last executing test programs:

17.504274193s ago: executing program 1 (id=473):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@var={0x3, 0x0, 0x0, 0xe, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000180)=""/161, 0x45, 0xa1, 0x1}, 0x28)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x20, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100", 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

17.451414811s ago: executing program 1 (id=476):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x3})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0)

17.401527892s ago: executing program 1 (id=481):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48)

17.39811677s ago: executing program 0 (id=483):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800)

17.342895418s ago: executing program 1 (id=485):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b564", 0x2}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18"], 0x18}, 0x8080)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0)

17.342744677s ago: executing program 0 (id=486):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x83}}]}, 0xc4}}, 0x2c004010)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x15, 0x105, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x0, 0x2}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0)

17.342452225s ago: executing program 1 (id=487):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8)
listen(r0, 0x5)
accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c)

17.283391502s ago: executing program 0 (id=489):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010100}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c)

17.283070295s ago: executing program 0 (id=491):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x4)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0)

17.162607099s ago: executing program 0 (id=495):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)

17.1617848s ago: executing program 0 (id=497):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x9, {0x4, [{0x3, 0x8}, {0x2, 0x5}, {0x1, 0xc6}, {0x1, 0xee}]}}, 0xc)

16.9697331s ago: executing program 1 (id=502):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r2, 0x0, 0x9)
mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0xd, @loopback, 0x4}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, 0x0, 0x0)

15.752860551s ago: executing program 2 (id=517):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

15.702947436s ago: executing program 2 (id=518):
r0 = socket(0xa, 0x3, 0x3)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x29}, 0x8)

15.702539438s ago: executing program 2 (id=519):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfffffff9}]}})

15.702227994s ago: executing program 2 (id=520):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x400c0d5}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

15.644329275s ago: executing program 2 (id=521):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f00000000c0)=0x1, 0x4)

15.644176419s ago: executing program 2 (id=522):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000a40)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x4, @a_listen={0x5, 0x3, 0x4, 0x80, 0x3, 0x4, 0x5, "", 0x4, 0xb, 0x2b, 0x3, 0x1, "dc"}}, 0x10)

1.994494017s ago: executing program 32 (id=497):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x9, {0x4, [{0x3, 0x8}, {0x2, 0x5}, {0x1, 0xc6}, {0x1, 0xee}]}}, 0xc)

1.952969424s ago: executing program 33 (id=502):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
write$cgroup_devices(r2, 0x0, 0x9)
mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r3}, 0x18)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0xd, @loopback, 0x4}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, 0x0, 0x0)

