read+0x1ad/0x2e0 [ 213.071252][ T31] genl_rcv+0x28/0x40 [ 213.075235][ T31] netlink_unicast+0x82c/0x9e0 [ 213.080071][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 213.085355][ T31] ? netlink_sendmsg+0x642/0xb30 [ 213.090326][ T31] ? skb_put+0x11b/0x210 [ 213.094562][ T31] netlink_sendmsg+0x805/0xb30 [ 213.099385][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.104676][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 213.109630][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 213.114911][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.120260][ T31] __sock_sendmsg+0x21c/0x270 [ 213.124939][ T31] __sys_sendto+0x3bd/0x520 [ 213.129495][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 213.134535][ T31] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 213.140675][ T31] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 213.147269][ T31] ? __pfx_mem_cgroup_handle_over_high+0x10/0x10 [ 213.153660][ T31] ? rcu_is_watching+0x15/0xb0 [ 213.158499][ T31] __x64_sys_sendto+0xde/0x100 [ 213.163280][ T31] do_syscall_64+0xfa/0x3b0 [ 213.167768][ T31] ? rcu_is_watching+0x15/0xb0 [ 213.172578][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.178681][ T31] ? clear_bhb_loop+0x60/0xb0 [ 213.183353][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.189293][ T31] RIP: 0033:0x7f1102390a7c [ 213.193724][ T31] RSP: 002b:00007ffc971f7c80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 213.202195][ T31] RAX: ffffffffffffffda RBX: 00007f11030e4620 RCX: 00007f1102390a7c [ 213.210189][ T31] RDX: 0000000000000024 RSI: 00007f11030e4670 RDI: 0000000000000003 [ 213.218144][ T31] RBP: 0000000000000000 R08: 00007ffc971f7cd4 R09: 000000000000000c [ 213.226157][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 213.234147][ T31] R13: 0000000000000000 R14: 00007f11030e4670 R15: 0000000000000000 [ 213.242146][ T31] [ 213.245157][ T31] INFO: task syz-executor:5859 blocked for more than 143 seconds. [ 213.253332][ T31] Not tainted syzkaller #0 [ 213.258321][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 213.266981][ T31] task:syz-executor state:D stack:21608 pid:5859 tgid:5859 ppid:1 task_flags:0x400140 flags:0x00004004 [ 213.278981][ T31] Call Trace: [ 213.282257][ T31] [ 213.285175][ T31] __schedule+0x1798/0x4cc0 [ 213.289776][ T31] ? __pfx___schedule+0x10/0x10 [ 213.294675][ T31] ? schedule+0x91/0x360 [ 213.298959][ T31] ? rcu_is_watching+0x15/0xb0 [ 213.303724][ T31] ? lock_release+0x4b/0x3e0 [ 213.308349][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 213.314243][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 213.320626][ T31] schedule+0x165/0x360 [ 213.324800][ T31] schedule_preempt_disabled+0x13/0x30 [ 213.330312][ T31] __mutex_lock+0x7e6/0x1350 [ 213.334910][ T31] ? rcu_is_watching+0x15/0xb0 [ 213.339746][ T31] ? __mutex_lock+0x5bb/0x1350 [ 213.344519][ T31] ? rfkill_register+0x37/0x8e0 [ 213.349703][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 213.354737][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 213.359714][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 213.364997][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 213.370657][ T31] rfkill_register+0x37/0x8e0 [ 213.375335][ T31] wiphy_register+0x214c/0x28d0 [ 213.380220][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 213.385418][ T31] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 213.390538][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 213.396600][ T31] ieee80211_register_hw+0x3425/0x4080 [ 213.402097][ T31] ? ieee80211_register_hw+0x1471/0x4080 [ 213.407730][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 213.413554][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 213.419910][ T31] ? __hrtimer_setup+0x187/0x210 [ 213.424829][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 213.430835][ T31] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 