D={0x5, 0x6, 0xff}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044844}, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f40), r4)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, r6, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000)
syz_open_dev$vcsu(&(0x7f0000001040), 0x6, 0x2840)

11:01:40 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x40)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r2, 0x801, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, ':@/\']*$\\!\xc8[%%U(^:}\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4008080)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c94}, 0x800)
sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000019}, 0x44000)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&\'\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x38}, 0x1, 0x0, 0x0, 0x48017}, 0x4000000)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x58, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044844}, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f40), r4)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, r6, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000)
r7 = syz_open_dev$vcsu(&(0x7f0000001040), 0x6, 0x2840)
sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7fffffff, 0xfffffffc, 0x80, 0x5]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)

11:01:40 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x0, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:40 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x40)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r2, 0x801, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, ':@/\']*$\\!\xc8[%%U(^:}\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4008080)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c94}, 0x800)
sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000019}, 0x44000)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&\'\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x38}, 0x1, 0x0, 0x0, 0x48017}, 0x4000000)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x58, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044844}, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f40), r4)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, r6, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000)
r7 = syz_open_dev$vcsu(&(0x7f0000001040), 0x6, 0x2840)
sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7fffffff, 0xfffffffc, 0x80, 0x5]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000011c0), r4)
sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1f}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, ':$#v]{!(\'\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040090}, 0x20000010)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001300), r4)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r9, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000005}, 0x800)

11:01:40 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x40)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r2, 0x801, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, ':@/\']*$\\!\xc8[%%U(^:}\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4008080)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c94}, 0x800)
sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000019}, 0x44000)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&\'\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x38}, 0x1, 0x0, 0x0, 0x48017}, 0x4000000)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x58, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044844}, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f40), r4)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, r6, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000)

11:01:40 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:40 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {0x0}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:40 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x40)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r2, 0x801, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, ':@/\']*$\\!\xc8[%%U(^:}\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4008080)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c94}, 0x800)
sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000019}, 0x44000)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&\'\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x38}, 0x1, 0x0, 0x0, 0x48017}, 0x4000000)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x58, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044844}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f40), r4)

11:01:40 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x40)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r2, 0x801, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, ':@/\']*$\\!\xc8[%%U(^:}\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4008080)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c94}, 0x800)
sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000019}, 0x44000)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&\'\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x38}, 0x1, 0x0, 0x0, 0x48017}, 0x4000000)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x58, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044844}, 0x0)

11:01:40 executing program 0:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x40)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r2, 0x801, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, ':@/\']*$\\!\xc8[%%U(^:}\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4008080)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c94}, 0x800)
sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000019}, 0x44000)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&\'\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x38}, 0x1, 0x0, 0x0, 0x48017}, 0x4000000)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x58, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044844}, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f40), r4)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, r6, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000)
r7 = syz_open_dev$vcsu(&(0x7f0000001040), 0x6, 0x2840)
sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7fffffff, 0xfffffffc, 0x80, 0x5]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000011c0), r4)
sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1f}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, ':$#v]{!(\'\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040090}, 0x20000010)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001300), r4)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r9, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000005}, 0x800)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001480), r9)
sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, r10, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)

11:01:40 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x0, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:40 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x40)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r2, 0x801, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, ':@/\']*$\\!\xc8[%%U(^:}\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4008080)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c94}, 0x800)
sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000019}, 0x44000)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&\'\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x38}, 0x1, 0x0, 0x0, 0x48017}, 0x4000000)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x58, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044844}, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f40), r4)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, r6, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000)
r7 = syz_open_dev$vcsu(&(0x7f0000001040), 0x6, 0x2840)
sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7fffffff, 0xfffffffc, 0x80, 0x5]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000011c0), r4)
sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1f}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, ':$#v]{!(\'\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040090}, 0x20000010)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001300), r4)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r9, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000005}, 0x800)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001480), r9)
sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, r10, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)

11:01:40 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:40 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x40)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r2, 0x801, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, ':@/\']*$\\!\xc8[%%U(^:}\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4008080)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c94}, 0x800)
sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000019}, 0x44000)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&\'\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x38}, 0x1, 0x0, 0x0, 0x48017}, 0x4000000)