0s ago: executing program 34 (id=522):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000a40)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x4, @a_listen={0x5, 0x3, 0x4, 0x80, 0x3, 0x4, 0x5, "", 0x4, 0xb, 0x2b, 0x3, 0x1, "dc"}}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58597' (ED25519) to the list of known hosts.
syzkaller login: [   48.985218][ T5826] cgroup: Unknown subsys name 'net'
[   49.106941][ T5826] cgroup: Unknown subsys name 'cpuset'
[   49.111067][ T5826] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.175539][ T5826] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.074491][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.090273][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.093137][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.096583][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.118550][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.121521][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.125108][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.128123][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.132549][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.135595][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.201661][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.205357][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.208498][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.211894][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.215749][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.322504][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   55.326965][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   55.461344][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.464328][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.468174][ T5844] bridge_slave_0: entered allmulticast mode
[   55.471681][ T5844] bridge_slave_0: entered promiscuous mode
[   55.478029][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.480777][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.483756][ T5840] bridge_slave_0: entered allmulticast mode
[   55.488637][ T5840] bridge_slave_0: entered promiscuous mode
[   55.492089][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.494622][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.497448][ T5844] bridge_slave_1: entered allmulticast mode
[   55.500252][ T5844] bridge_slave_1: entered promiscuous mode
[   55.508462][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.511445][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.514365][ T5840] bridge_slave_1: entered allmulticast mode
[   55.518892][ T5840] bridge_slave_1: entered promiscuous mode
[   55.539156][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   55.553765][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.559888][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.575293][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.590808][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.595712][ T5844] team0: Port device team_slave_0 added
[   55.613813][ T5844] team0: Port device team_slave_1 added
[   55.640073][ T5840] team0: Port device team_slave_0 added
[   55.665545][ T5840] team0: Port device team_slave_1 added
[   55.668618][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.671354][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.681312][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.686481][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.689235][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.692102][ T5851] bridge_slave_0: entered allmulticast mode
[   55.695681][ T5851] bridge_slave_0: entered promiscuous mode
[   55.699603][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.702454][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.705734][ T5851] bridge_slave_1: entered allmulticast mode
[   55.708874][ T5851] bridge_slave_1: entered promiscuous mode
[   55.719440][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.722275][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.732138][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.766016][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.769962][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.772578][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.782464][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.795732][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.799525][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.801829][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.811863][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.834139][ T5844] hsr_slave_0: entered promiscuous mode
[   55.836832][ T5844] hsr_slave_1: entered promiscuous mode
[   55.849071][ T5851] team0: Port device team_slave_0 added
[   55.867813][ T5851] team0: Port device team_slave_1 added
[   55.871994][ T5840] hsr_slave_0: entered promiscuous mode
[   55.874278][ T5840] hsr_slave_1: entered promiscuous mode
[   55.876833][ T5840] debugfs: 'hsr0' already exists in 'hsr'
[   55.878811][ T5840] Cannot create hsr debugfs directory
[   55.904522][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.907466][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.916299][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.931070][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.933260][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.943453][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.012346][ T5851] hsr_slave_0: entered promiscuous mode
[   56.015467][ T5851] hsr_slave_1: entered promiscuous mode
[   56.017537][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   56.019293][ T5851] Cannot create hsr debugfs directory
[   56.106795][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.115261][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.119603][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.145364][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.176003][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.187077][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.198116][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.208504][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.223597][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.231919][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.238004][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.245978][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.248768][ T5844] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.251469][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.254253][ T5844] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.259309][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.263878][  T135] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.267078][  T135] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.348025][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.358691][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.370802][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.378318][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   56.390687][  T135] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.393389][  T135] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.400395][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   56.407543][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   56.429962][  T135] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.432706][  T135] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.437353][  T135] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.440048][  T135] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.443854][  T135] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.446609][  T135] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.451952][  T135] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.454485][  T135] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.458272][  T135] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.460502][  T135] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.474594][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.534523][ T5844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.539308][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.609122][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.666260][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.672549][ T5840] veth0_vlan: entered promiscuous mode
