last executing test programs:

17.844340603s ago: executing program 2 (id=3):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r3, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000080), 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f00000002c0))
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendfile(r6, r6, 0x0, 0x1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r9}, 0xc)
r10 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r10, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000940)}}], 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
setsockopt$sock_timeval(r11, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
recvmmsg(r11, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x8)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f065584c", 0x0, 0xfffffffd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.841720517s ago: executing program 2 (id=4):
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0680010004000000be7000005c29000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48)

16.720255202s ago: executing program 2 (id=5):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080), 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r6, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x24044080)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendfile(r4, r4, 0x0, 0x351e)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r11}, 0xc)
r12 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r12, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000940)}}], 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x8)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

16.541121241s ago: executing program 1 (id=2):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f00000002c0), 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendfile(r4, r4, 0x0, 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r7}, 0xc)
r8 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r8, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000940)}}], 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x8)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

16.488316368s ago: executing program 0 (id=1):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_buf(r3, 0x0, 0x4, &(0x7f0000000200)="440910bc996c301c8183070400", 0xd)
sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10, 0x0}, 0x40080)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r7, 0x0, 0xb, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0xa}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0xa, 0x1, {0x10}}]}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x74}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r8=>0x0})
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$nci(r9, &(0x7f0000000340)=@NCI_OP_RF_DEACTIVATE_RSP, 0x4)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100005cbec6271d1f1aab38273bcfd9d1d8302d835a49f84e"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

16.348292608s ago: executing program 2 (id=6):
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x2, 0x84)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0xc51e000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, 0xffffffffffffffff, 0x12, 0x0, @val=@iter={0x0}}, 0x20)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef)
socket(0x10, 0x2, 0x0) (async)
write(r0, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) (async)
socket$alg(0x26, 0x5, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_sctp(0xa, 0x2, 0x84) (async)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0xc51e000) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, 0xffffffffffffffff, 0x12, 0x0, @val=@iter={0x0}}, 0x20) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef) (async)

16.291850865s ago: executing program 1 (id=7):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0) (async)
write$cgroup_devices(r2, 0x0, 0x9)
mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff) (async)
write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000009500000000000000a801365a784ffa6f7f1e6505398e2cea1e2581a3e56dcaa67d17308c7f0fac78d1b16a56ff39e6091b3a048a1b8df7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18) (async)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) (async)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0xd, @loopback, 0x4}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, 0x0, 0x0)

15.862983106s ago: executing program 2 (id=8):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = socket$igmp6(0xa, 0x3, 0x2) (async)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0xfffffff8, 0x2, 0x4, 0x400, 0xc, 0x800200, r6}) (async)
r7 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080), 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendfile(r7, r7, 0x0, 0x1)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r10 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r10, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000940)}}], 0x2, 0x0) (async)
ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x8)
socket$kcm(0x10, 0x2, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000012bebcaac5746e1d000000000000030000000000000000f06c4d203de8b68802040000000000000089098689b6c11377ae721e823d"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)

1.046558459s ago: executing program 32 (id=1):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_buf(r3, 0x0, 0x4, &(0x7f0000000200)="440910bc996c301c8183070400", 0xd)
sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10, 0x0}, 0x40080)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r7, 0x0, 0xb, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0xa}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0xa, 0x1, {0x10}}]}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x74}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r8=>0x0})
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$nci(r9, &(0x7f0000000340)=@NCI_OP_RF_DEACTIVATE_RSP, 0x4)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100005cbec6271d1f1aab38273bcfd9d1d8302d835a49f84e"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

992.51633ms ago: executing program 33 (id=7):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0) (async)
write$cgroup_devices(r2, 0x0, 0x9)
mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff) (async)
write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000009500000000000000a801365a784ffa6f7f1e6505398e2cea1e2581a3e56dcaa67d17308c7f0fac78d1b16a56ff39e6091b3a048a1b8df7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18) (async)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) (async)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0xd, @loopback, 0x4}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, 0x0, 0x0)

0s ago: executing program 34 (id=8):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = socket$igmp6(0xa, 0x3, 0x2) (async)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0xfffffff8, 0x2, 0x4, 0x400, 0xc, 0x800200, r6}) (async)
r7 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080), 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendfile(r7, r7, 0x0, 0x1)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r10 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r10, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000940)}}], 0x2, 0x0) (async)
ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x8)
socket$kcm(0x10, 0x2, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000012bebcaac5746e1d000000000000030000000000000000f06c4d203de8b68802040000000000000089098689b6c11377ae721e823d"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:62237' (ED25519) to the list of known hosts.
