last executing test programs: 4.039198233s ago: executing program 1 (id=114): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 1.988480289s ago: executing program 1 (id=124): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r2, 0x5, 0x8, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7) 1.860174801s ago: executing program 1 (id=127): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426c870000000df250200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="610302e50512c71dcc80b3c4f576ebda506287a4ebf7e50102176e01"], 0x1c) 1.787881662s ago: executing program 1 (id=132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000640)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0xfac, 0x0, @gue={{0x1, 0x0, 0x3, 0xe4, 0x0, @void}, "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"}}}}, 0xfce) 1.576365875s ago: executing program 3 (id=134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x20008080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdb62251c00000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) 1.575853791s ago: executing program 2 (id=135): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r2, 0x5, 0x8, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7) 1.575582618s ago: executing program 3 (id=136): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000003c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x8, @f={0x80, 0x3, 0x5, 0x2, 0x8, 0x2, 0x8, {0x4, 0x28, "e3969d3ed97fd220a2db0e2d5b5545935cbacb55f94fdb6eccec95f4c7a84fbbb103473c2e8272f9"}, 0xb9, 0x7f, 0x6, 0x8, 0x28, "9d964d91a50c14f5acf7057ba5da7211f50af2d6f41f7dc692debc174dc30ce19d01fbc7e28e5ba4"}}, 0x61) 1.517143999s ago: executing program 1 (id=137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x11}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03", 0x1}], 0x1}, 0x4) 1.430551437s ago: executing program 2 (id=138): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r2, 0x5, 0x8, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7) 1.430359349s ago: executing program 3 (id=139): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xba, &(0x7f0000002600)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "7f36c525"}]}, @cipso={0x86, 0x6f, 0x0, [{0x5, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x12, "f8766c7f192425181e3b000000800000"}, {0x6, 0x5, "cfa11c"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0xf, "73bc2300ad9d19a30000000000"}, {0x0, 0x6, "c8f46976"}]}]}}}}}}}, 0x0) 1.429487488s ago: executing program 2 (id=140): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 1.340302444s ago: executing program 3 (id=141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x8, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 840.014706ms ago: executing program 2 (id=143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x11}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03", 0x5dc}], 0x1}, 0x4) 786.949656ms ago: executing program 3 (id=145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000640)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0xfac, 0x0, @gue={{0x1, 0x0, 0x3, 0xe4, 0x0, @void}, "238e0c5f2dc26dd30ea88dfaac3df5fccdca524421ba58859cc962952d81ec59917086c22f91c0061dca507ba1eba2eaf327a76823fd739c93079345a53e4fcd0bba31e3ee971bfaba5af3b76fcb2a1794cd7b671057fbd9b5f14c16233e5d101136308390a795b152104f85fc6ed9d1a5f507f31ac86bc2c1995fb03944f9431b19921b95ea2260ca91a4d02293af6157eae53afb975c5e869287b14f2abcf639ca7715594476beefe9884bc8a97121ad042c4ee25cda533104deae2ef4f15f26fc53f7b8f3bbf7a0b3854353866ece11af0b4099ec68d1df8c33d0db7d42d7b01177ea617ab38745c979e19d1ce2de4b05325aaf74ffad910257509b37d5f74da1bd1971307ca05668df17c62bc62cd057082582d463c83232260c082345328a0d363d2a67517d8b6450a534c3de7bfd0ae4140be99e4e41bcf1069097b9f28f25d2d76984f14021637b8c381fd3dd778d8da5d6f738c8292fa27704237521f3fe90f4298110b57c1f5a988b6ef9ed8f3e3bab480ea6487814ca9716e8846f4edcdd5d5ab09963c3971f0c34d89f5bad07f3f2eb0b7c04fabd1f81c1de1edae9a413e3db95263893e4cd97838a28998bfe0ec9f5d76a699499c95c4df549b4363179dae2cb13d3b12afb97c362e4608cb0548d6b7f000a2a4bf47cee391c433336bac450d68295f9f650ac684493c9271d47d1c5543e554a56c9238fc04810249daca969d15ead416c35f3ebb995763a886821400907b36f62626cffbf3d4d2a7c85b585148f122eead2fd2319954733118600214d828fa0a6b253d34d16279422af9862243dd76d406c6e13d1982fbfcb88435b2c7b83d9b748dedfed1df76c84edbb6743ca4670b6294eb5f92043ec4642b1af8206ad7fdeb4881a78c78a5e15006b3c0914c312c9906b83b9d27897f544005ace4c2d6a57ddc54b83a5ab15deebe28a0705375fed748f4cebf5b2a7640b233bd76fdc2ae0fbf0d6e09a3acfbc819e708b88bd7ae31ec5cb27c6efa93d2594a34e8dd56d11da34dcbca5007a1ecbea778ddfcb9cce1c160f9e9a732e1870b55bad34082780a7a0d7243bcd939e33a1153c132e3fd3a292cc01e1f51551ec8e0643258fb1201b63e8dd19bc738e7f2014fc00a766f5a6b6f36d8e4efc35bc1ea2eee66e9f61bbad7b66f04658abfbe77ad4d4c85819884f70b52b622dc77d5e0c62d1cedac59107a5e9c8e6d07de4fa73d7ccd2ecb9ce0e09a61aee4f74a96f90cb0bfd7896c23172fa2bab5123836c1800ff9111cf83e84bf9f4c595422a0b54db58567f03d020023dab629e69ccae854c0e6e90e6e416e51f611d38a383c1d9c2cf2e67026578b2c20de9b0375834a44c8debfb8579865fd0ce2a780b67c9ad16d300d1447b34ad509614cb879b80453db1516c8d1d0f0c7b1752086d11b7f5f492d988bb4fddf42d78841741fc4c4a81e5c8ecf4182b2b00bdc6cba26729787fa5a7c7082fef8716b618278e2ccf5a1a17d7b9acb7dec5cd3ea56cc71ceaa015062af35b7195ef0fb1c284b6f90df52483e064f00e23f20e2f1864a07cc13cb82a1f1f223d170fb9c65000da71e6306b0f123b0fb97dc03a60036e399e25037a8a3b344f25cdcd47f3446ad42a2f841fdd3ae74a93e54b08425fbcd723a5ba9b8fa038c4235636622189e744da8d3091b3c696eb71e4f29b6c6b2d27ac27da00d0e825d8c4c3030216cda1265eeb04a4083fe490511b72d306fa2ff3e907b6abf90dc9af0d94fe275b2c407976a4d3c2d9e6ca61b0feee80c82e091088f64e926a1ca94a536992b2262c30f3509bbefb2cf1c7fd4a9cc9eae01fe823653724ba5d10a9e7e5ee0cc63a8d834c41d7b4003c1f8be5cefa174e055f564d23cf1de8ef85e894e1939b6aceb8c438b194787fe0a3f90f7180338a83dfdbf56c55ba2a2daa610c90e5482ddbc3b6974292fd4fe769f2c1b40919f1afdba2ec69772955fac1335672a25adaf6d392ee5ab3220422f131db05193b5b95f07926f3cd1d6a8e7d9ca2f70e4c3c4e9b0ab8bf9d798e63e8bac013930b62c44e5065a2e7ef01608d8b28f316cdbb813de912211fffa6d3bda1f3e7ce6a1ef065424b95eeb610a180d6a7c2c3169e7f571db3600108b63c0bdc4c98588df3edf06e6a85cb7f2b1959e99a82b23b99e26797d6be0d435d00fb038d603888f4d05fd0b4b52a5e8d2a93f32d75fd5fd6d4905741570a83b2a55995226e44bedaf0b399ea16efee88010e64061a7c4aad62d1e7f1cd680ccf395c1205a3ee0fb2bcd626d5efa7890a59685e49ed66aeab0e9b21d742b7d7a0f2199e7937bce606f4a7651ec0ba11a3f6ae7122b13c20cf09d66acebbc391412cb46eea35376f987f639aaed8fac8292f154ca270f529ec1d19a77334e8f1a04af26daac6e91d7b54b23b8779fb56a4ae830bf7d8234dd1b2c429c24bd252fe149b9d44a5b4512dbeef768838259989e2080cc7c1b4155e625b3a6d7a190e944a