[   56.682850][ T5840] veth1_vlan: entered promiscuous mode
[   56.689552][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.724634][ T5851] veth0_vlan: entered promiscuous mode
[   56.728658][ T5840] veth0_macvtap: entered promiscuous mode
[   56.737058][ T5840] veth1_macvtap: entered promiscuous mode
[   56.740487][ T5851] veth1_vlan: entered promiscuous mode
[   56.762038][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.770893][ T5844] veth0_vlan: entered promiscuous mode
[   56.775377][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.787450][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.792950][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.798445][ T5844] veth1_vlan: entered promiscuous mode
[   56.804624][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.818757][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.852472][ T5851] veth0_macvtap: entered promiscuous mode
[   56.861278][  T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.861485][ T5851] veth1_macvtap: entered promiscuous mode
[   56.864391][  T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.886890][ T5844] veth0_macvtap: entered promiscuous mode
[   56.898060][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.899552][ T5844] veth1_macvtap: entered promiscuous mode
[   56.901425][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.909908][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.923432][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.930832][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.940046][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.940537][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.944657][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.957219][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.960568][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.964003][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.990993][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.006532][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.022939][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.026457][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.077227][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.081616][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.099798][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.104044][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.113066][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.117292][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.124585][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.129009][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.216186][ T5842] Bluetooth: hci1: command tx timeout
[   57.216355][ T5232] Bluetooth: hci0: command tx timeout
[   57.295445][ T5232] Bluetooth: hci2: command tx timeout
[   57.432748][ T5932] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.604507][ T5944] netlink: 'syz.2.17': attribute type 3 has an invalid length.
[   57.662327][ T5948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19'.
[   57.672637][ T5948] syz_tun: entered promiscuous mode
[   57.678688][ T5948] syz_tun: left promiscuous mode
[   57.963243][ T5966] netlink: 'syz.1.27': attribute type 13 has an invalid length.
[   57.971093][ T5966] netlink: 'syz.1.27': attribute type 17 has an invalid length.
[   58.093845][ T5966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   58.332463][ T5995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.38'.
[   58.414151][ T6002] netlink: 'syz.2.41': attribute type 6 has an invalid length.
[   58.440733][ T6002] netlink: 'syz.2.41': attribute type 6 has an invalid length.
[   58.448658][ T6002] Zero length message leads to an empty skb
[   58.550863][ T6016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.48'.
[   58.675626][ T6029] bond_slave_0: entered promiscuous mode
[   58.677908][ T6029] bond_slave_1: entered promiscuous mode
[   58.684730][ T6028] bond_slave_0: left promiscuous mode
[   58.686648][ T6028] bond_slave_1: left promiscuous mode
[   58.723883][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.727250][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.813448][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.820638][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.861891][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'.
[   58.887844][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.891511][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.900603][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.904196][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.960245][ T6038] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.102937][ T6044] netlink: 'syz.1.61': attribute type 1 has an invalid length.
[   59.108422][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'.
[   59.116355][ T6044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.61'.
[   59.295094][ T5232] Bluetooth: hci1: command tx timeout
[   59.295950][ T5842] Bluetooth: hci0: command tx timeout
[   59.375366][ T5842] Bluetooth: hci2: command tx timeout
[   59.523060][ T5851] cgroup: fork rejected by pids controller in /syz1
[   60.082303][ T6083] syz.2.79 uses obsolete (PF_INET,SOCK_PACKET)
[   60.220748][ T6091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'.
[   60.361640][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'.
[   60.388816][ T6109] netlink: 'syz.2.91': attribute type 1 has an invalid length.
[   60.391621][ T6109] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.91'.
[   60.604447][ T6133] netlink: 260 bytes leftover after parsing attributes in process `syz.0.104'.
[   61.027286][ T6176] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   61.375551][ T5842] Bluetooth: hci1: command tx timeout
[   61.375886][ T5232] Bluetooth: hci0: command tx timeout
[   61.461341][ T6208] warning: `syz.0.140' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.954156][ T5853] bridge_slave_1: left allmulticast mode
[   61.972215][ T5853] bridge_slave_1: left promiscuous mode
[   61.982055][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.001980][ T5853] bridge_slave_0: left allmulticast mode
[   62.004327][ T5853] bridge_slave_0: left promiscuous mode
[   62.007572][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.068086][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.070956][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.074030][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.081940][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.086423][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.212651][ T5853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.218824][ T5853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.225353][ T5853] bond0 (unregistering): Released all slaves