syzkaller login: [   56.605477][ T5828] cgroup: Unknown subsys name 'net'
[   56.711700][ T5828] cgroup: Unknown subsys name 'cpuset'
[   56.718038][ T5828] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.850464][ T5828] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.431427][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.435366][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.458283][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.462238][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.465437][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.472383][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.476677][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.483544][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.489473][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.492850][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.499500][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.503870][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.508433][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.519130][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.523786][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.797513][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   64.931022][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.933970][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.937938][ T5847] bridge_slave_0: entered allmulticast mode
[   64.941749][ T5847] bridge_slave_0: entered promiscuous mode
[   64.963818][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   64.979032][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.981897][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.984903][ T5847] bridge_slave_1: entered allmulticast mode
[   64.989624][ T5847] bridge_slave_1: entered promiscuous mode
[   65.056773][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.065327][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   65.074347][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.150717][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.153642][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.156319][ T5851] bridge_slave_0: entered allmulticast mode
[   65.160289][ T5851] bridge_slave_0: entered promiscuous mode
[   65.164710][ T5847] team0: Port device team_slave_0 added
[   65.173368][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.176039][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.179211][ T5851] bridge_slave_1: entered allmulticast mode
[   65.182799][ T5851] bridge_slave_1: entered promiscuous mode
[   65.189243][ T5847] team0: Port device team_slave_1 added
[   65.254806][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.257996][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.266179][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.272007][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.274414][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.283453][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.288070][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.290577][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.293277][ T5843] bridge_slave_0: entered allmulticast mode
[   65.297767][ T5843] bridge_slave_0: entered promiscuous mode
[   65.303014][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.311511][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.313782][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.316097][ T5843] bridge_slave_1: entered allmulticast mode
[   65.319742][ T5843] bridge_slave_1: entered promiscuous mode
[   65.323559][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.356341][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.388367][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.392369][ T5851] team0: Port device team_slave_0 added
[   65.398907][ T5847] hsr_slave_0: entered promiscuous mode
[   65.401703][ T5847] hsr_slave_1: entered promiscuous mode
[   65.416669][ T5851] team0: Port device team_slave_1 added
[   65.460002][ T5843] team0: Port device team_slave_0 added
[   65.473498][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.476499][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.487149][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.500780][ T5843] team0: Port device team_slave_1 added
[   65.503649][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.506586][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.516774][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.576410][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.579999][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.588393][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.628223][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.631043][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.642510][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.651557][ T5851] hsr_slave_0: entered promiscuous mode
[   65.654045][ T5851] hsr_slave_1: entered promiscuous mode
[   65.656403][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   65.659778][ T5851] Cannot create hsr debugfs directory
[   65.741945][ T5843] hsr_slave_0: entered promiscuous mode
[   65.744445][ T5843] hsr_slave_1: entered promiscuous mode
[   65.746814][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   65.750409][ T5843] Cannot create hsr debugfs directory
[   65.914984][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.940959][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.955749][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.974863][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.042489][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.049651][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.065739][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.084408][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.130953][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.146269][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.161399][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.171792][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.182637][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.233641][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   66.251667][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.254844][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.268642][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.271733][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.338450][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.383022][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   66.391501][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.404846][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.407902][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.422706][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   66.434014][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.437090][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.454080][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.457071][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.479874][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.482830][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.517688][   T54] Bluetooth: hci0: command tx timeout