89cb6a8d0dcb58fd3c2f40591a9d975674cfffa2cebaae7cd53549f7b55d33f1b0455b7e744ea805108e43fd980e134526d3c751643b9fc271852e9fb9ce66cd0e244448e8d165d1038440490db57dbf6e09a2b66d6c1906302c108feab1c86ecc70140508fc13dc6ce170e81cfb76ece2a6666f36a035dfedc97671ada2b6fc2165a9e5b7508ecbf7be860f677135b19c0183674382209477f3a7f675bb4ec282943f1dc88a252f5f248d9ed9ab80c614494f7dd0a23e51439b4c42517aa9cc2825be23a380acccf80f13c9ef131f4aabfffe900e17f93f0a4a7e19774b3d0da144c001f115fcad54b1923974284dbf47f210e6008e480051ddd13c5a2abb7b13e312e1fd10aa4edc822d3a97849c11e62bc279d94919f308f4eeded2a901801034e393ae307ffdcd3ad731e6b6bdc17dd838724c30cfe5ef22b063fd3fe1d1e71aba95bb822b0504bd1b1d56ca70e7a4b6e6075e8650bdeeb7e44251c4f2889cbaa1fb44605909759bb1db0e15cb215866f3c741a2df7b7343a07e2b79fc71ef70069ef82a7095afa27ea0cf3bcc49ef4fdba6458e241f223815919319168e46be6fc8261d73d32d620a96e4fdbd5d2789afbb6776edf71651f2f6aaa8e5ddd81aec3d8c825f1477198af3cc5cd4122a721224d14f8f48edd052cba0900638e92536bb76140ba0a4290b382b1a42ec7ec3f6fc21c01ed317236d55cbb555022d32274756990dab9bffb6cb058359d1c7b653080aea2ec4f550b6162c38cf8e7f91f1ac96559dcc2f8f6eea347657848c070d06e080e344268f85aa84e5cb595ec17dedc379efbf5c775ad6fc8721e9ddafdb6faa1ae5873f7237342bea15f9b20e43f3d2b7838dec2e10fee0e91a66579b5d70b6f2dc2e3ebe93663942077b67b3e56815e9a8ef09b740388d3fbf2245b6c16bd997ede21bde42386f3609db6e3497c378aa5f28a36382234710d98597e975dc344024a4003df1f547ac6c89cd3b8eb8b87b525ad987390ef12194c8833e8a22ddc2624cdded8a38968258f577d457ca75601a860674e0b93cd541a23a6d8d7a3d97a883944b1f81f47addc481bee1be8747ef7ef7a4c146014c7c6a4b7caff7ea94ea5147e7420846ae4f82f685daf788b6b627d30919a6294b827a8d7d2200c39094a816ada9e5357284f9c94c09fe1bdc2d38f5b9c8fad3d2a4134c6fa87d7b0b7a409d2db3b500b80235cdf090d87f5568c2096daccfb9c7fbfc2575881d3cecaa8c82db0de3a7e16a2b9b3a2f0ca136f0a96816ef7a1df60384539f253198e5cf9711ba1a3d776f10a63c004c7ded059cf2a036fc9803e01dad92543cf649c9684de087a6d3e83999753f39e5b93d8d49993fb119000b12cec4efc002cf5a97f6c69d79056588ed9384388add824d4e5712ef5c8e5a7463cc4844537b9c589a7f3dbf1c0573d353648760aa35b398b16bd6e59fe2037fb1d7044d307a4835743e06d0ea9b6befe629558538ba3c7a49a8616ad1db0e641ac07af409aaac4617ffa3f725d4ba362f846ca0c4389814cf3039d122e6d4ff785f03bdbf492abf3ab0445b630e93b028d4d24573b6ff1689b7163f54f9b9385a8acaeb20f89ac3ad195e12c083d90788567a8d16221e72dab8d91cf0c5415aff65f633a841108c847a1738eec1745fe8506246d18de9ab87a52b0f6c9017c49958ed55176ff797d38cdb64d76b278218d9d0bcd5480fadcd56547cf18686bd03a0f0119da99bac19bc8858d3185242128e3577d52818b90387007ddeb193a4470fd93af9f5b7193a3173f03195fe907d3e3a7cdc17f347b7c323a141404c84acd8fb71d68669f3bc556b13d79429afeb3aa53fdce832c488ce178e0af98d8d83aeac940f5a98fedc96864ff50a7290bc10384e4cd31f0c609e0518d7df118f77d1bed92d3e7630bd53c485f0a3da4fdc3ce0c19e7ed071aeb9a7e91da90fe02c93204ff46ba19301dafefd825c3f6788dd804fc617815179d5ed682c66ad248a03e4f8af17e6ae0682cf86c5d6fbb4def92f423ca75cedbabd70d001e8954604fc9cd1ee4f08f425c74259c32290cfc7ce25dee5f0ef4c0095964811a724ef7e14ff4644f385fb585ad82f89d42e68272e3b2b40aa4ad19cc3249f484d35494697e2d59d06c0fd889a99ba971c2902b4ed4bd98776e3bcb62cd1aaecca98dead2bd18fb9d360bcaf04a3aa471528861d211834568fc4f73d55951c2dd79f3c7daf2a6542ac43caba4e6b90936f817a2008e6377192a8e656ee85e3dd4f7ed55c04558cc9e92bba8c9d5d211d4bb264f3ff32680ee1d6289b93396367f3228c27e18a103ce7b444b0b58992848998f6098118580931e5ea3c6245d0d991c15a2802d28afa725d99501dcc133de69cdda9f6a3a831482bb6df4053f26d9ad67313e1b7ee8c6766979dff18d3df9598bd1bd7411088ee6691ac3b0797527c5aeb5991ba46d780b39d665fa756cceaaeac45f9a2156863655fb43276c9f5cb2f2ece1d62e46c5137cf4cb4fc1361bcac1e99a9ddb36286b147a3b3aa054aaee1c35aa24363497e0eb7499191a915144db0b87ee7a6d7c8812e1304819531ced22b260e32b6def23cddb3c6ae6834801ab1cbb327ff8e5b654651bbcb49422613c88af943e02d28abe317cadfb778dbdffb14978132a3bc30e37daf3e9f616acf5e3cef7108ef78d4937d06a710f891a30dc7cc2067f96eab3c13c743948b11161ca4b51528b3a12fc280c3b13ada4b227e6b60511e5e197ebe375535a4f24e7614af67cfd0e7a878e909a3c5439547e9b3b0f3a3556d5cd8155045e8367dee75c5513b26367b2981676caa3989f492e3e3c8dae1805e58d12d7253c7d4bc7a0e39af29f2522d4e126ce184b93b9ff17f0d27fd609e8cc93ef18cbd84fdfbf602b11a367bcc036a7bd70fe50d6d27db7ea8918080295439ca0e4cdfdaa2503a03cbc5b7c42c9a5cc4da88eb340b6a5f36f95a6239736028c4d9a1d866f6b56ac96049ad88c4064f59ede1ea7563656c29c7b5d6d3ca5710e56110e974cc8111ba8d26e5263a060479e0e7215a86b48af0ec7f5524c798b46f12e91322d5e897ce21bdf13263133c38668a7f58d7030c8c37248bed87ba5c8886b106a78f8a58217e82c1ed1a088ad40b5c957753"}}}}, 0xfce) 786.874049ms ago: executing program 0 (id=146): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r2, 0x5, 0x8, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7) 659.047807ms ago: executing program 0 (id=147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x20008080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdb62251c00000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) 658.591079ms ago: executing program 0 (id=148): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000003c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x8, @f={0x80, 0x3, 0x5, 0x2, 0x8, 0x2, 0x8, {0x4, 0x28, "e3969d3ed97fd220a2db0e2d5b5545935cbacb55f94fdb6eccec95f4c7a84fbbb103473c2e8272f9"}, 0xb9, 0x7f, 0x6, 0x8, 0x28, "9d964d91a50c14f5acf7057ba5da7211f50af2d6f41f7dc692debc174dc30ce19d01fbc7e28e5ba4"}}, 0x61) 560.138308ms ago: executing program 0 (id=149): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xba, &(0x7f0000002600)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "7f36c525"}]}, @cipso={0x86, 0x70, 0x0, [{0x5, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x12, "f8766c7f192425181e3b000000800000"}, {0x6, 0x6, "cfa11cab"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0xf, "73bc2300ad9d19a30000000000"}, {0x0, 0x6, "c8f46976"}]}]}}}}}}}, 0x0) 559.749795ms ago: executing program 0 (id=150): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 100.183469ms ago: executing program 1 (id=151): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 99.980571ms ago: executing program 3 (id=152): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 99.723003ms ago: executing program 2 (id=153): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426c870000000df250200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="610302e50512c71dcc80b3c4f576ebda506287a4ebf7e50102176e01"], 0x1c) 89.70932ms ago: executing program 0 (id=154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x8, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 0s ago: executing program 2 (id=155): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r2, 0x5, 0x8, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:8735' (ED25519) to