[   62.236155][ T6248] netlink: 'syz.2.159': attribute type 3 has an invalid length.
[   62.399549][ T6265] netlink: 'syz.0.165': attribute type 8 has an invalid length.
[   62.542036][ T5853] hsr_slave_0: left promiscuous mode
[   62.547470][ T5853] hsr_slave_1: left promiscuous mode
[   62.550415][ T5853] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.553816][ T5853] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.611680][ T5853] team0 (unregistering): Port device team_slave_1 removed
[   62.623979][ T5853] team0 (unregistering): Port device team_slave_0 removed
[   62.672962][ T6241] chnl_net:caif_netlink_parms(): no params data found
[   62.725979][ T6284] netlink: 'syz.0.172': attribute type 1 has an invalid length.
[   62.799795][ T6284] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   62.804685][ T6284] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   62.859070][ T6298] gretap1: entered promiscuous mode
[   62.863462][ T6298] bond2: (slave gretap1): making interface the new active one
[   62.869239][ T6298] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   62.914069][ T6241] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.919562][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.922407][ T6241] bridge_slave_0: entered allmulticast mode
[   62.928529][ T6241] bridge_slave_0: entered promiscuous mode
[   62.936806][ T6241] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.941507][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.944617][ T6241] bridge_slave_1: entered allmulticast mode
[   62.948633][ T6241] bridge_slave_1: entered promiscuous mode
[   62.970849][ T6241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.987325][ T6241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.024017][ T6241] team0: Port device team_slave_0 added
[   63.044400][ T6241] team0: Port device team_slave_1 added
[   63.073641][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.085142][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.105097][ T6241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.113404][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.130470][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.152842][ T6241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.259346][ T6241] hsr_slave_0: entered promiscuous mode
[   63.262358][ T6241] hsr_slave_1: entered promiscuous mode
[   63.278166][ T6241] debugfs: 'hsr0' already exists in 'hsr'
[   63.286718][ T6241] Cannot create hsr debugfs directory
[   63.455365][ T5232] Bluetooth: hci1: command tx timeout
[   63.464983][ T5232] Bluetooth: hci0: command tx timeout
[   63.822119][ T6357] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.952759][ T6241] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.960947][ T6241] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.967903][ T6241] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.986268][ T6241] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.142762][ T6371] __nla_validate_parse: 8 callbacks suppressed
[   64.142781][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'.
[   64.185003][ T5232] Bluetooth: hci2: command tx timeout
[   64.271716][ T6241] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.303949][ T6241] 8021q: adding VLAN 0 to HW filter on device team0
[   64.320554][ T3625] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.323590][ T3625] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.346147][ T3625] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.348770][ T3625] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.450825][ T6392] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   64.506775][ T6396] netlink: 'syz.0.200': attribute type 1 has an invalid length.
[   64.517399][ T6241] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.555926][ T6241] veth0_vlan: entered promiscuous mode
[   64.561817][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'.
[   64.563524][ T6241] veth1_vlan: entered promiscuous mode
[   64.592447][ T6241] veth0_macvtap: entered promiscuous mode
[   64.597531][ T6241] veth1_macvtap: entered promiscuous mode
[   64.609659][ T6241] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.618464][ T6241] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.627859][ T5860] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.630937][ T5860] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.635692][ T5860] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.639222][ T5860] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.678985][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.682047][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.698323][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.701550][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.927696][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'.
[   64.943690][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'.
[   64.951615][ T6415] netlink: 'syz.2.206': attribute type 5 has an invalid length.
[   65.053375][ T6422] tipc: Started in network mode
[   65.060758][ T6422] tipc: Node identity 7f000001, cluster identity 4711
[   65.067697][ T6422] tipc: Enabled bearer <udp:syz2>, priority 10
[   65.129019][ T6434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.212'.
[   65.143125][ T6422] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   65.153649][ T6422] tipc: Enabled bearer <udp:syz0>, priority 10
[   66.145348][ T5893] tipc: Node number set to 2130706433
[   66.266182][ T5232] Bluetooth: hci2: command tx timeout
[   66.300073][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'.
[   66.372605][ T6543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.540688][ T6554] netlink: 36 bytes leftover after parsing attributes in process `syz.1.259'.
[   66.763607][ T6566] netlink: 'syz.1.262': attribute type 21 has an invalid length.
[   66.866734][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'.
[   67.225205][ T6586] syzkaller1: entered promiscuous mode
[   67.227075][ T6586] syzkaller1: entered allmulticast mode
[   67.236272][ T6586] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[   67.707624][ T6600] netlink: 100 bytes leftover after parsing attributes in process `syz.1.276'.
[   67.947530][ T6614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.280'.
[   68.335433][ T5232] Bluetooth: hci2: command tx timeout
[   69.520811][ T6683] __nla_validate_parse: 1 callbacks suppressed
[   69.520825][ T6683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.307'.
[   69.541794][ T6683] syzkaller1: entered promiscuous mode
[   69.544085][ T6683] syzkaller1: entered allmulticast mode
[   69.586047][ T6693] syzkaller0: entered promiscuous mode
[   69.588091][ T6693] syzkaller0: entered allmulticast mode
[   69.673862][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'.
[   69.982542][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'.
[   70.353295][ T6769] netlink: 'syz.1.342': attribute type 1 has an invalid length.
[   70.361377][ T6769] netlink: 144 bytes leftover after parsing attributes in process `syz.1.342'.
[   70.366296][ T6769] netlink: 28 bytes leftover after parsing attributes in process `syz.1.342'.
[   70.415013][ T5232] Bluetooth: hci2: command tx timeout
[   70.443510][ T6782] bridge0: port 3(netdevsim2) entered blocking state
[   70.451279][ T6782] bridge0: port 3(netdevsim2) entered disabled state
[   70.455126][ T6782] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[   70.458718][ T6782] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[   70.462043][ T6782] bridge0: port 3(netdevsim2) entered blocking state