[   66.519942][ T5846] Bluetooth: hci1: command tx timeout
[   66.568784][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.598277][ T5846] Bluetooth: hci2: command tx timeout
[   66.622168][ T5847] veth0_vlan: entered promiscuous mode
[   66.632636][ T5847] veth1_vlan: entered promiscuous mode
[   66.655732][ T5847] veth0_macvtap: entered promiscuous mode
[   66.661930][ T5847] veth1_macvtap: entered promiscuous mode
[   66.674394][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.683927][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.696068][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.706234][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.715398][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.734148][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.785751][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.794186][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.822178][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.824992][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.856750][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.876323][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.896826][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.953366][ T5851] veth0_vlan: entered promiscuous mode
[   66.982403][ T5851] veth1_vlan: entered promiscuous mode
[   66.984955][ T5843] veth0_vlan: entered promiscuous mode
[   67.005756][ T5843] veth1_vlan: entered promiscuous mode
[   67.022579][ T5910] Zero length message leads to an empty skb
[   67.052148][ T5851] veth0_macvtap: entered promiscuous mode
[   67.060560][ T5851] veth1_macvtap: entered promiscuous mode
[   67.066739][ T5843] veth0_macvtap: entered promiscuous mode
[   67.078641][ T5843] veth1_macvtap: entered promiscuous mode
[   67.145678][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.155927][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.173259][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.185269][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.833400][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.838391][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.844759][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.858788][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.876325][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.899659][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.924103][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.933358][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.055322][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.066845][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.099110][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.102601][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.152081][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.155895][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.183814][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.187842][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.374775][ T5943] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.418424][ T5943] netem: incorrect gi model size
[   68.420236][ T5943] netem: change failed
[   68.514465][ T5954] warning: `syz.2.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.532253][ T5951] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   68.534330][ T5951] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   68.563502][ T5951] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   68.565940][ T5951] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   68.597393][ T5846] Bluetooth: hci1: command tx timeout
[   68.605459][ T5951] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   68.614896][ T5951] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   68.717180][ T5947] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET)
[   71.080732][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.083347][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   86.441353][  T791] cfg80211: failed to load regulatory.db
[  132.534131][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.537315][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  193.964227][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.969564][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  220.198675][   T34] INFO: task kworker/0:3:5882 blocked for more than 143 seconds.
[  220.201196][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
[  220.204577][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  220.209227][   T34] task:kworker/0:3     state:D stack:25280 pid:5882  tgid:5882  ppid:2      task_flags:0x4208060 flags:0x00004000
[  220.217167][   T34] Workqueue: events rfkill_sync_work
[  220.219471][   T34] Call Trace:
[  220.220833][   T34]  <TASK>
[  220.222067][   T34]  __schedule+0x1798/0x4cc0
[  220.223912][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  220.226070][   T34]  ? __pfx___schedule+0x10/0x10
[  220.243667][   T34]  ? schedule+0x91/0x360
[  220.245415][   T34]  schedule+0x165/0x360
[  220.251851][   T34]  schedule_preempt_disabled+0x13/0x30
[  220.255341][   T34]  __mutex_lock+0x7e6/0x1350
[  220.257641][   T34]  ? __mutex_lock+0x5bb/0x1350
[  220.259569][   T34]  ? rfkill_sync_work+0x2e/0x200
[  220.261954][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  220.264089][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  220.269376][   T34]  rfkill_sync_work+0x2e/0x200
[  220.271449][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  220.273774][   T34]  process_scheduled_works+0xae1/0x17b0
[  220.276050][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  220.278844][   T34]  worker_thread+0x8a0/0xda0
[  220.280772][   T34]  kthread+0x711/0x8a0
[  220.282449][   T34]  ? __pfx_worker_thread+0x10/0x10
[  220.284503][   T34]  ? __pfx_kthread+0x10/0x10
[  220.286350][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  220.289452][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.291511][   T34]  ? __pfx_kthread+0x10/0x10
[  220.293342][   T34]  ret_from_fork+0x3fc/0x770
[  220.295340][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  220.297875][   T34]  ? __switch_to_asm+0x39/0x70
[  220.299838][   T34]  ? __switch_to_asm+0x33/0x70
[  220.301700][   T34]  ? __pfx_kthread+0x10/0x10
[  220.303383][   T34]  ret_from_fork_asm+0x1a/0x30
[  220.305335][   T34]  </TASK>
[  220.306622][   T34] INFO: task kworker/0:5:5923 blocked for more than 143 seconds.