the list of known hosts. [ 46.772105][ T40] audit: type=1400 audit(1765566306.049:62): avc: denied { name_bind } for pid=5845 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.817989][ T40] audit: type=1400 audit(1765566306.099:63): avc: denied { execute } for pid=5846 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.827285][ T40] audit: type=1400 audit(1765566306.099:64): avc: denied { execute_no_trans } for pid=5846 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.706985][ T40] audit: type=1400 audit(1765566307.989:65): avc: denied { mounton } for pid=5846 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.716994][ T40] audit: type=1400 audit(1765566307.999:66): avc: denied { mount } for pid=5846 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.718826][ T5846] cgroup: Unknown subsys name 'net' [ 48.855910][ T5846] cgroup: Unknown subsys name 'cpuset' [ 48.861679][ T5846] cgroup: Unknown subsys name 'rlimit' [ 49.060294][ T5903] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.751550][ T5846] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.067632][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 53.067644][ T40] audit: type=1400 audit(1765566312.349:86): avc: denied { execmem } for pid=5924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.217130][ T40] audit: type=1400 audit(1765566312.499:87): avc: denied { create } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.237278][ T40] audit: type=1400 audit(1765566312.499:88): avc: denied { read write } for pid=5928 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.240289][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.250584][ T40] audit: type=1400 audit(1765566312.499:89): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.254390][ T5935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.258666][ T40] audit: type=1400 audit(1765566312.509:90): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="socket:[4978]" dev="sockfs" ino=4978 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.262415][ T5935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.274109][ T5935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.282079][ T5930] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.286609][ T5930] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.290107][ T5936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.293491][ T5930] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.296611][ T5930] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.299617][ T5930] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.300004][ T5940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.303572][ T5930] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.304528][ T5940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.310385][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.312066][ T40] audit: type=1400 audit(1765566312.599:91): avc: denied { read } for pid=5928 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.318004][ T5930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.321889][ T5290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.323677][ T5930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.327153][ T5930] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.329820][ T40] audit: type=1400 audit(1765566312.599:92): avc: denied { open } for pid=5932 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.337134][ T40] audit: type=1400 audit(1765566312.599:93): avc: denied { mounton } for pid=5932 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.339824][ T5290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.348117][ T5290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.588481][ T40] audit: type=1400 audit(1765566312.869:94): avc: denied { module_request } for pid=5932 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.625132][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 53.639602][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 53.726299][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 53.759887][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 53.842663][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.845970][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.848553][ T5932] bridge_slave_0: entered allmulticast mode [ 53.851299][ T5932] bridge_slave_0: entered promiscuous mode [ 53.895819][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.898993][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.902300][ T5928] bridge_slave_0: entered allmulticast mode [ 53.906249][ T5928] bridge_slave_0: entered promiscuous mode [ 53.911666][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.915025][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.918154][ T5928] bridge_slave_1: entered allmulticast mode [ 53.921993][ T5928] bridge_slave_1: entered promiscuous mode [ 53.926567][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.929502][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.932045][ T5932] bridge_slave_1: entered allmulticast mode [ 53.934875][ T5932] bridge_slave_1: entered promiscuous mode [ 54.026866][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.030013][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.033218][ T5937] bridge_slave_0: entered allmulticast mode [ 54.037028][ T5937] bridge_slave_0: entered promiscuous mode [ 54.042954][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.046019][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.049132][ T5941] bridge_slave_0: entered allmulticast mode [ 54.053631][ T5941] bridge_slave_0: entered promiscuous mode [ 54.060580][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.066825][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.070558][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.073822][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.077118][ T5937] bridge_slave_1: entered allmulticast mode [ 54.080921][ T5937] bridge_slave_1: entered promiscuous mode [ 54.084747][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.087840][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.091120][ T5941] bridge_slave_1: entered allmulticast mode [ 54.095132][ T5941] bridge_slave_1: entered promiscuous mode [ 54.100850][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.107138][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.183237][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.187567][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.191726][ T5932] team0: Port device team_slave_0 added [ 54.195208][ T5928] team0: Port device team_slave_0 added [ 