[   70.464715][ T6782] bridge0: port 3(netdevsim2) entered forwarding state
[   70.583935][ T6795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.355'.
[   70.587251][ T6795] netlink: 224 bytes leftover after parsing attributes in process `syz.1.355'.
[   70.810785][ T6806] netlink: 'syz.1.360': attribute type 3 has an invalid length.
[   70.874489][ T6813] netlink: 9 bytes leftover after parsing attributes in process `syz.1.363'.
[   71.219341][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.222031][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.569899][ T6849] netlink: 348 bytes leftover after parsing attributes in process `syz.2.381'.
[   71.632802][ T6854] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.658575][ T6854] syzkaller0: entered promiscuous mode
[   71.660787][ T6854] syzkaller0: entered allmulticast mode
[   71.747979][ T6815] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   71.752079][ T6863] tipc: Resetting bearer <eth:syzkaller0>
[   71.769488][ T6853] tipc: Resetting bearer <eth:syzkaller0>
[   71.781775][ T6853] tipc: Disabling bearer <eth:syzkaller0>
[   71.977544][ T6890] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.027400][ T6899] netlink: 'syz.2.403': attribute type 1 has an invalid length.
[   72.029930][ T6899] netlink: 224 bytes leftover after parsing attributes in process `syz.2.403'.
[   72.289568][ T6935] netlink: 'syz.2.419': attribute type 7 has an invalid length.
[   72.302761][ T6935] netlink: 'syz.2.419': attribute type 8 has an invalid length.
[   72.313001][ T6935] netlink: 'syz.2.419': attribute type 4 has an invalid length.
[   72.511071][ T6960] netlink: 'syz.2.433': attribute type 2 has an invalid length.
[   72.523830][ T6960] netlink: 'syz.2.433': attribute type 1 has an invalid length.
[   72.711732][ T6977] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.714691][ T6977] batadv_slave_1: entered promiscuous mode
[   72.858464][ T6979] netlink: 'syz.2.442': attribute type 1 has an invalid length.
[   72.861643][ T6979] netlink: 'syz.2.442': attribute type 4 has an invalid length.
[   72.976505][ T5232] Bluetooth: hci0: command 0x0401 tx timeout
[   73.090132][ T7006] sctp: [Deprecated]: syz.0.455 (pid 7006) Use of struct sctp_assoc_value in delayed_ack socket option.
[   73.090132][ T7006] Use struct sctp_sack_info instead
[   73.096881][ T7006] sctp: [Deprecated]: syz.0.455 (pid 7006) Use of struct sctp_assoc_value in delayed_ack socket option.
[   73.096881][ T7006] Use struct sctp_sack_info instead
[   73.158590][   T24] cfg80211: failed to load regulatory.db
[   73.259929][ T7022] bridge_slave_1: left allmulticast mode
[   73.264671][ T7022] bridge_slave_1: left promiscuous mode
[   73.267362][ T7022] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.271542][ T7022] bridge_slave_0: left allmulticast mode
[   73.274011][ T7022] bridge_slave_0: left promiscuous mode
[   73.284901][ T7022] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.361191][ T7121] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   74.366559][ T7121] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   74.414702][ T7121] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   74.420256][ T7121] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   74.813700][ T7121] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   74.819527][ T7121] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   75.236144][ T7179] netlink: 'syz.2.516': attribute type 11 has an invalid length.
[   75.238684][ T7179] netlink: 'syz.2.516': attribute type 11 has an invalid length.
[   75.241430][ T7179] __nla_validate_parse: 11 callbacks suppressed
[   75.241439][ T7179] netlink: 224 bytes leftover after parsing attributes in process `syz.2.516'.
[   75.298816][ T5853] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.656968][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.659193][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.101646][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.105058][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  233.135265][   T34] INFO: task kworker/1:0:24 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
[  233.138589][   T34]       Not tainted syzkaller #0
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  233.140767][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.145698][   T34] task:kworker/1:0     state:D stack:26072 pid:24    tgid:24    ppid:2      task_flags:0x4208060 flags:0x00004000
[  233.150470][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  233.153033][   T34] Call Trace:
[  233.154263][   T34]  <TASK>
[  233.172025][   T34]  __schedule+0x1798/0x4cc0
[  233.173473][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  233.175580][   T34]  ? __pfx___schedule+0x10/0x10
[  233.177105][   T34]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  233.178775][   T34]  ? lock_release+0x4b/0x3e0
[  233.180370][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.182341][   T34]  schedule+0x165/0x360
[  233.184122][   T34]  schedule_preempt_disabled+0x13/0x30
[  233.186918][   T34]  __mutex_lock+0x7e6/0x1350
[  233.188827][   T34]  ? __mutex_lock+0x5bb/0x1350
[  233.190705][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  233.193129][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.195614][   T34]  ? lock_acquire+0x5f/0x360
[  233.197483][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  233.199730][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  233.201987][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  233.203751][   T34]  process_scheduled_works+0xae1/0x17b0
[  233.206216][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  233.208131][   T34]  worker_thread+0x8a0/0xda0
[  233.209532][   T34]  kthread+0x711/0x8a0
[  233.210811][   T34]  ? __pfx_worker_thread+0x10/0x10
[  233.212627][   T34]  ? __pfx_kthread+0x10/0x10
[  233.214457][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  233.217226][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.219317][   T34]  ? __pfx_kthread+0x10/0x10
[  233.221187][   T34]  ret_from_fork+0x3fc/0x770
[  233.223050][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  233.225512][   T34]  ? __switch_to_asm+0x39/0x70
[  233.227474][   T34]  ? __switch_to_asm+0x33/0x70
[  233.229407][   T34]  ? __pfx_kthread+0x10/0x10
[  233.231281][   T34]  ret_from_fork_asm+0x1a/0x30
[  233.233245][   T34]  </TASK>
[  233.234628][   T34] INFO: task syz.0.497:7107 blocked for more than 143 seconds.
[  233.238540][   T34]       Not tainted syzkaller #0
[  233.240519][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.243887][   T34] task:syz.0.497       state:D stack:25224 pid:7107  tgid:7107  ppid:5840   task_flags:0x400040 flags:0x00004004
[  233.249068][   T34] Call Trace:
[  233.250464][   T34]  <TASK>
[  233.251655][   T34]  __schedule+0x1798/0x4cc0
[  233.253502][   T34]  ? __fput+0x44c/0xa70
[  233.255649][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.257604][   T34]  ? kernfs_should_drain_open_files+0x20/0x2d0
[  233.260117][   T34]  ? __pfx___schedule+0x10/0x10
[  233.262086][   T34]  ? schedule+0x91/0x360
[  233.263761][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.266273][   T34]  ? lock_release+0x4b/0x3e0
[  233.268176][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  233.270528][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  233.272963][   T34]  schedule+0x165/0x360
[  233.274645][   T34]  schedule_preempt_disabled+0x13/0x30