213.436567][ T31] ? rcu_is_watching+0x15/0xb0 [ 213.441501][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 213.447563][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 213.453413][ T31] ? __sock_sendmsg+0x21c/0x270 [ 213.458325][ T31] ? __sys_sendto+0x3bd/0x520 [ 213.463019][ T31] hwsim_new_radio_nl+0xea4/0x1b10 [ 213.468137][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 213.473900][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 213.479481][ T31] ? __nla_parse+0x40/0x60 [ 213.483899][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 213.490240][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 213.495783][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 213.501876][ T31] ? bpf_lsm_capable+0x9/0x20 [ 213.506552][ T31] ? security_capable+0x7e/0x2e0 [ 213.511759][ T31] genl_rcv_msg+0x60e/0x790 [ 213.516282][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.521497][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 213.527054][ T31] ? __asan_memcpy+0x40/0x70 [ 213.531706][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 213.537103][ T31] ? __skb_clone+0x63/0x7a0 [ 213.541689][ T31] netlink_rcv_skb+0x208/0x470 [ 213.546457][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.551501][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 213.556987][ T31] ? lock_release+0x4b/0x3e0 [ 213.561629][ T31] ? down_read+0x1ad/0x2e0 [ 213.566044][ T31] genl_rcv+0x28/0x40 [ 213.570049][ T31] netlink_unicast+0x82c/0x9e0 [ 213.574814][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 213.580142][ T31] ? netlink_sendmsg+0x642/0xb30 [ 213.585086][ T31] ? skb_put+0x11b/0x210 [ 213.589367][ T31] netlink_sendmsg+0x805/0xb30 [ 213.594136][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.599446][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 213.604380][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 213.609678][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.614962][ T31] __sock_sendmsg+0x21c/0x270 [ 213.619671][ T31] __sys_sendto+0x3bd/0x520 [ 213.624181][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 213.629236][ T31] ? fput_close_sync+0x119/0x200 [ 213.634173][ T31] ? rcu_is_watching+0x15/0xb0 [ 213.638988][ T31] __x64_sys_sendto+0xde/0x100 [ 213.643755][ T31] do_syscall_64+0xfa/0x3b0 [ 213.648284][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.654343][ T31] ? clear_bhb_loop+0x60/0xb0 [ 213.659384][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.665281][ T31] RIP: 0033:0x7fd279790a7c [ 213.669820][ T31] RSP: 002b:00007ffca1a7b280 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 213.678494][ T31] RAX: ffffffffffffffda RBX: 00007fd27a4e4620 RCX: 00007fd279790a7c [ 213.686539][ T31] RDX: 0000000000000024 RSI: 00007fd27a4e4670 RDI: 0000000000000003 [ 213.694562][ T31] RBP: 0000000000000000 R08: 00007ffca1a7b2d4 R09: 000000000000000c [ 213.702608][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 213.710620][ T31] R13: 0000000000000000 R14: 00007fd27a4e4670 R15: 0000000000000000 [ 213.718636][ T31] [ 213.721701][ T31] INFO: task kworker/0:6:5967 blocked for more than 144 seconds. [ 213.729459][ T31] Not tainted syzkaller #0 [ 213.734392][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 213.743099][ T31] task:kworker/0:6 state:D stack:26728 pid:5967 tgid:5967 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 213.755130][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 213.762119][ T31] Call Trace: [ 213.765410][ T31] [ 213.768373][ T31] __schedule+0x1798/0x4cc0 [ 213.772879][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 213.778287][ T31] ? __pfx___schedule+0x10/0x10 [ 213.783138][ T31] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 213.788708][ T31] ? lock_release+0x4b/0x3e0 [ 213.793312][ T31] ? rcu_is_watching+0x15/0xb0 [ 213.798074][ T31] schedule+0x165/0x360 [ 213.802277][ T31] schedule_preempt_disabled+0x13/0x30 [ 213.807741][ T31] __mutex_lock+0x7e6/0x1350 [ 213.812406][ T31] ? __mutex_lock+0x5bb/0x1350 [ 213.817174][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 213.823449][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 213.828554][ T31] ? lock_acquire+0x5f/0x360 [ 213.833146][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 213.838915][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 213.844995][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 213.850749][ T31] process_scheduled_works+0xae1/0x17b0 [ 213.856294][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 213.862595][ T31] worker_thread+0x8a0/0xda0 [ 213.867191][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 213.873542][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 213.879475][ T31] ? __kthread_parkme+0x7b/0x200 [ 213.884408][ T31] kthread+0x70e/0x8a0 [ 213.888493][ T31] ? __pfx_worker_thread+0x10/0x10 [ 213.893595][ T31] ? __pfx_kthread+0x10/0x10 [ 213.898223][ T31] ? rcu_is_watching+0x15/0xb0 [ 213.902981][ T31] ? __pfx_kthread+0x10/0x10 [ 213.907556][ T31] ret_from_fork+0x3f9/0x770 [ 213.912268][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 213.917379][ T31] ? __switch_to_asm+0x39/0x70 [ 213.922259][ T31] ? __switch_to_asm+0x33/0x70 [ 213.927062][ T31] ? __pfx_kthread+0x10/0x10 [ 213.931682][ T31] ret_from_fork_asm+0x1a/0x30 [ 213.936447][ T31] [ 213.939496][ T31] INFO: task syz.2.3:5974 blocked for more than 144 seconds. [ 213.946848][ T31] Not tainted syzkaller #0 [ 213.952989][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 213.961684][ T31] task:syz.2.3 state:D stack:25224 pid:5974 tgid:5974 ppid:5866 task_flags:0x400040 flags:0x00004004 [ 213.973992][ T31] Call Trace: [ 213.977275][ T31] [ 213.980236][ T31] __schedule+0x1798/0x4cc0 [ 213.984744][ T31] ? __fput+0x44c/0xa70 [ 213.988922][ T31] ? rcu_is_watching+0x15/0xb0 [ 213.993702][ T31] ? kernfs_should_drain_open_files+0x20/0x2d0 [ 213.999905][ T31] ? __pfx___schedule+0x10/0x10 [ 214.004761][ T31] ? schedule+0x91/0x360 [ 214.009031][ T31] ? rcu_is_watching+0x15/0xb0 [ 214.013810][ T31] ? lock_release+0x4b/0x3e0 [ 214.018453][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 214.024352][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 214.030722][ T31] schedule+0x165/0x360 [ 214.034877][ T31] schedule_preempt_disabled+0x13/0x30 [ 214.040359][ T31] __mutex_lock+0x7e6/0x1350 [ 214.044949][ T31] ? __mutex_lock+0x5bb/0x1350 [ 214.049765][ T31] ? rfkill_unregister+0xc8/0x220 [ 214.054790][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 214.059837][ T31] ? __pfx_device_del+0x10/0x10 [ 214.064687][ T31] rfkill_unregister+0xc8/0x220 [ 214.069810][ T31] nfc_unregister_device+0x96/0x2a0 [ 214.075017][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 214.080757][ T31] virtual_ncidev_close+0x56/0x90 [ 214.085779][ T31] __fput+0x44c/0xa70 [ 214.089815][ T31] task_work_run+0x1d4/0x260 [ 214.094413][ T31] ? __pfx_task_work_run+0x10/0x10 [ 214.099573][ T31] ? __pfx___se_sys_close_range+0x10/0x10 [ 214.105293][ T31] ? rcu_is_watching+0x15/0xb0 [ 214.110080][ T31] ? rcu_is_watching+0x15/0xb0 [ 214.114835][ T31] exit_to_user_mode_loop+0xec/0x110 [ 214.120158][ T31] do_syscall_64+0x2bd/0x3b0 [ 214.124750][ T31] ? rcu_is_watching+0x15/0xb0 [ 214.129533][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.135593][ T31] ? clear_bhb_loop+0x60/0xb0 [ 214.140318][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.146209][ T31] RIP: 0033:0x7f1f94d8ebe9 [ 214.150718][ T31] RSP: 002b:00007fff2d816038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 214.159323][ T31] RAX: 0000000000000000 RBX: 00007f1f94fb7da0 RCX: 00007f1f94d8ebe9 [ 214.167313][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 214.175773][ T31] RBP: 00007f1f94fb7da0 R08: 