[  220.309908][   T34]       Not tainted syzkaller #0
[  220.311936][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  220.315285][   T34] task:kworker/0:5     state:D stack:25280 pid:5923  tgid:5923  ppid:2      task_flags:0x4208060 flags:0x00004000
[  220.320310][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  220.322881][   T34] Call Trace:
[  220.324259][   T34]  <TASK>
[  220.325439][   T34]  __schedule+0x1798/0x4cc0
[  220.327973][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  220.330450][   T34]  ? __pfx___schedule+0x10/0x10
[  220.332484][   T34]  ? schedule+0x91/0x360
[  220.334143][   T34]  schedule+0x165/0x360
[  220.335821][   T34]  schedule_preempt_disabled+0x13/0x30
[  220.338288][   T34]  __mutex_lock+0x7e6/0x1350
[  220.340100][   T34]  ? __mutex_lock+0x5bb/0x1350
[  220.341954][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  220.344419][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  220.346612][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  220.349245][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  220.351531][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  220.353953][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  220.356256][   T34]  process_scheduled_works+0xae1/0x17b0
[  220.359430][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  220.361865][   T34]  worker_thread+0x8a0/0xda0
[  220.363739][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  220.366289][   T34]  ? __kthread_parkme+0x7b/0x200
[  220.368385][   T34]  kthread+0x711/0x8a0
[  220.370048][   T34]  ? __pfx_worker_thread+0x10/0x10
[  220.372159][   T34]  ? __pfx_kthread+0x10/0x10
[  220.374161][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  220.376223][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.378396][   T34]  ? __pfx_kthread+0x10/0x10
[  220.380319][   T34]  ret_from_fork+0x3fc/0x770
[  220.382203][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  220.384285][   T34]  ? __switch_to_asm+0x39/0x70
[  220.386210][   T34]  ? __switch_to_asm+0x33/0x70
[  220.388224][   T34]  ? __pfx_kthread+0x10/0x10
[  220.390396][   T34]  ret_from_fork_asm+0x1a/0x30
[  220.392316][   T34]  </TASK>
[  220.393614][   T34] INFO: task syz.0.1:5941 blocked for more than 143 seconds.
[  220.396442][   T34]       Not tainted syzkaller #0
[  220.398492][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  220.401897][   T34] task:syz.0.1         state:D stack:25032 pid:5941  tgid:5941  ppid:5851   task_flags:0x400040 flags:0x00004004
[  220.406556][   T34] Call Trace:
[  220.408029][   T34]  <TASK>
[  220.409216][   T34]  __schedule+0x1798/0x4cc0
[  220.411062][   T34]  ? validate_chain+0x897/0x2140
[  220.413079][   T34]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  220.415402][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.417604][   T34]  ? __lock_acquire+0xab9/0xd20
[  220.419575][   T34]  ? __pfx___schedule+0x10/0x10
[  220.421553][   T34]  ? schedule+0x91/0x360
[  220.423286][   T34]  schedule+0x165/0x360
[  220.424968][   T34]  schedule_timeout+0x9a/0x270
[  220.426911][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  220.429223][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  220.431329][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.433414][   T34]  ? wait_for_completion+0x267/0x5d0
[  220.435453][   T34]  wait_for_completion+0x2bf/0x5d0
[  220.437721][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  220.439879][   T34]  ? __flush_work+0xd2/0xbc0
[  220.441699][   T34]  ? __flush_work+0xd2/0xbc0
[  220.443522][   T34]  __flush_work+0x9b9/0xbc0
[  220.445274][   T34]  ? __flush_work+0xd2/0xbc0
[  220.447246][   T34]  ? __pfx___flush_work+0x10/0x10
[  220.449285][   T34]  ? __pfx_wq_barrier_func+0x10/0x10
[  220.451339][   T34]  ? __pfx___cancel_work+0x10/0x10
[  220.453428][   T34]  ? nfc_genl_device_removed+0x23c/0x330
[  220.455692][   T34]  __cancel_work_sync+0xbe/0x110
[  220.458029][   T34]  rfkill_unregister+0x92/0x220
[  220.460029][   T34]  nfc_unregister_device+0x96/0x2a0
[  220.462117][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  220.464387][   T34]  virtual_ncidev_close+0x56/0x90
[  220.466399][   T34]  __fput+0x44c/0xa70
[  220.468848][   T34]  task_work_run+0x1d4/0x260
[  220.470699][   T34]  ? __pfx_task_work_run+0x10/0x10