[  233.277395][   T34]  __mutex_lock+0x7e6/0x1350
[  233.279309][   T34]  ? __mutex_lock+0x5bb/0x1350
[  233.281118][   T34]  ? rfkill_unregister+0xc8/0x220
[  233.282680][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.284640][   T34]  ? __pfx_device_del+0x10/0x10
[  233.287194][   T34]  rfkill_unregister+0xc8/0x220
[  233.288716][   T34]  nfc_unregister_device+0x96/0x2a0
[  233.290365][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  233.292539][   T34]  virtual_ncidev_close+0x56/0x90
[  233.294540][   T34]  __fput+0x44c/0xa70
[  233.296780][   T34]  task_work_run+0x1d4/0x260
[  233.298667][   T34]  ? __pfx_task_work_run+0x10/0x10
[  233.300752][   T34]  ? __pfx___se_sys_close_range+0x10/0x10
[  233.302751][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.304397][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.306343][   T34]  exit_to_user_mode_loop+0xec/0x110
[  233.308027][   T34]  do_syscall_64+0x2bd/0x3b0
[  233.309640][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.312023][   T34]  ? exc_page_fault+0x9f/0xf0
[  233.313857][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.316571][   T34] RIP: 0033:0x7f40c698ebe9
[  233.318036][   T34] RSP: 002b:00007fff36c49708 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  233.320611][   T34] RAX: 0000000000000000 RBX: 00007f40c6bb7da0 RCX: 00007f40c698ebe9
[  233.323019][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  233.326096][   T34] RBP: 00007f40c6bb7da0 R08: 0000000000000098 R09: 0000000736c499ff
[  233.328992][   T34] R10: 00007f40c6bb7cb0 R11: 0000000000000246 R12: 000000000001234e
[  233.331385][   T34] R13: 00007f40c6bb6090 R14: ffffffffffffffff R15: 00007fff36c49820
[  233.334242][   T34]  </TASK>
[  233.336088][   T34] INFO: task syz.1.502:7121 blocked for more than 143 seconds.
[  233.338843][   T34]       Not tainted syzkaller #0
[  233.340396][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.343054][   T34] task:syz.1.502       state:D stack:24560 pid:7121  tgid:7120  ppid:6241   task_flags:0x400040 flags:0x00004006
[  233.348412][   T34] Call Trace:
[  233.349797][   T34]  <TASK>
[  233.351029][   T34]  __schedule+0x1798/0x4cc0
[  233.352849][   T34]  ? stack_trace_save+0x9c/0xe0
[  233.355168][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  233.357346][   T34]  ? __pfx___schedule+0x10/0x10
[  233.359371][   T34]  ? schedule+0x91/0x360
[  233.361138][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.363129][   T34]  ? lock_release+0x4b/0x3e0
[  233.365470][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  233.367795][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  233.370295][   T34]  schedule+0x165/0x360
[  233.371951][   T34]  schedule_preempt_disabled+0x13/0x30
[  233.374083][   T34]  __mutex_lock+0x7e6/0x1350
[  233.376038][   T34]  ? __mutex_lock+0x5bb/0x1350
[  233.378207][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  233.380350][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.382338][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  233.384433][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  233.386855][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  233.389301][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  233.391136][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  233.393024][   T34]  rfkill_set_block+0x1d2/0x440
[  233.395088][   T34]  rfkill_fop_write+0x44b/0x570
[  233.397183][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  233.399337][   T34]  ? __pfx_security_file_permission+0x10/0x10
[  233.401734][   T34]  ? rw_verify_area+0x255/0x4d0
[  233.403687][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  233.405907][   T34]  vfs_write+0x27e/0xb30
[  233.407771][   T34]  ? __pfx_vfs_write+0x10/0x10
[  233.409774][   T34]  ? lock_release+0x4b/0x3e0
[  233.411652][   T34]  ? __fget_files+0x2a/0x420
[  233.413466][   T34]  ? __fget_files+0x3a0/0x420
[  233.415433][   T34]  ? __fget_files+0x2a/0x420
[  233.417623][   T34]  ksys_write+0x145/0x250
[  233.419389][   T34]  ? __pfx_ksys_write+0x10/0x10
[  233.421348][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.423279][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.425342][   T34]  do_syscall_64+0xfa/0x3b0
[  233.427390][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.429785][   T34]  ? exc_page_fault+0x9f/0xf0
[  233.431680][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.434003][   T34] RIP: 0033:0x7f431258ebe9
[  233.435849][   T34] RSP: 002b:00007f43133e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  233.439282][   T34] RAX: ffffffffffffffda RBX: 00007f43127b5fa0 RCX: 00007f431258ebe9
[  233.442437][   T34] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004
[  233.445688][   T34] RBP: 00007f4312611e19 R08: 0000000000000000 R09: 0000000000000000
[  233.448910][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.451386][   T34] R13: 00007f43127b6038 R14: 00007f43127b5fa0 R15: 00007ffc002d6d58
[  233.454040][   T34]  </TASK>
[  233.455200][   T34] INFO: task syz.2.522:7191 blocked for more than 143 seconds.
[  233.457735][   T34]       Not tainted syzkaller #0
[  233.459335][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.462506][   T34] task:syz.2.522       state:D stack:25976 pid:7191  tgid:7190  ppid:5844   task_flags:0x400040 flags:0x00004004
[  233.468252][   T34] Call Trace:
[  233.469611][   T34]  <TASK>
[  233.470760][   T34]  __schedule+0x1798/0x4cc0
[  233.472516][   T34]  ? __pfx___schedule+0x10/0x10
[  233.474406][   T34]  ? schedule+0x91/0x360
[  233.476152][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.477867][   T34]  ? lock_release+0x4b/0x3e0
[  233.479466][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  233.481762][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  233.484309][   T34]  schedule+0x165/0x360
[  233.486047][   T34]  schedule_preempt_disabled+0x13/0x30
[  233.488444][   T34]  __mutex_lock+0x7e6/0x1350
[  233.490350][   T34]  ? __mutex_lock+0x5bb/0x1350
[  233.492224][   T34]  ? rfkill_register+0x37/0x8e0
[  233.494153][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.496235][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  233.498693][   T34]  ? device_initialize+0x24b/0x440
[  233.500765][   T34]  rfkill_register+0x37/0x8e0
[  233.502664][   T34]  nfc_register_device+0x14a/0x320
[  233.504235][   T34]  nci_register_device+0x87f/0x9d0
[  233.506263][   T34]  ? __pfx_nci_register_device+0x10/0x10
[  233.508587][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  233.510490][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  233.512559][   T34]  virtual_ncidev_open+0x129/0x1a0
[  233.514583][   T34]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  233.516911][   T34]  misc_open+0x2bc/0x330
[  233.519005][   T34]  chrdev_open+0x4cc/0x5e0
[  233.520764][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  233.522740][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  233.525371][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  233.527540][   T34]  do_dentry_open+0x953/0x13f0
[  233.529469][   T34]  vfs_open+0x3b/0x340
[  233.531089][   T34]  ? path_openat+0x2ecd/0x3830
[  233.532976][   T34]  path_openat+0x2ee5/0x3830
[  233.534554][   T34]  ? arch_stack_walk+0xfc/0x150
[  233.536415][   T34]  ? stack_depot_save_flags+0x40/0x860
[  233.538784][   T34]  ? __pfx_path_openat+0x10/0x10
[  233.540765][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.542966][   T34]  do_filp_open+0x1fa/0x410
[  233.544712][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  233.546416][   T34]  ? _raw_spin_unlock+0x28/0x50