0000000000000140 R09: 000000122d81632f [ 214.183826][ T31] R10: 00007f1f94fb7cb0 R11: 0000000000000246 R12: 000000000000dfc6 [ 214.191862][ T31] R13: 00007f1f94fb6180 R14: ffffffffffffffff R15: 00007fff2d816150 [ 214.199894][ T31] [ 214.202924][ T31] INFO: task syz.1.10:5991 blocked for more than 144 seconds. [ 214.210541][ T31] Not tainted syzkaller #0 [ 214.215473][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 214.224159][ T31] task:syz.1.10 state:D stack:25384 pid:5991 tgid:5990 ppid:5864 task_flags:0x400140 flags:0x00004006 [ 214.236102][ T31] Call Trace: [ 214.239542][ T31] [ 214.242475][ T31] __schedule+0x1798/0x4cc0 [ 214.246988][ T31] ? stack_trace_save+0x9c/0xe0 [ 214.251926][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 214.257298][ T31] ? __pfx___schedule+0x10/0x10 [ 214.262192][ T31] ? schedule+0x91/0x360 [ 214.266435][ T31] ? rcu_is_watching+0x15/0xb0 [ 214.271392][ T31] ? lock_release+0x4b/0x3e0 [ 214.275993][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 214.281908][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 214.288259][ T31] schedule+0x165/0x360 [ 214.292415][ T31] schedule_preempt_disabled+0x13/0x30 [ 214.297854][ T31] __mutex_lock+0x7e6/0x1350 [ 214.302895][ T31] ? __mutex_lock+0x5bb/0x1350 [ 214.307661][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 214.313033][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 214.318131][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 214.324058][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 214.330491][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 214.336241][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 214.341403][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 214.347133][ T31] rfkill_set_block+0x1cf/0x440 [ 214.352154][ T31] rfkill_fop_write+0x44b/0x570 [ 214.357025][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 214.362474][ T31] ? security_file_permission+0x50/0x290 [ 214.368112][ T31] ? rw_verify_area+0x255/0x4d0 [ 214.373214][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 214.378624][ T31] vfs_write+0x27b/0xb30 [ 214.382854][ T31] ? __pfx_vfs_write+0x10/0x10 [ 214.387599][ T31] ? lock_release+0x4b/0x3e0 [ 214.392237][ T31] ? __fget_files+0x2a/0x420 [ 214.396830][ T31] ? __fget_files+0x3a0/0x420 [ 214.401536][ T31] ? __fget_files+0x2a/0x420 [ 214.406127][ T31] ksys_write+0x145/0x250 [ 214.410464][ T31] ? __pfx_ksys_write+0x10/0x10 [ 214.415310][ T31] ? rcu_is_watching+0x15/0xb0 [ 214.420086][ T31] ? rcu_is_watching+0x15/0xb0 [ 214.424843][ T31] do_syscall_64+0xfa/0x3b0 [ 214.429364][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.435424][ T31] ? clear_bhb_loop+0x60/0xb0 [ 214.440122][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.446015][ T31] RIP: 0033:0x7f59fc78ebe9 [ 214.450440][ T31] RSP: 002b:00007f59fd69c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 214.458989][ T31] RAX: ffffffffffffffda RBX: 00007f59fc9b5fa0 RCX: 00007f59fc78ebe9 [ 214.466956][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 214.475042][ T31] RBP: 00007f59fc811e19 R08: 0000000000000000 R09: 0000000000000000 [ 214.483349][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.491359][ T31] R13: 00007f59fc9b6038 R14: 00007f59fc9b5fa0 R15: 00007ffee02035c8 [ 214.499357][ T31] [ 214.502387][ T31] INFO: task syz.0.1:5998 blocked for more than 144 seconds. [ 214.509771][ T31] Not tainted syzkaller #0 [ 214.514693][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 214.523373][ T31] task:syz.0.1 state:D stack:24168 pid:5998 tgid:5997 ppid:5855 task_flags:0x400140 flags:0x00004004 [ 214.535303][ T31] Call Trace: [ 214.538602][ T31] [ 214.541526][ T31] __schedule+0x1798/0x4cc0 [ 214.546015][ T31] ? __pfx___schedule+0x10/0x10 [ 214.550905][ T31] ? schedule+0x91/0x360 [ 214.555147][ T31] ? rcu_is_watching+0x15/0xb0 [ 214.559953][ T31] ? lock_release+0x4b/0x3e0 [ 214.564544][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 214.570550][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 214.576884][ T31] schedule+0x165/0x360 [ 214.581248][ T31] schedule_preempt_disabled+0x13/0x30 [ 214.586714][ T31] __mutex_lock+0x7e6/0x1350 [ 214.591320][ T31] ? __mutex_lock+0x5bb/0x1350 [ 214.596085][ T31] ? genl_rcv_msg+0x10d/0x790 [ 214.600770][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 214.605793][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 214.610930][ T31] ? radix_tree_lookup+0x240/0x290 [ 214.616051][ T31] genl_rcv_msg+0x10d/0x790 [ 214.620627][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.625650][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 214.630707][ T31] ? __asan_memcpy+0x40/0x70 [ 214.635293][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 214.640675][ T31] ? __skb_clone+0x63/0x7a0 [ 214.645175][ T31] netlink_rcv_skb+0x208/0x470 [ 214.649962][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.655015][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.660323][ T31] ? lock_release+0x4b/0x3e0 [ 214.664915][ T31] ? down_read+0x1ad/0x2e0 [ 214.669348][ T31] genl_rcv+0x28/0x40 [ 214.673324][ T31] netlink_unicast+0x82c/0x9e0 [ 214.678072][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 214.683598][ T31] ? netlink_sendmsg+0x642/0xb30 [ 214.689503][ T31] ? skb_put+0x11b/0x210 [ 214.693750][ T31] netlink_sendmsg+0x805/0xb30 [ 214.698558][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.703842][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 214.709091][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 214.714453][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.719781][ T31] __sock_sendmsg+0x21c/0x270 [ 214.724474][ T31] __sys_sendto+0x3bd/0x520 [ 214.728999][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 214.734042][ T31] ? count_memcg_event_mm+0x21/0x260 [ 214.739371][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 214.744662][ T31] __x64_sys_sendto+0xde/0x100 [ 214.749438][ T31] do_syscall_64+0xfa/0x3b0 [ 214.753941][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.760025][ T31] ? clear_bhb_loop+0x60/0xb0 [ 214.764698][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.770599][ T31] RIP: 0033:0x7fb725990a7c [ 214.775011][ T31] RSP: 002b:00007fb726844ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 214.783622][ T31] RAX: ffffffffffffffda RBX: 00007fb726844fc0 RCX: 00007fb725990a7c [ 214.791967][ T31] RDX: 0000000000000024 RSI: 00007fb726845010 RDI: 0000000000000007 [ 214.800001][ T31] RBP: 0000000000000000 R08: 00007fb726844f14 R09: 000000000000000c [ 214.807966][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 214.815957][ T31] R13: 00007fb726844f68 R14: 00007fb726845010 R15: 0000000000000000 [ 214.823954][ T31] [ 214.826972][ T31] INFO: lockdep is turned off. [ 214.832121][ T31] NMI backtrace for cpu 1 [ 214.832135][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 214.832146][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.832151][ T31] Call Trace: [ 214.832155][ T31] [ 214.832159][ T31] dump_stack_lvl+0x189/0x250 [ 214.832175][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.832186][ T31] ? __pfx__printk+0x10/0x10 [ 214.832200][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 214.832213][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 214.832223][ T31] ? __pfx__printk+0x10/0x10 [ 214.832236][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 214.832250][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 214.832261][ T31] watchdog+0xf93/0xfe0 [ 214.832275][ T31] ? watchdog+0x1de/0xfe0 [ 214.832288][ T31] kthread+0x70e/0x8a0 [ 214.832300][ T31] ? __pfx_watchdog+0x10/0x10 [ 214.832311][ T31] ? __pfx_kthread+0x10/0x10 [ 214.832322][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 