54.199497][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.204943][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.209773][ T5932] team0: Port device team_slave_1 added [ 54.213292][ T5928] team0: Port device team_slave_1 added [ 54.262900][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.265602][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.275326][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.297363][ T5937] team0: Port device team_slave_0 added [ 54.300378][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.303133][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.312542][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.318499][ T5941] team0: Port device team_slave_0 added [ 54.320933][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.324029][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.335131][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.342534][ T5937] team0: Port device team_slave_1 added [ 54.361172][ T5941] team0: Port device team_slave_1 added [ 54.364224][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.367202][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.378227][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.400572][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.403803][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.414828][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.427359][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.430378][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.441239][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.471609][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.475006][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.485757][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.506923][ T5928] hsr_slave_0: entered promiscuous mode [ 54.509889][ T5928] hsr_slave_1: entered promiscuous mode [ 54.514837][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.517792][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.528942][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.609570][ T5932] hsr_slave_0: entered promiscuous mode [ 54.613227][ T5932] hsr_slave_1: entered promiscuous mode [ 54.616191][ T5932] debugfs: 'hsr0' already exists in 'hsr' [ 54.618725][ T5932] Cannot create hsr debugfs directory [ 54.633598][ T5937] hsr_slave_0: entered promiscuous mode [ 54.636768][ T5937] hsr_slave_1: entered promiscuous mode [ 54.639690][ T5937] debugfs: 'hsr0' already exists in 'hsr' [ 54.642469][ T5937] Cannot create hsr debugfs directory [ 54.648302][ T5941] hsr_slave_0: entered promiscuous mode [ 54.650669][ T5941] hsr_slave_1: entered promiscuous mode [ 54.652957][ T5941] debugfs: 'hsr0' already exists in 'hsr' [ 54.654850][ T5941] Cannot create hsr debugfs directory [ 55.024970][ T5928] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.033885][ T5928] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.048671][ T5928] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.055947][ T5928] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.100022][ T5937] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.111237][ T5937] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.125991][ T5937] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.141335][ T5937] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.191203][ T5941] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.199632][ T5941] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.206879][ T5941] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.223550][ T5941] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.281421][ T5932] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.292469][ T5932] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.303247][ T5932] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.310278][ T5932] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.326148][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.353945][ T5290] Bluetooth: hci0: command tx timeout [ 55.353952][ T5930] Bluetooth: hci1: command tx timeout [ 55.356157][ T64] Bluetooth: hci2: command tx timeout [ 55.378373][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.385896][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.400929][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.404198][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.432775][ T64] Bluetooth: hci3: command tx timeout [ 55.438061][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.441171][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.455420][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.473054][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.476184][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.496406][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.499551][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.511729][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.556451][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.575201][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.578385][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.590479][ T40] audit: type=1400 audit(1765566314.869:95): avc: denied { sys_module } for pid=5928 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.598579][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.601478][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.612938][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.618550][ T5937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.660994][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.694581][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.697718][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.713957][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.717094][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.752715][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.798161][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.841907][ T5928] veth0_vlan: entered promiscuous mode [ 55.851328][ T5928] veth1_vlan: entered promiscuous mode [ 55.874285][ T5937] veth0_vlan: entered promiscuous mode [ 55.889815][ T5937] veth1_vlan: entered promiscuous mode [ 55.911466][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.916848][ T5928] veth0_macvtap: entered promiscuous mode [ 55.930833][ T5928] veth1_macvtap: entered promiscuous mode [ 55.958649][ T5937] veth0_macvtap: entered promiscuous mode [ 55.964244][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.971578][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.981391][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.985463][ T5937] veth1_macvtap: entered promiscuous mode [ 