[  233.548245][   T34]  ? alloc_fd+0x64c/0x6c0
[  233.549659][   T34]  do_sys_openat2+0x121/0x1c0
[  233.551199][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  233.552937][   T34]  ? lock_release+0x4b/0x3e0
[  233.554424][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  233.556406][   T34]  __x64_sys_openat+0x138/0x170
[  233.558197][   T34]  do_syscall_64+0xfa/0x3b0
[  233.559675][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.561719][   T34]  ? exc_page_fault+0x9f/0xf0
[  233.563261][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.565362][   T34] RIP: 0033:0x7f8695b8ebe9
[  233.567313][   T34] RSP: 002b:00007f8696937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  233.570229][   T34] RAX: ffffffffffffffda RBX: 00007f8695db5fa0 RCX: 00007f8695b8ebe9
[  233.573020][   T34] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  233.575680][   T34] RBP: 00007f8695c11e19 R08: 0000000000000000 R09: 0000000000000000
[  233.578430][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.581279][   T34] R13: 00007f8695db6038 R14: 00007f8695db5fa0 R15: 00007ffcef279568
[  233.584049][   T34]  </TASK>
[  233.585178][   T34] INFO: task syz-executor:7201 blocked for more than 143 seconds.
[  233.587911][   T34]       Not tainted syzkaller #0
[  233.589487][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.592429][   T34] task:syz-executor    state:D stack:28168 pid:7201  tgid:7201  ppid:1      task_flags:0x400040 flags:0x00004000
[  233.597099][   T34] Call Trace:
[  233.598199][   T34]  <TASK>
[  233.599131][   T34]  __schedule+0x1798/0x4cc0
[  233.600600][   T34]  ? kasan_save_free_info+0x46/0x50
[  233.602244][   T34]  ? tomoyo_check_open_permission+0x2c2/0x3b0
[  233.604147][   T34]  ? vfs_open+0x3b/0x340
[  233.605557][   T34]  ? path_openat+0x2ee5/0x3830
[  233.607035][   T34]  ? do_sys_openat2+0x121/0x1c0
[  233.608544][   T34]  ? __x64_sys_openat+0x138/0x170
[  233.610137][   T34]  ? do_syscall_64+0xfa/0x3b0
[  233.611635][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.613528][   T34]  ? __pfx___schedule+0x10/0x10
[  233.615200][   T34]  ? schedule+0x91/0x360
[  233.616739][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.618275][   T34]  ? lock_release+0x4b/0x3e0
[  233.619726][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  233.621572][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  233.623482][   T34]  schedule+0x165/0x360
[  233.624894][   T34]  schedule_preempt_disabled+0x13/0x30
[  233.626924][   T34]  __mutex_lock+0x7e6/0x1350
[  233.628684][   T34]  ? __mutex_lock+0x5bb/0x1350
[  233.630241][   T34]  ? misc_open+0x51/0x330
[  233.631705][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.633328][   T34]  misc_open+0x51/0x330
[  233.634643][   T34]  chrdev_open+0x4cc/0x5e0
[  233.636176][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  233.637776][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  233.639939][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  233.641515][   T34]  do_dentry_open+0x953/0x13f0
[  233.643074][   T34]  vfs_open+0x3b/0x340
[  233.644573][   T34]  ? path_openat+0x2ecd/0x3830
[  233.646341][   T34]  path_openat+0x2ee5/0x3830
[  233.647861][   T34]  ? __pfx_css_rstat_updated+0x10/0x10
[  233.649627][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.651217][   T34]  ? count_memcg_event_mm+0x21/0x260
[  233.652937][   T34]  ? count_memcg_event_mm+0x21/0x260
[  233.654687][   T34]  ? lock_release+0x4b/0x3e0
[  233.656408][   T34]  ? __pfx_path_openat+0x10/0x10
[  233.658037][   T34]  ? __pfx___up_read+0x10/0x10
[  233.659555][   T34]  ? lock_release+0x4b/0x3e0
[  233.661038][   T34]  do_filp_open+0x1fa/0x410
[  233.662460][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  233.664065][   T34]  ? _raw_spin_unlock+0x28/0x50
[  233.665944][   T34]  ? alloc_fd+0x64c/0x6c0
[  233.667476][   T34]  do_sys_openat2+0x121/0x1c0
[  233.669043][   T34]  ? lock_release+0x4b/0x3e0
[  233.670559][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  233.672495][   T34]  ? fd_install+0x97/0x540
[  233.674104][   T34]  ? fd_install+0x30d/0x540
[  233.675756][   T34]  __x64_sys_openat+0x138/0x170
[  233.677622][   T34]  do_syscall_64+0xfa/0x3b0
[  233.679125][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.681129][   T34]  ? exc_page_fault+0x9f/0xf0
[  233.682697][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.684929][   T34] RIP: 0033:0x7f024b38d4d1
[  233.686747][   T34] RSP: 002b:00007ffc3fab04e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  233.689411][   T34] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f024b38d4d1
[  233.691855][   T34] RDX: 0000000000000002 RSI: 00007f024b412822 RDI: 00000000ffffff9c
[  233.694264][   T34] RBP: 00007f024b412822 R08: 0000000000000000 R09: 00007f024c0ed6c0
[  233.697098][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  233.699634][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  233.702047][   T34]  </TASK>
[  233.703031][   T34] INFO: task syz-executor:7203 blocked for more than 143 seconds.
[  233.705455][   T34]       Not tainted syzkaller #0
[  233.706958][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.709567][   T34] task:syz-executor    state:D stack:27736 pid:7203  tgid:7203  ppid:1      task_flags:0x400040 flags:0x00004000
[  233.713184][   T34] Call Trace:
[  233.714208][   T34]  <TASK>
[  233.715241][   T34]  __schedule+0x1798/0x4cc0
[  233.716688][   T34]  ? kasan_save_free_info+0x46/0x50
[  233.718332][   T34]  ? tomoyo_check_open_permission+0x2c2/0x3b0
[  233.720194][   T34]  ? vfs_open+0x3b/0x340
[  233.721606][   T34]  ? path_openat+0x2ee5/0x3830
[  233.723159][   T34]  ? do_sys_openat2+0x121/0x1c0
[  233.724706][   T34]  ? __x64_sys_openat+0x138/0x170
[  233.726378][   T34]  ? do_syscall_64+0xfa/0x3b0
[  233.727876][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.729780][   T34]  ? __pfx___schedule+0x10/0x10
[  233.731340][   T34]  ? schedule+0x91/0x360
[  233.732678][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.734190][   T34]  ? lock_release+0x4b/0x3e0
[  233.735701][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  233.737781][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  233.739969][   T34]  schedule+0x165/0x360
[  233.741235][   T34]  schedule_preempt_disabled+0x13/0x30
[  233.742920][   T34]  __mutex_lock+0x7e6/0x1350
[  233.744374][   T34]  ? __mutex_lock+0x5bb/0x1350
[  233.745928][   T34]  ? misc_open+0x51/0x330
[  233.747250][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.748831][   T34]  misc_open+0x51/0x330
[  233.750110][   T34]  chrdev_open+0x4cc/0x5e0
[  233.751517][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  233.753030][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  233.755007][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  233.756654][   T34]  do_dentry_open+0x953/0x13f0
[  233.758358][   T34]  vfs_open+0x3b/0x340
[  233.759694][   T34]  ? path_openat+0x2ecd/0x3830
[  233.761287][   T34]  path_openat+0x2ee5/0x3830
[  233.762866][   T34]  ? __pfx_css_rstat_updated+0x10/0x10
[  233.764989][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.766818][   T34]  ? count_memcg_event_mm+0x21/0x260
[  233.768682][   T34]  ? count_memcg_event_mm+0x21/0x260
[  233.770676][   T34]  ? lock_release+0x4b/0x3e0
[  233.772239][   T34]  ? __pfx_path_openat+0x10/0x10
[  233.773924][   T34]  ? __pfx___up_read+0x10/0x10
[  233.775959][   T34]  ? lock_release+0x4b/0x3e0
[  233.777521][   T34]  do_filp_open+0x1fa/0x410
[  233.779145][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  233.780832][   T34]  ? _raw_spin_unlock+0x28/0x50