[  220.472770][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  220.474974][   T34]  exit_to_user_mode_loop+0xec/0x110
[  220.477272][   T34]  do_syscall_64+0x2bd/0x3b0
[  220.479147][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.481611][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.484056][   T34]  ? exc_page_fault+0x9f/0xf0
[  220.486044][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.488559][   T34] RIP: 0033:0x7f6ae8b8ebe9
[  220.490364][   T34] RSP: 002b:00007ffc8e1e4778 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  220.493875][   T34] RAX: 0000000000000000 RBX: 0000000000010a80 RCX: 00007f6ae8b8ebe9
[  220.497148][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  220.500267][   T34] RBP: 00007f6ae8db7da0 R08: 0000000000000001 R09: 000000128e1e4a6f
[  220.503419][   T34] R10: 0000001b31020000 R11: 0000000000000246 R12: 00007f6ae8db5fac
[  220.506689][   T34] R13: 00007f6ae8db5fa0 R14: ffffffffffffffff R15: 00007ffc8e1e4890
[  220.510028][   T34]  </TASK>
[  220.511338][   T34] INFO: task syz.1.7:5951 blocked for more than 143 seconds.
[  220.514275][   T34]       Not tainted syzkaller #0
[  220.516270][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  220.521444][   T34] task:syz.1.7         state:D stack:27088 pid:5951  tgid:5948  ppid:5843   task_flags:0x400040 flags:0x00004006
[  220.526072][   T34] Call Trace:
[  220.527479][   T34]  <TASK>
[  220.528657][   T34]  __schedule+0x1798/0x4cc0
[  220.530460][   T34]  ? __lock_acquire+0xab9/0xd20
[  220.532399][   T34]  ? __lock_acquire+0xab9/0xd20
[  220.534382][   T34]  ? __pfx___schedule+0x10/0x10
[  220.536299][   T34]  ? schedule+0x91/0x360
[  220.537872][   T34]  schedule+0x165/0x360
[  220.539261][   T34]  schedule_preempt_disabled+0x13/0x30
[  220.540993][   T34]  __mutex_lock+0x7e6/0x1350
[  220.542718][   T34]  ? __mutex_lock+0x5bb/0x1350
[  220.544667][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  220.546794][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  220.549052][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.551155][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  220.553512][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  220.556087][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  220.558382][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  220.560450][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  220.562768][   T34]  rfkill_set_block+0x1d2/0x440
[  220.564686][   T34]  rfkill_fop_write+0x44b/0x570
[  220.566672][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  220.569160][   T34]  ? security_kernfs_init_security+0x290/0x290
[  220.571569][   T34]  ? rw_verify_area+0x255/0x4d0
[  220.573543][   T34]  ? __lock_acquire+0xab9/0xd20
[  220.575609][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  220.578543][   T34]  vfs_write+0x27e/0xb30
[  220.580156][   T34]  ? __pfx_vfs_write+0x10/0x10
[  220.581926][   T34]  ? __fget_files+0x2a/0x420
[  220.583745][   T34]  ? __fget_files+0x2a/0x420
[  220.585638][   T34]  ? __fget_files+0x3a0/0x420
[  220.587653][   T34]  ? __fget_files+0x2a/0x420
[  220.589547][   T34]  ksys_write+0x145/0x250
[  220.591292][   T34]  ? __pfx_ksys_write+0x10/0x10
[  220.593273][   T34]  ? rcu_is_watching+0x15/0xb0
[  220.595202][   T34]  ? do_syscall_64+0xbe/0x3b0
[  220.597277][   T34]  do_syscall_64+0xfa/0x3b0
[  220.599051][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.601163][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.603494][   T34]  ? exc_page_fault+0x9f/0xf0
[  220.605318][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.607575][   T34] RIP: 0033:0x7f795058ebe9
[  220.609388][   T34] RSP: 002b:00007f79513d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  220.612338][   T34] RAX: ffffffffffffffda RBX: 00007f79507b5fa0 RCX: 00007f795058ebe9
[  220.615675][   T34] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003
[  220.618935][   T34] RBP: 00007f7950611e19 R08: 0000000000000000 R09: 0000000000000000
[  220.622083][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.625301][   T34] R13: 00007f79507b6038 R14: 00007f79507b5fa0 R15: 00007ffd6bde7888
[  220.628870][   T34]  </TASK>
[  220.630200][   T34] INFO: task syz.2.8:5972 blocked for more than 143 seconds.