56.009757][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.021164][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.029396][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.035748][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.041854][ T5941] veth0_vlan: entered promiscuous mode [ 56.044498][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.067099][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.084371][ T5941] veth1_vlan: entered promiscuous mode [ 56.096141][ T90] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.115612][ T90] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.119283][ T90] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.145422][ T90] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.149348][ T5932] veth0_vlan: entered promiscuous mode [ 56.174795][ T5932] veth1_vlan: entered promiscuous mode [ 56.175121][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.181039][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.225635][ T5941] veth0_macvtap: entered promiscuous mode [ 56.230609][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.241919][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.249831][ T5941] veth1_macvtap: entered promiscuous mode [ 56.266218][ T5932] veth0_macvtap: entered promiscuous mode [ 56.273157][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.275679][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.283111][ T5932] veth1_macvtap: entered promiscuous mode [ 56.295676][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.313769][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.326224][ T5928] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.338106][ T1153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.340878][ T1153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.344181][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.348310][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.353323][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.364569][ T1153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.375932][ T1153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.402832][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.426419][ T1153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.431921][ T1153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.449629][ T1153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.463704][ T1153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.509883][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.513639][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.573455][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.576634][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.611556][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.615033][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.665951][ T6034] syzkaller0: entered promiscuous mode [ 56.667798][ T6034] syzkaller0: entered allmulticast mode [ 56.751560][ T6037] Zero length message leads to an empty skb [ 57.432211][ T64] Bluetooth: hci1: command tx timeout [ 57.432652][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.436939][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.442096][ T5930] Bluetooth: hci0: command tx timeout [ 57.443939][ T64] Bluetooth: hci2: command tx timeout [ 57.514484][ T6043] syzkaller0: entered promiscuous mode [ 57.516462][ T6043] syzkaller0: entered allmulticast mode [ 57.522740][ T64] Bluetooth: hci3: command tx timeout [ 59.247302][ T6087] syzkaller0: entered promiscuous mode [ 59.249139][ T6087] syzkaller0: entered allmulticast mode [ 59.521895][ T64] Bluetooth: hci2: command tx timeout [ 59.521966][ T5930] Bluetooth: hci0: command tx timeout [ 59.523688][ T5290] Bluetooth: hci1: command tx timeout [ 59.591985][ T5930] Bluetooth: hci3: command tx timeout [ 60.174541][ T6115] syz.3.25 uses obsolete (PF_INET,SOCK_PACKET) [ 60.181650][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 60.181664][ T40] audit: type=1400 audit(1765566319.459:122): avc: denied { ioctl } for pid=6114 comm="syz.3.25" path="socket:[8005]" dev="sockfs" ino=8005 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.435812][ T6143] netlink: 64 bytes leftover after parsing attributes in process `syz.2.33'. [ 60.444974][ T40] audit: type=1400 audit(1765566319.729:123): avc: denied { name_bind } for pid=6142 comm="syz.2.33" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 61.200787][ T6172] netlink: 64 bytes leftover after parsing attributes in process `syz.3.43'. [ 61.208374][ T6170] syzkaller0: entered promiscuous mode [ 61.210174][ T6170] syzkaller0: entered allmulticast mode [ 61.593302][ T5930] Bluetooth: hci0: command tx timeout [ 61.593343][ T5290] Bluetooth: hci1: command tx timeout [ 61.596009][ T64] Bluetooth: hci2: command tx timeout [ 61.681921][ T64] Bluetooth: hci3: command tx timeout [ 61.993668][ T40] audit: type=1400 audit(1765566321.279:124): avc: denied { create } for pid=6207 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 62.007530][ T40] audit: type=1400 audit(1765566321.289:125): avc: denied { setopt } for pid=6207 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 62.016329][ T40] audit: type=1400 audit(1765566321.289:126): avc: denied { listen } for pid=6207 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 62.141946][ T6212] netlink: 64 bytes leftover after parsing attributes in process `syz.2.55'. [ 62.244123][ T6218] syzkaller0: entered promiscuous mode [ 62.246143][ T6218] syzkaller0: entered allmulticast mode [ 62.428084][ T6237] netlink: 64 bytes leftover after parsing attributes in process `syz.2.64'. [ 62.604665][ T6258] syzkaller0: entered promiscuous mode [ 62.606567][ T6258] syzkaller0: entered allmulticast mode [ 62.886234][ T6264] syzkaller0: entered promiscuous mode [ 62.889241][ T6264] syzkaller0: entered allmulticast mode [ 63.525407][ T6291] netlink: 64 bytes leftover after parsing attributes in process `syz.1.78'. [ 63.621780][ T6272] syzkaller0: entered promiscuous mode [ 63.624466][ T6272] syzkaller0: entered allmulticast mode [ 63.659523][ T6300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.80'. [ 64.177345][ T6295] syzkaller0: entered promiscuous mode [ 64.179239][ T6295] syzkaller0: entered allmulticast mode [ 65.145886][ T6339] netlink: 64 bytes leftover after parsing attributes in process `syz.0.90'. [ 65.152302][ T6339] syzkaller1: entered promiscuous mode [ 65.153815][ T40] audit: type=1400 audit(1765566324.439:127): avc: denied { ioctl } for pid=6337 comm="syz.0.90" path="socket:[8857]" dev="sockfs" ino=8857 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.154093][ T6339] syzkaller1: entered allmulticast mode [ 65.169075][ T6340] tipc: Started in network mode [ 65.171534][ T6340] tipc: Node identity da9dfd2b753b, cluster identity 4711 [ 65.174364][ T6340] tipc: Enabled bearer , priority 0 [ 65.195737][ T6341] syzkaller0: entered promiscuous mode [ 65.197625][ T6341] syzkaller0: entered allmulticast mode [ 65.203535][ T6340] syzkaller0: entered promiscuous mode [ 65.206214][ T6340] syzkaller0: entered allmulticast mode [ 65.767052][ T6348] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 65.774036][ T6354] tipc: Resetting bearer [ 65.792221][ T6359] syzkaller0: entered promiscuous mode [ 65.794082][ T6359] syzkaller0: entered allmulticast mode [ 65.796760][ T6338] tipc: Resetting bearer [ 65.803832][ T6338] tipc: Disabling bearer [ 66.451969][ T6399] netlink: 64 bytes leftover after parsing attributes in process `syz.0.102'. [ 66.632670][ T6405] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.023976][ T6398] syzkaller1: entered promiscuous mode [ 67.026523][ T6398] syzkaller1: entered allmulticast mode [ 67.070177][ T6409] syzkaller0: entered promiscuous mode [ 67.072753][ T6409] syzkaller0: entered allmulticast mode [ 67.759865][ T6448] syzkaller0: entered promiscuous mode [ 67.765946][ T6448] syzkaller0: entered allmulticast mode [ 68.355408][ T6495] netlink: 64 bytes leftover after parsing attributes in process `syz.3.119'. [ 68.543761][ T6479] syzkaller0: entered promiscuous mode [ 68.546234][ T6479] syzkaller0: entered allmulticast mode [ 69.198837][ T6496] syzkaller1: entered promiscuous mode [ 69.200671][ T6496] syzkaller1: entered allmulticast mode [ 70.078837][ T6546] tipc: Started in network mode [ 70.080653][ T6546] tipc: Node identity b691150d682e, cluster identity 4711 [ 70.083448][ T6546] tipc: Enabled bearer , priority 0 [ 70.086253][ T6546] syzkaller0: entered promiscuous mode [ 70.088162][ T6546] syzkaller0: entered allmulticast mode [ 70.094699][ T6546] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 70.105215][ T6546] tipc: Resetting bearer [ 70.109894][ T6545] tipc: Resetting bearer [ 70.116970][ T6545] tipc: Disabling bearer [ 70.129088][ T6548] syzkaller1: entered promiscuous mode [ 70.131489][ T6548] syzkaller1: entered allmulticast mode [ 70.955459][ T6591] syzkaller0: entered promiscuous mode [ 70.957784][ T6591] syzkaller0: entered allmulticast mode [ 71.479901][ T40] audit: type=1400 audit(1765566330.759:128): avc: denied { prog_load } for pid=6638 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.487530][ T40] audit: type=1400 audit(1765566330.759:129): avc: denied { perfmon } for pid=6638 comm="syz.0.150" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.497185][ T40] audit: type=1400 audit(1765566330.759:130): avc: denied { prog_run } for pid=6638 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.667560][ T6620] syzkaller1: entered promiscuous mode [ 71.669822][ T6620] syzkaller1: entered allmulticast mode [ 71.931160][ T6661] ------------[ cut here ]------------ [ 71.931558][ T6661] [ 71.931562][ T6661] ====================================================== [ 71.931566][ T6661] WARNING: possible circular locking dependency detected [ 71.931570][ T6661] syzkaller #0 Not tainted [ 71.931575][ T6661] ------------------------------------------------------ [ 71.931578][ T6661] syz.2.155/6661 is trying to acquire lock: [ 71.931583][ T6661] ffffffff8e2d6ba0 (console_owner){....}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 71.931615][ T6661] [ 71.931615][ T6661] but task is already holding lock: [ 71.931618][ T6661] ffff88801b4a8018 (&pool->lock){-.-.}-{2:2}, at: destroy_workqueue+0x1e2/0xab0 [ 71.931639][ T6661] [ 71.931639][ T6661] which lock already depends on the new lock. [ 71.931639][ T6661] [ 71.931642][ T6661] [ 71.931642][ T6661] the existing dependency chain (in reverse order) is: [ 71.931645][ T6661] [ 71.931645][ T6661] -> #3 (&pool->lock){-.-.}-{2:2}: [ 71.931657][ T6661] _raw_spin_lock+0x2e/0x40 [ 71.931672][ T6661] __queue_work+0x26b/0x10e0 [ 71.931684][ T6661] queue_work_on+0x15f/0x1f0 [ 71.931696][ T6661] rpm_suspend+0xe8f/0x11b0 [ 71.931709][ T6661] rpm_idle+0x5dc/0x760 [ 71.931720][ T6661] __pm_runtime_idle+0xba/0x1a0 [ 71.931733][ T6661] __device_attach+0x37e/0x4e0 [ 71.931746][ T6661] device_initial_probe+0xaa/0xc0 [ 71.931758][ T6661] bus_probe_device+0x64/0x150 [ 71.931769][ T6661] device_add+0x116e/0x1980 [ 71.931783][ T6661] serial_base_port_add+0x227/0x2b0 [ 71.931808][ T6661] serial_core_register_port+0x13c/0x25d0 [ 71.931818][ T6661] serial8250_register_8250_port+0x155a/0x2380 [ 71.931831][ T6661] serial_pnp_probe+0x431/0x930 [ 71.931843][ T6661] pnp_device_probe+0x2a8/0x4d0 [ 71.931853][ T6661] really_probe+0x241/0xb20 [ 71.931865][ T6661] __driver_probe_device+0x1de/0x470 [ 71.931877][ T6661] driver_probe_device+0x4c/0x1b0 [ 71.931890][ T6661] __driver_attach+0x283/0x5e0 [ 71.931902][ T6661] bus_for_each_dev+0x13e/0x1d0 [ 71.931911][ T6661] bus_add_driver+0x30f/0x6c0 [ 71.931921][ T6661] driver_register+0x15c/0x4b0 [ 71.931934][ T6661] serial8250_init+0xca/0x1e0 [ 71.931948][ T6661] do_one_initcall+0x123/0x680 [ 71.931962][ T6661] kernel_init_freeable+0x5c8/0x920 [ 71.931973][ T6661] kernel_init+0x1c/0x2b0 [ 71.931985][ T6661] ret_from_fork+0x983/0xb10 [ 71.931997][ T6661] ret_from_fork_asm+0x1a/0x30 [ 71.932010][ T6661] [ 71.932010][ T6661] -> #2 (&dev->power.lock){-...}-{3:3}: [ 71.932024][ T6661] _raw_spin_lock_irqsave+0x3a/0x60 [ 71.932038][ T6661] __pm_runtime_resume+0xa9/0x170 [ 71.932051][ T6661] __uart_start+0x1b0/0x500 [ 71.932063][ T6661] uart_write+0x218/0xb30 [ 71.932071][ T6661] n_tty_write+0x434/0x1280 [ 71.932082][ T6661] file_tty_write.constprop.0+0x503/0x9b0 [ 71.932097][ T6661] redirected_tty_write+0xd4/0x120 [ 71.932112][ T6661] vfs_write+0x7d3/0x11d0 [ 71.932124][ T6661] ksys_write+0x12a/0x250 [ 71.932135][ T6661] do_syscall_64+0xcd/0xf80 [ 71.932144][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.932153][ T6661] [ 71.932153][ T6661] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 71.932166][ T6661] _raw_spin_lock_irqsave+0x3a/0x60 [ 71.932180][ T6661] serial8250_console_write+0x181/0x1890 [ 71.932192][ T6661] console_flush_one_record+0x796/0xc60 [ 71.932206][ T6661] console_unlock+0xef/0x240 [ 71.932220][ T6661] vprintk_emit+0x407/0x6b0 [ 71.932227][ T6661] _printk+0xc7/0x100 [ 71.932238][ T6661] register_console+0x823/0x1210 [ 71.932247][ T6661] univ8250_console_init+0x5f/0x90 [ 71.932259][ T6661] console_init+0x152/0x600 [ 71.932270][ T6661] start_kernel+0x298/0x4d0 [ 71.932280][ T6661] x86_64_start_reservations+0x18/0x30 [ 71.932291][ T6661] x86_64_start_kernel+0x130/0x190 [ 71.932301][ T6661] common_startup_64+0x13e/0x148 [ 71.932313][ T6661] [ 71.932313][ T6661] -> #0 (console_owner){....