[  233.782625][   T34]  ? alloc_fd+0x64c/0x6c0
[  233.784221][   T34]  do_sys_openat2+0x121/0x1c0
[  233.786208][   T34]  ? lock_release+0x4b/0x3e0
[  233.788127][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  233.790230][   T34]  ? fd_install+0x97/0x540
[  233.792043][   T34]  ? fd_install+0x30d/0x540
[  233.793888][   T34]  __x64_sys_openat+0x138/0x170
[  233.795983][   T34]  do_syscall_64+0xfa/0x3b0
[  233.797823][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.800263][   T34]  ? exc_page_fault+0x9f/0xf0
[  233.802202][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.804574][   T34] RIP: 0033:0x7ff773b8d4d1
[  233.806569][   T34] RSP: 002b:00007ffc8a94eb30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  233.809996][   T34] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff773b8d4d1
[  233.813192][   T34] RDX: 0000000000000002 RSI: 00007ff773c12822 RDI: 00000000ffffff9c
[  233.816510][   T34] RBP: 00007ff773c12822 R08: 0000000000000000 R09: 00007ff7748ed6c0
[  233.819708][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  233.822945][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  233.826261][   T34]  </TASK>
[  233.827553][   T34] INFO: lockdep is turned off.
[  233.829457][   T34] NMI backtrace for cpu 0
[  233.829470][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  233.829484][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.829492][   T34] Call Trace:
[  233.829498][   T34]  <TASK>
[  233.829504][   T34]  dump_stack_lvl+0x189/0x250
[  233.829524][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.829539][   T34]  ? __pfx__printk+0x10/0x10
[  233.829560][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  233.829579][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  233.829594][   T34]  ? __pfx__printk+0x10/0x10
[  233.829611][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  233.829631][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  233.829648][   T34]  watchdog+0xf93/0xfe0
[  233.829667][   T34]  ? watchdog+0x1de/0xfe0
[  233.829685][   T34]  kthread+0x711/0x8a0
[  233.829702][   T34]  ? __pfx_watchdog+0x10/0x10
[  233.829718][   T34]  ? __pfx_kthread+0x10/0x10
[  233.829734][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  233.829750][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.829767][   T34]  ? __pfx_kthread+0x10/0x10
[  233.829812][   T34]  ret_from_fork+0x3fc/0x770
[  233.829827][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  233.829841][   T34]  ? __switch_to_asm+0x39/0x70
[  233.829858][   T34]  ? __switch_to_asm+0x33/0x70
[  233.829873][   T34]  ? __pfx_kthread+0x10/0x10
[  233.829889][   T34]  ret_from_fork_asm+0x1a/0x30
[  233.829908][   T34]  </TASK>
[  233.829913][   T34] Sending NMI from CPU 0 to CPUs 1:
[  233.889545][    C1] NMI backtrace for cpu 1
[  233.889562][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  233.889576][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.889585][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  233.889609][    C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 56 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  233.889619][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  233.889630][    C1] RAX: 1757fb0d9b952c00 RBX: ffffffff819683b8 RCX: 1757fb0d9b952c00
[  233.889639][    C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  233.889645][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  233.889652][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38430
[  233.889660][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d0000
[  233.889668][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1a000(0000) knlGS:0000000000000000
[  233.889679][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  233.889687][    C1] CR2: 00007ffef53bcfe8 CR3: 000000010e9f4000 CR4: 00000000000006f0
[  233.889720][    C1] Call Trace:
[  233.889728][    C1]  <TASK>
[  233.889733][    C1]  default_idle+0x13/0x20
[  233.889747][    C1]  default_idle_call+0x74/0xb0
[  233.889761][    C1]  do_idle+0x1e8/0x510
[  233.889809][    C1]  ? __pfx_do_idle+0x10/0x10
[  233.889820][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  233.889837][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.889855][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  233.889867][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  233.889883][    C1]  cpu_startup_entry+0x44/0x60
[  233.889896][    C1]  start_secondary+0x101/0x110
[  233.889913][    C1]  common_startup_64+0x13e/0x147
[  233.889932][    C1]  </TASK>
[  233.892287][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  233.968843][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  233.972585][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.976710][   T34] Call Trace:
[  233.978127][   T34]  <TASK>
[  233.979358][   T34]  dump_stack_lvl+0x99/0x250
[  233.981355][   T34]  ? __asan_memcpy+0x40/0x70
[  233.983349][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.985442][   T34]  ? __pfx__printk+0x10/0x10
[  233.987438][   T34]  vpanic+0x281/0x750
[  233.989168][   T34]  ? __pfx_vpanic+0x10/0x10
[  233.991015][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.993027][   T34]  ? preempt_schedule+0xae/0xc0
[  233.995027][   T34]  ? preempt_schedule_common+0x83/0xd0
[  233.997301][   T34]  panic+0xb9/0xc0
[  233.998847][   T34]  ? __pfx_panic+0x10/0x10
[  234.000666][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  234.002875][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  234.005372][   T34]  watchdog+0xfd2/0xfe0
[  234.007139][   T34]  ? watchdog+0x1de/0xfe0
[  234.008948][   T34]  kthread+0x711/0x8a0
[  234.010623][   T34]  ? __pfx_watchdog+0x10/0x10
[  234.012547][   T34]  ? __pfx_kthread+0x10/0x10
[  234.014443][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.016533][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.018664][   T34]  ? __pfx_kthread+0x10/0x10
[  234.020554][   T34]  ret_from_fork+0x3fc/0x770
[  234.022444][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  234.024543][   T34]  ? __switch_to_asm+0x39/0x70
[  234.026529][   T34]  ? __switch_to_asm+0x33/0x70
[  234.028510][   T34]  ? __pfx_kthread+0x10/0x10
[  234.030420][   T34]  ret_from_fork_asm+0x1a/0x30
[  234.032389][   T34]  </TASK>
[  234.034317][   T34] Kernel Offset: disabled
[  234.036129][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:36:38  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000022 RBX=0000000000000022 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888106c68237 R9 =1ffff11020d8d046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afb8d8 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055de4fce6680 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000080000010015 0000000c00000028 XMM01=0000000e00000001 0000000000000006
XMM02=0043004400010015 0000000000000040 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff821109f7 RBX=ffff88802161c0d8 RCX=ffff888021213980 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc9000319f890 RSP=ffffc9000319f5d8
R8 =ffffea0000456633 R9 =1ffffd400008acc6 R10=dffffc0000000000 R11=fffff9400008acc7
R12=dffffc0000000000 R13=00007f4595e1b000 R14=8000000011598000 R15=ffffc9000319faa0
RIP=ffffffff82110a05 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4596ae7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f4595f876c3 00007f4595f876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=ffffffff89dc5a22 ffffffff00000007 XMM07=ffffffff00000000 ffffffff8a47ed4d
XMM08=ffffffff8a632729 ffffffff00000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