[  220.633142][   T34]       Not tainted syzkaller #0
[  220.635105][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  220.644745][   T34] task:syz.2.8         state:D stack:28328 pid:5972  tgid:5971  ppid:5847   task_flags:0x400040 flags:0x00004004
[  220.649607][   T34] Call Trace:
[  220.650964][   T34]  <TASK>
[  220.652200][   T34]  __schedule+0x1798/0x4cc0
[  220.654046][   T34]  ? __lock_acquire+0xab9/0xd20
[  220.656012][   T34]  ? __lock_acquire+0xab9/0xd20
[  220.658074][   T34]  ? __pfx___schedule+0x10/0x10
[  220.660064][   T34]  ? schedule+0x91/0x360
[  220.661683][   T34]  schedule+0x165/0x360
[  220.663366][   T34]  schedule_preempt_disabled+0x13/0x30
[  220.665499][   T34]  __mutex_lock+0x7e6/0x1350
[  220.667485][   T34]  ? __mutex_lock+0x5bb/0x1350
[  220.669417][   T34]  ? rfkill_fop_open+0x12d/0x820
[  220.671406][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  220.673454][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  220.675559][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  220.678254][   T34]  rfkill_fop_open+0x12d/0x820
[  220.680242][   T34]  ? __pfx_rfkill_fop_open+0x10/0x10
[  220.682322][   T34]  misc_open+0x2bc/0x330
[  220.684068][   T34]  chrdev_open+0x4cc/0x5e0
[  220.685891][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  220.688010][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  220.690478][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  220.692523][   T34]  do_dentry_open+0x953/0x13f0
[  220.694516][   T34]  vfs_open+0x3b/0x340
[  220.696197][   T34]  ? path_openat+0x2ecd/0x3830
[  220.698234][   T34]  path_openat+0x2ee5/0x3830
[  220.700397][   T34]  ? arch_stack_walk+0xfc/0x150
[  220.702638][   T34]  ? stack_depot_save_flags+0x40/0x860
[  220.704871][   T34]  ? __pfx_path_openat+0x10/0x10
[  220.706890][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.709468][   T34]  do_filp_open+0x1fa/0x410
[  220.711260][   T34]  ? __lock_acquire+0xab9/0xd20
[  220.713196][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  220.715187][   T34]  ? _raw_spin_unlock+0x28/0x50
[  220.717194][   T34]  ? alloc_fd+0x64c/0x6c0
[  220.718879][   T34]  do_sys_openat2+0x121/0x1c0
[  220.720682][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  220.723055][   T34]  ? exc_page_fault+0x76/0xf0
[  220.725671][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  220.728055][   T34]  __x64_sys_openat+0x138/0x170
[  220.730044][   T34]  do_syscall_64+0xfa/0x3b0
[  220.731851][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.733940][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.736333][   T34]  ? exc_page_fault+0x9f/0xf0
[  220.738340][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.740659][   T34] RIP: 0033:0x7f7e61d8ebe9
[  220.742368][   T34] RSP: 002b:00007f7e62c6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  220.745637][   T34] RAX: ffffffffffffffda RBX: 00007f7e61fb5fa0 RCX: 00007f7e61d8ebe9
[  220.748882][   T34] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  220.751915][   T34] RBP: 00007f7e61e11e19 R08: 0000000000000000 R09: 0000000000000000
[  220.755024][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.758270][   T34] R13: 00007f7e61fb6038 R14: 00007f7e61fb5fa0 R15: 00007ffedd601398
[  220.761575][   T34]  </TASK>
[  220.762915][   T34] 
[  220.762915][   T34] Showing all locks held in the system:
[  220.766070][   T34] 1 lock held by khungtaskd/34:
[  220.768149][   T34]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  220.771898][   T34] 2 locks held by getty/5669:
[  220.773824][   T34]  #0: ffff88810f9ed0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  220.777816][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  220.781829][   T34] 3 locks held by kworker/0:3/5882:
[  220.783951][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  220.788510][   T34]  #1: ffffc9000423fbc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  220.793406][   T34]  #2: ffffffff8f812388 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200
[  220.797384][   T34] 3 locks held by kworker/0:5/5923:
[  220.799446][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  220.803859][   T34]  #1: ffffc900044dfbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  220.809398][   T34]  #2: ffffffff8f812388 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  220.813993][   T34] 1 lock held by syz.0.1/5941:
[  220.816018][   T34]  #0: ffff88810a476100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  220.820082][   T34] 2 locks held by syz.1.7/5951:
[  220.822022][   T34]  #0: ffffffff8f812388 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  220.826059][   T34]  #1: ffff88810a476100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  220.830066][   T34] 2 locks held by syz.2.8/5972:
[  220.832032][   T34]  #0: ffffffff8e9c1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  220.835447][   T34]  #1: ffffffff8f812388 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820
[  220.839718][   T34] 1 lock held by syz-executor/5979:
[  220.842072][   T34]  #0: ffffffff8e9c1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  220.845387][   T34] 1 lock held by syz-executor/5980:
[  220.847548][   T34]  #0: ffffffff8e9c1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  220.850797][   T34] 1 lock held by syz-executor/5982:
[  220.852879][   T34]  #0: ffffffff8e9c1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  220.856390][   T34] 1 lock held by syz-executor/6001:
[  220.858561][   T34]  #0: ffffffff8e9c1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  220.861925][   T34] 1 lock held by syz-executor/6002:
[  220.864016][   T34]  #0: ffffffff8e9c1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  220.867452][   T34] 1 lock held by syz-executor/6004:
[  220.869509][   T34]  #0: ffffffff8e9c1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  220.872835][   T34] 1 lock held by syz-executor/6007:
[  220.874901][   T34]  #0: ffffffff8e9c1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  220.878336][   T34] 1 lock held by syz-executor/6008:
[  220.880418][   T34]  #0: ffffffff8e9c1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  220.883732][   T34] 1 lock held by syz-executor/6010:
[  220.885992][   T34]  #0: ffffffff8e9c1988 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  220.889770][   T34] 
[  220.891026][   T34] =============================================
[  220.891026][   T34] 
[  220.894311][   T34] NMI backtrace for cpu 0
[  220.894334][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  220.894349][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  220.894357][   T34] Call Trace:
[  220.894365][   T34]  <TASK>
[  220.894372][   T34]  dump_stack_lvl+0x189/0x250
[  220.894396][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  220.894411][   T34]  ? __pfx__printk+0x10/0x10
[  220.894439][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  220.894457][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  220.894475][   T34]  ? __pfx__printk+0x10/0x10
[  220.894495][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  220.894517][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  220.894533][   T34]  watchdog+0xf93/0xfe0
[  220.894555][   T34]  ? watchdog+0x1de/0xfe0
[  220.894577][   T34]  kthread+0x711/0x8a0
[  220.894596][   T34]  ? __pfx_watchdog+0x10/0x10
[  220.894612][   T34]  ? __pfx_kthread+0x10/0x10
[  220.894629][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  220.894646][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.894662][   T34]  ? __pfx_kthread+0x10/0x10
[  220.894678][   T34]  ret_from_fork+0x3fc/0x770
[  220.894694][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  220.894712][   T34]  ? __switch_to_asm+0x39/0x70
[  220.894726][   T34]  ? __switch_to_asm+0x33/0x70
[  220.894746][   T34]  ? __pfx_kthread+0x10/0x10
[  220.894763][   T34]  ret_from_fork_asm+0x1a/0x30
[  220.894791][   T34]  </TASK>
[  220.894796][   T34] Sending NMI from CPU 0 to CPUs 1:
[  220.954632][    C1] NMI backtrace for cpu 1