}-{0:0}: [ 71.932325][ T6661] __lock_acquire+0x1669/0x2890 [ 71.932336][ T6661] lock_acquire+0x179/0x330 [ 71.932347][ T6661] console_lock_spinning_enable+0x72/0x80 [ 71.932361][ T6661] console_flush_one_record+0x73f/0xc60 [ 71.932375][ T6661] console_unlock+0xef/0x240 [ 71.932389][ T6661] vprintk_emit+0x407/0x6b0 [ 71.932396][ T6661] _printk+0xc7/0x100 [ 71.932407][ T6661] __report_bug+0x3a6/0x520 [ 71.932425][ T6661] report_bug+0xb2/0x220 [ 71.932438][ T6661] handle_bug+0x127/0x260 [ 71.932448][ T6661] exc_invalid_op+0x17/0x50 [ 71.932459][ T6661] asm_exc_invalid_op+0x1a/0x20 [ 71.932468][ T6661] destroy_workqueue+0x322/0xab0 [ 71.932476][ T6661] nci_unregister_device+0x68/0x300 [ 71.932489][ T6661] virtual_ncidev_close+0x4b/0xa0 [ 71.932499][ T6661] __fput+0x402/0xb70 [ 71.932506][ T6661] task_work_run+0x150/0x240 [ 71.932517][ T6661] exit_to_user_mode_loop+0xfb/0x540 [ 71.932532][ T6661] do_syscall_64+0x4ee/0xf80 [ 71.932540][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.932550][ T6661] [ 71.932550][ T6661] other info that might help us debug this: [ 71.932550][ T6661] [ 71.932552][ T6661] Chain exists of: [ 71.932552][ T6661] console_owner --> &dev->power.lock --> &pool->lock [ 71.932552][ T6661] [ 71.932567][ T6661] Possible unsafe locking scenario: [ 71.932567][ T6661] [ 71.932569][ T6661] CPU0 CPU1 [ 71.932572][ T6661] ---- ---- [ 71.932574][ T6661] lock(&pool->lock); [ 71.932580][ T6661] lock(&dev->power.lock); [ 71.932586][ T6661] lock(&pool->lock); [ 71.932592][ T6661] lock(console_owner); [ 71.932598][ T6661] [ 71.932598][ T6661] *** DEADLOCK *** [ 71.932598][ T6661] [ 71.932600][ T6661] 5 locks held by syz.2.155/6661: [ 71.932606][ T6661] #0: ffffffff8e27f148 (wq_pool_mutex){+.+.}-{4:4}, at: destroy_workqueue+0x178/0xab0 [ 71.932628][ T6661] #1: ffff8880245e4088 (&wq->mutex){+.+.}-{4:4}, at: destroy_workqueue+0x183/0xab0 [ 71.932649][ T6661] #2: ffff88801b4a8018 (&pool->lock){-.-.}-{2:2}, at: destroy_workqueue+0x1e2/0xab0 [ 71.932671][ T6661] #3: ffffffff8e3b6fe0 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 71.932695][ T6661] #4: ffffffff8e3b7058 (console_srcu){....}-{0:0}, at: console_flush_one_record+0x103/0xc60 [ 71.932723][ T6661] [ 71.932723][ T6661] stack backtrace: [ 71.932728][ T6661] CPU: 1 UID: 0 PID: 6661 Comm: syz.2.155 Not tainted syzkaller #0 PREEMPT(full) [ 71.932740][ T6661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.932746][ T6661] Call Trace: [ 71.932750][ T6661] [ 71.932753][ T6661] dump_stack_lvl+0x116/0x1f0 [ 71.932764][ T6661] print_circular_bug+0x275/0x340 [ 71.932775][ T6661] check_noncircular+0x146/0x160 [ 71.932788][ T6661] __lock_acquire+0x1669/0x2890 [ 71.932801][ T6661] lock_acquire+0x179/0x330 [ 71.932813][ T6661] ? console_lock_spinning_enable+0x61/0x80 [ 71.932828][ T6661] ? console_lock_spinning_enable+0x4a/0x80 [ 71.932844][ T6661] console_lock_spinning_enable+0x72/0x80 [ 71.932859][ T6661] ? console_lock_spinning_enable+0x61/0x80 [ 71.932873][ T6661] console_flush_one_record+0x73f/0xc60 [ 71.932890][ T6661] ? __pfx_console_flush_one_record+0x10/0x10 [ 71.932905][ T6661] ? __lock_acquire+0x436/0x2890 [ 71.932918][ T6661] ? is_printk_cpu_sync_owner+0x32/0x40 [ 71.932928][ T6661] console_unlock+0xef/0x240 [ 71.932943][ T6661] ? __pfx_console_unlock+0x10/0x10 [ 71.932958][ T6661] ? do_raw_spin_unlock+0xb0/0x230 [ 71.932972][ T6661] ? _printk+0xc7/0x100 [ 71.932984][ T6661] ? __down_trylock_console_sem+0xb0/0x140 [ 71.932997][ T6661] vprintk_emit+0x407/0x6b0 [ 71.933006][ T6661] ? __pfx_vprintk_emit+0x10/0x10 [ 71.933021][ T6661] ? stack_trace_save+0x8e/0xc0 [ 71.933032][ T6661] ? __pfx_stack_trace_save+0x10/0x10 [ 71.933043][ T6661] ? stack_depot_save_flags+0x29/0x9b0 [ 71.933057][ T6661] _printk+0xc7/0x100 [ 71.933068][ T6661] ? __pfx__printk+0x10/0x10 [ 71.933080][ T6661] ? kfree+0x2f8/0x6e0 [ 71.933119][ T6661] ? destroy_workqueue+0x13f/0xab0 [ 71.933131][ T6661] ? nci_unregister_device+0x68/0x300 [ 71.933147][ T6661] ? virtual_ncidev_close+0x4b/0xa0 [ 71.933158][ T6661] ? __fput+0x402/0xb70 [ 71.933166][ T6661] ? exit_to_user_mode_loop+0xfb/0x540 [ 71.933179][ T6661] ? __report_bug+0x396/0x520 [ 71.933193][ T6661] ? __report_bug+0x385/0x520 [ 71.933207][ T6661] __report_bug+0x3a6/0x520 [ 71.933220][ T6661] ? destroy_workqueue+0x322/0xab0 [ 71.933229][ T6661] ? __pfx___report_bug+0x10/0x10 [ 71.933244][ T6661] ? rcu_is_watching+0x12/0xc0 [ 71.933253][ T6661] ? __pv_queued_spin_lock_slowpath+0x28d/0xcf0 [ 71.933265][ T6661] ? destroy_workqueue+0x322/0xab0 [ 71.933274][ T6661] report_bug+0xb2/0x220 [ 71.933288][ T6661] ? destroy_workqueue+0x322/0xab0 [ 71.933296][ T6661] handle_bug+0x127/0x260 [ 71.933307][ T6661] exc_invalid_op+0x17/0x50 [ 71.933319][ T6661] asm_exc_invalid_op+0x1a/0x20 [ 71.933328][ T6661] RIP: 0010:destroy_workqueue+0x322/0xab0 [ 71.933337][ T6661] Code: e8 d3 85 39 00 49 8d 6d 68 48 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 35 07 00 00 49 8b 45 68 48 39 c5 74 7f e8 af 85 39 00 90 <0f> 0b 90 48 c7 c6 20 71 8c 8b 48 8d 93 78 01 00 00 48 c7 c7 40 66 [ 71.933347][ T6661] RSP: 0018:ffffc90005a97d10 EFLAGS: 00010093 [ 71.933355][ T6661] RAX: 0000000000000000 RBX: ffff8880245e4000 RCX: ffffffff81855d13 [ 71.933361][ T6661] RDX: ffff8880246024c0 RSI: ffffffff81855e11 RDI: 0000000000000005 [ 71.933367][ T6661] RBP: ffff88802b600024 R08: 0000000000000005 R09: 0000000000000000 [ 71.933373][ T6661] R10: 0000000000000001 R11: ffff888024602ff0 R12: 0000000000000002 [ 71.933378][ T6661] R13: ffff88802b600000 R14: dffffc0000000000 R15: 0000000000000001 [ 71.933386][ T6661] ? destroy_workqueue+0x223/0xab0 [ 71.933395][ T6661] ? destroy_workqueue+0x321/0xab0 [ 71.933405][ T6661] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 71.933415][ T6661] nci_unregister_device+0x68/0x300 [ 71.933432][ T6661] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 71.933443][ T6661] virtual_ncidev_close+0x4b/0xa0 [ 71.933452][ T6661] __fput+0x402/0xb70 [ 71.933461][ T6661] task_work_run+0x150/0x240 [ 71.933473][ T6661] ? __pfx_task_work_run+0x10/0x10 [ 71.933485][ T6661] ? __do_sys_close_range+0x278/0x730 [ 71.933501][ T6661] exit_to_user_mode_loop+0xfb/0x540 [ 71.933515][ T6661] do_syscall_64+0x4ee/0xf80 [ 71.933525][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.933535][ T6661] RIP: 0033:0x7f17bb58f7c9 [ 71.933542][ T6661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.933551][ T6661] RSP: 002b:00007ffd4b4b1bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 