214.832333][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.832345][ T31] ? __pfx_kthread+0x10/0x10 [ 214.832356][ T31] ret_from_fork+0x3f9/0x770 [ 214.832366][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 214.832376][ T31] ? __switch_to_asm+0x39/0x70 [ 214.832387][ T31] ? __switch_to_asm+0x33/0x70 [ 214.832397][ T31] ? __pfx_kthread+0x10/0x10 [ 214.832408][ T31] ret_from_fork_asm+0x1a/0x30 [ 214.832422][ T31] [ 214.832425][ T31] Sending NMI from CPU 1 to CPUs 0: [ 214.977004][ C0] NMI backtrace for cpu 0 [ 214.977020][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 214.977037][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.977046][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 214.977072][ C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 96 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 214.977084][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 214.977099][ C0] RAX: 386de92e03c5a500 RBX: ffffffff819683b8 RCX: 386de92e03c5a500 [ 214.977111][ C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8 [ 214.977122][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 214.977133][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38430 [ 214.977153][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 214.977163][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 214.977176][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.977187][ C0] CR2: 00007f2e77d9c000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 214.977201][ C0] Call Trace: [ 214.977207][ C0] [ 214.977213][ C0] default_idle+0x13/0x20 [ 214.977228][ C0] default_idle_call+0x74/0xb0 [ 214.977242][ C0] do_idle+0x1e8/0x510 [ 214.977259][ C0] ? __pfx_do_idle+0x10/0x10 [ 214.977272][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 214.977292][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 214.977310][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 214.977332][ C0] cpu_startup_entry+0x44/0x60 [ 214.977346][ C0] rest_init+0x2de/0x300 [ 214.977361][ C0] start_kernel+0x3a9/0x410 [ 214.977380][ C0] x86_64_start_reservations+0x24/0x30 [ 214.977400][ C0] x86_64_start_kernel+0x143/0x1c0 [ 214.977420][ C0] common_startup_64+0x13e/0x147 [ 214.977445][ C0] [ 215.172715][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 215.179586][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 215.188699][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 215.198732][ T31] Call Trace: [ 215.202017][ T31] [ 215.204927][ T31] dump_stack_lvl+0x99/0x250 [ 215.209496][ T31] ? __asan_memcpy+0x40/0x70 [ 215.214062][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.219244][ T31] ? __pfx__printk+0x10/0x10 [ 215.223838][ T31] vpanic+0x281/0x750 [ 215.227827][ T31] ? rcu_is_watching+0x15/0xb0 [ 215.232568][ T31] ? __pfx_vpanic+0x10/0x10 [ 215.237046][ T31] ? preempt_schedule_irq+0xde/0x150 [ 215.242307][ T31] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 215.248004][ T31] panic+0xb9/0xc0 [ 215.251699][ T31] ? __pfx_panic+0x10/0x10 [ 215.256093][ T31] ? __pfx_panic+0x10/0x10 [ 215.260485][ T31] watchdog+0xfd2/0xfe0 [ 215.264618][ T31] ? watchdog+0x1de/0xfe0 [ 215.268932][ T31] kthread+0x70e/0x8a0 [ 215.272997][ T31] ? __pfx_watchdog+0x10/0x10 [ 215.277651][ T31] ? __pfx_kthread+0x10/0x10 [ 215.282217][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.287392][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.292567][ T31] ? __pfx_kthread+0x10/0x10 [ 215.297136][ T31] ret_from_fork+0x3f9/0x770 [ 215.301715][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 215.306817][ T31] ? __switch_to_asm+0x39/0x70 [ 215.311566][ T31] ? __switch_to_asm+0x33/0x70 [ 215.316309][ T31] ? __pfx_kthread+0x10/0x10 [ 215.320886][ T31] ret_from_fork_asm+0x1a/0x30 [ 215.325638][ T31] [ 215.328890][ T31] Kernel Offset: disabled [ 215.333195][ T31] Rebooting in 86400 seconds..