[  220.954648][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  220.954661][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  220.954667][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  220.954687][    C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 86 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  220.954697][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  220.954708][    C1] RAX: f0cebc0a383e3400 RBX: ffffffff819683c8 RCX: f0cebc0a383e3400
[  220.954717][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b7844 RDI: ffffffff8be33680
[  220.954725][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  220.954733][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38a30
[  220.954740][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d4000
[  220.954746][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  220.954756][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  220.954763][    C1] CR2: 000055aba72d27e8 CR3: 000000000df36000 CR4: 00000000000006f0
[  220.954799][    C1] Call Trace:
[  220.954807][    C1]  <TASK>
[  220.954813][    C1]  default_idle+0x13/0x20
[  220.954825][    C1]  default_idle_call+0x74/0xb0
[  220.954837][    C1]  do_idle+0x1e8/0x510
[  220.954850][    C1]  ? __pfx_do_idle+0x10/0x10
[  220.954867][    C1]  cpu_startup_entry+0x44/0x60
[  220.954878][    C1]  start_secondary+0x101/0x110
[  220.954896][    C1]  common_startup_64+0x13e/0x147
[  220.954919][    C1]  </TASK>
[  220.955636][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  221.020878][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  221.024408][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  221.028486][   T34] Call Trace:
[  221.029892][   T34]  <TASK>
[  221.031361][   T34]  dump_stack_lvl+0x99/0x250
[  221.033260][   T34]  ? __asan_memcpy+0x40/0x70
[  221.035134][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.037405][   T34]  ? __pfx__printk+0x10/0x10
[  221.039300][   T34]  vpanic+0x281/0x750
[  221.040912][   T34]  ? __pfx_vpanic+0x10/0x10
[  221.042375][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  221.044287][   T34]  ? preempt_schedule+0xae/0xc0
[  221.046283][   T34]  ? preempt_schedule_common+0x83/0xd0
[  221.048562][   T34]  panic+0xb9/0xc0
[  221.050117][   T34]  ? __pfx_panic+0x10/0x10
[  221.051974][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  221.054149][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  221.056517][   T34]  watchdog+0xfd2/0xfe0
[  221.058217][   T34]  ? watchdog+0x1de/0xfe0
[  221.059867][   T34]  kthread+0x711/0x8a0
[  221.061497][   T34]  ? __pfx_watchdog+0x10/0x10
[  221.063376][   T34]  ? __pfx_kthread+0x10/0x10
[  221.065240][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  221.067316][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  221.069356][   T34]  ? __pfx_kthread+0x10/0x10
[  221.071214][   T34]  ret_from_fork+0x3fc/0x770
[  221.073069][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  221.075099][   T34]  ? __switch_to_asm+0x39/0x70
[  221.077011][   T34]  ? __switch_to_asm+0x33/0x70
[  221.078871][   T34]  ? __pfx_kthread+0x10/0x10
[  221.080703][   T34]  ret_from_fork_asm+0x1a/0x30
[  221.082592][   T34]  </TASK>
[  221.084431][   T34] Kernel Offset: disabled
[  221.086447][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:45:28  Registers:
info registers vcpu 0

CPU#0
RAX=be58ed0629571d00 RBX=ffffffff819683c8 RCX=be58ed0629571d00 RDX=0000000000000001
RSI=ffffffff8d9b7844 RDI=ffffffff8be33680 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38a30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79a3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdff2a0216d CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fdff4d87d20
XMM02=0000000500000007 0000555500000001 XMM03=00005555856551a0 00005555856550f0
XMM04=0000000000000000 0000000000000016 XMM05=0000000000000000 000000000003bf12
XMM06=0000555585659960 0000555500000007 XMM07=0000555500000000 0000555585659810
XMM08=0000555585659760 0000555500000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888106318237 R9 =1ffff11020c63046 R10=dffffc0000000000 R11=ffffffff854f3380
R12=dffffc0000000000 R13=ffffffff99afa8d0 R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f33fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055aba72d27e8 CR3=0000000027fe4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