71.933559][ T6661] RAX: 0000000000000000 RBX: 00007f17bb7e7da0 RCX: 00007f17bb58f7c9 [ 71.933565][ T6661] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 71.933571][ T6661] RBP: 00007f17bb7e7da0 R08: 0000000000000834 R09: 000000084b4b1eaf [ 71.933577][ T6661] R10: 00000000003ff5a8 R11: 0000000000000246 R12: 0000000000011b81 [ 71.933582][ T6661] R13: 00007f17bb7e6090 R14: ffffffffffffffff R15: 00007ffd4b4b1cd0 [ 71.933591][ T6661] [ 72.301030][ T6661] WARNING: kernel/workqueue.c:5921 at destroy_workqueue+0x322/0xab0, CPU#1: syz.2.155/6661 [ 72.304181][ T6661] Modules linked in: [ 72.305537][ T6661] CPU: 1 UID: 0 PID: 6661 Comm: syz.2.155 Not tainted syzkaller #0 PREEMPT(full) [ 72.308426][ T6661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.311873][ T6661] RIP: 0010:destroy_workqueue+0x322/0xab0 [ 72.313758][ T6661] Code: e8 d3 85 39 00 49 8d 6d 68 48 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 35 07 00 00 49 8b 45 68 48 39 c5 74 7f e8 af 85 39 00 90 <0f> 0b 90 48 c7 c6 20 71 8c 8b 48 8d 93 78 01 00 00 48 c7 c7 40 66 [ 72.320321][ T6661] RSP: 0018:ffffc90005a97d10 EFLAGS: 00010093 [ 72.322393][ T6661] RAX: 0000000000000000 RBX: ffff8880245e4000 RCX: ffffffff81855d13 [ 72.325590][ T6661] RDX: ffff8880246024c0 RSI: ffffffff81855e11 RDI: 0000000000000005 [ 72.328539][ T6661] RBP: ffff88802b600024 R08: 0000000000000005 R09: 0000000000000000 [ 72.331053][ T6661] R10: 0000000000000001 R11: ffff888024602ff0 R12: 0000000000000002 [ 72.333566][ T6661] R13: ffff88802b600000 R14: dffffc0000000000 R15: 0000000000000001 [ 72.336285][ T6661] FS: 000055556d08e500(0000) GS:ffff8880d69fb000(0000) knlGS:0000000000000000 [ 72.339334][ T6661] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.341461][ T6661] CR2: 00007f17bc362f98 CR3: 000000005724b000 CR4: 0000000000352ef0 [ 72.344162][ T6661] Call Trace: [ 72.345565][ T6661] [ 72.346583][ T6661] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 72.348407][ T6661] nci_unregister_device+0x68/0x300 [ 72.350102][ T6661] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 72.351911][ T6661] virtual_ncidev_close+0x4b/0xa0 [ 72.353537][ T6661] __fput+0x402/0xb70 [ 72.354823][ T6661] task_work_run+0x150/0x240 [ 72.356357][ T6661] ? __pfx_task_work_run+0x10/0x10 [ 72.358089][ T6661] ? __do_sys_close_range+0x278/0x730 [ 72.360187][ T6661] exit_to_user_mode_loop+0xfb/0x540 [ 72.361944][ T6661] do_syscall_64+0x4ee/0xf80 [ 72.363439][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.365347][ T6661] RIP: 0033:0x7f17bb58f7c9 [ 72.366769][ T6661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.373138][ T6661] RSP: 002b:00007ffd4b4b1bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 72.375804][ T6661] RAX: 0000000000000000 RBX: 00007f17bb7e7da0 RCX: 00007f17bb58f7c9 [ 72.378353][ T6661] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 72.380860][ T6661] RBP: 00007f17bb7e7da0 R08: 0000000000000834 R09: 000000084b4b1eaf [ 72.383447][ T6661] R10: 00000000003ff5a8 R11: 0000000000000246 R12: 0000000000011b81 [ 72.385946][ T6661] R13: 00007f17bb7e6090 R14: ffffffffffffffff R15: 00007ffd4b4b1cd0 [ 72.388486][ T6661] [ 72.389516][ T6661] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 72.391830][ T6661] CPU: 1 UID: 0 PID: 6661 Comm: syz.2.155 Not tainted syzkaller #0 PREEMPT(full) [ 72.394682][ T6661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.398094][ T6661] Call Trace: [ 72.399174][ T6661] [ 72.400169][ T6661] dump_stack_lvl+0x3d/0x1f0 [ 72.401716][ T6661] vpanic+0x640/0x6f0 [ 72.403009][ T6661] ? destroy_workqueue+0x322/0xab0 [ 72.404651][ T6661] panic+0xca/0xd0 [ 72.405864][ T6661] ? __pfx_panic+0x10/0x10 [ 72.407306][ T6661] ? check_panic_on_warn+0x1f/0xb0 [ 72.408947][ T6661] check_panic_on_warn+0xab/0xb0 [ 72.410557][ T6661] __warn+0x108/0x3c0 [ 72.411846][ T6661] __report_bug+0x2a0/0x520 [ 72.413317][ T6661] ? destroy_workqueue+0x322/0xab0 [ 72.414954][ T6661] ? __pfx___report_bug+0x10/0x10 [ 72.416593][ T6661] ? rcu_is_watching+0x12/0xc0 [ 72.418148][ T6661] ? __pv_queued_spin_lock_slowpath+0x28d/0xcf0 [ 72.420123][ T6661] ? destroy_workqueue+0x322/0xab0 [ 72.421774][ T6661] report_bug+0xb2/0x220 [ 72.423297][ T6661] ? destroy_workqueue+0x322/0xab0 [ 72.424925][ T6661] handle_bug+0x127/0x260 [ 72.426365][ T6661] exc_invalid_op+0x17/0x50 [ 72.427822][ T6661] asm_exc_invalid_op+0x1a/0x20 [ 72.429393][ T6661] RIP: 0010:destroy_workqueue+0x322/0xab0 [ 72.431200][ T6661] Code: e8 d3 85 39 00 49 8d 6d 68 48 89 e8 48 c1 e8 03 42 80 3c 30 00 0f 85 35 07 00 00 49 8b 45 68 48 39 c5 74 7f e8 af 85 39 00 90 <0f> 0b 90 48 c7 c6 20 71 8c 8b 48 8d 93 78 01 00 00 48 c7 c7 40 66 [ 72.437301][ T6661] RSP: 0018:ffffc90005a97d10 EFLAGS: 00010093 [ 72.439233][ T6661] RAX: 0000000000000000 RBX: ffff8880245e4000 RCX: ffffffff81855d13 [ 72.441783][ T6661] RDX: ffff8880246024c0 RSI: ffffffff81855e11 RDI: 0000000000000005 [ 72.444274][ T6661] RBP: ffff88802b600024 R08: 0000000000000005 R09: 0000000000000000 [ 72.446749][ T6661] R10: 0000000000000001 R11: ffff888024602ff0 R12: 0000000000000002 [ 72.449262][ T6661] R13: ffff88802b600000 R14: dffffc0000000000 R15: 0000000000000001 [ 72.451771][ T6661] ? destroy_workqueue+0x223/0xab0 [ 72.453483][ T6661] ? destroy_workqueue+0x321/0xab0 [ 72.455121][ T6661] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 72.456952][ T6661] nci_unregister_device+0x68/0x300 [ 72.458631][ T6661] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 72.460422][ T6661] virtual_ncidev_close+0x4b/0xa0 [ 72.462015][ T6661] __fput+0x402/0xb70 [ 72.463295][ T6661] task_work_run+0x150/0x240 [ 72.464777][ T6661] ? __pfx_task_work_run+0x10/0x10 [ 72.466436][ T6661] ? __do_sys_close_range+0x278/0x730 [ 72.468148][ T6661] exit_to_user_mode_loop+0xfb/0x540 [ 72.469851][ T6661] do_syscall_64+0x4ee/0xf80 [ 72.471336][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.473211][ T6661] RIP: 0033:0x7f17bb58f7c9 [ 72.474617][ T6661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.480698][ T6661] RSP: 002b:00007ffd4b4b1bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 72.483458][ T6661] RAX: 0000000000000000 RBX: 00007f17bb7e7da0 RCX: 00007f17bb58f7c9 [ 72.485959][ T6661] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 72.488457][ T6661] RBP: 00007f17bb7e7da0 R08: 0000000000000834 R09: 000000084b4b1eaf [ 72.490971][ T6661] R10: 00000000003ff5a8 R11: 0000000000000246 R12: 0000000000011b81 [ 72.493467][ T6661] R13: 00007f17bb7e6090 R14: ffffffffffffffff R15: 00007ffd4b4b1cd0 [ 72.495968][ T6661] [ 73.574547][ T6661] Shutting down cpus with NMI [ 73.576779][ T6661] Kernel Offset: disabled [ 73.578163][ T6661] Rebooting in 86400 seconds..