11:01:40 executing program 0:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:40 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x7, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:40 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x0, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:40 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x40)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r2, 0x801, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, ':@/\']*$\\!\xc8[%%U(^:}\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4008080)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c94}, 0x800)
sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000019}, 0x44000)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&\'\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x38}, 0x1, 0x0, 0x0, 0x48017}, 0x4000000)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x58, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044844}, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f40), r4)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, r6, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000)
r7 = syz_open_dev$vcsu(&(0x7f0000001040), 0x6, 0x2840)
sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7fffffff, 0xfffffffc, 0x80, 0x5]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000011c0), r4)
sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1f}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, ':$#v]{!(\'\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040090}, 0x20000010)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001300), r4)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r9, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000005}, 0x800)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001480), r9)
sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, r10, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)

11:01:40 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:40 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003e40)=r7, 0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000003e80)='+-:(\x00', 0x5)
r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003ec0), 0x401, 0x0)
ioctl$NBD_SET_SOCK(r8, 0xab00, 0xffffffffffffffff)

11:01:40 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x40)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r2, 0x801, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, ':@/\']*$\\!\xc8[%%U(^:}\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4008080)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c94}, 0x800)
sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000019}, 0x44000)

11:01:40 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x40)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r2, 0x801, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, ':@/\']*$\\!\xc8[%%U(^:}\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4008080)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c94}, 0x800)

11:01:40 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x40)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r2, 0x801, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, ':@/\']*$\\!\xc8[%%U(^:}\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4008080)

11:01:40 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x7, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:40 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x40)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)

11:01:40 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:40 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003e40)=r7, 0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000003e80)='+-:(\x00', 0x5)
r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003ec0), 0x401, 0x0)
ioctl$NBD_SET_SOCK(r8, 0xab00, 0xffffffffffffffff)

11:01:40 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:40 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x40)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r2, 0x801, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, ':@/\']*$\\!\xc8[%%U(^:}\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4008080)

11:01:40 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x40)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r2, 0x801, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, ':@/\']*$\\!\xc8[%%U(^:}\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4008080)

11:01:41 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x40)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:41 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x7, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:41 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:41 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x40)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r2, 0x801, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, ':@/\']*$\\!\xc8[%%U(^:}\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4008080)

11:01:41 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:41 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003e40)=r7, 0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000003e80)='+-:(\x00', 0x5)
r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003ec0), 0x401, 0x0)
ioctl$NBD_SET_SOCK(r8, 0xab00, 0xffffffffffffffff)

11:01:41 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:41 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {0x0}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:41 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x0, 0x0, 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:41 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x40)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)

11:01:41 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003e40)=r7, 0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000003e80)='+-:(\x00', 0x5)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003ec0), 0x401, 0x0)

11:01:41 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:41 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:41 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x40)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:41 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x0, 0x0, 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:41 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:41 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:41 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:41 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {0x0}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:41 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:41 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:41 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x0, 0x0, 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:41 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003e40)=r7, 0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000003e80)='+-:(\x00', 0x5)

11:01:41 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:41 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:41 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {0x0}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:41 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:41 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003e40)=r7, 0x1)

11:01:41 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x5, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:41 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:41 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:41 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:41 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x7, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:41 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

11:01:42 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:42 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:42 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r5, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)

11:01:42 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x5, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:42 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:42 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:42 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r5, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)

11:01:42 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x7, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:42 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:42 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r5, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)

11:01:42 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:42 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x5, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:42 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:42 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:42 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x7, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:42 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:42 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:42 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r5, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:42 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:42 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:42 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:42 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:42 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:42 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:42 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:42 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:42 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:42 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:43 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:43 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:43 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:43 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:43 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:43 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:43 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:43 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:43 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:43 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:43 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:43 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:43 executing program 2:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:43 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x4, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:43 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:43 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x0, 0x0, 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:43 executing program 3:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:43 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:43 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x4, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:43 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:43 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:43 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:43 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:43 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x0, 0x0, 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:43 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x4, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:43 executing program 2:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x4, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:43 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r5, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)

11:01:43 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], 0x0}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:43 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x0, 0x0, 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:43 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:43 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:43 executing program 2:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:44 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:44 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], 0x0}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:44 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x5, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:44 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:44 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:44 executing program 2:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {0x0}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:44 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:44 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:44 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], 0x0}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:44 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:44 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:01:44 executing program 2:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:44 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x5, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:44 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:44 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:44 executing program 3:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x0, 0x0, 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:44 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x5, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:44 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:44 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:44 executing program 2:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {0x0}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:44 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:44 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:44 executing program 3:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000880}, 0x48084)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x48b1}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x20008050)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0xc004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']}#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x40)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r2, 0x801, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x17, 0x1, ':@/\']*$\\!\xc8[%%U(^:}\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4008080)

11:01:44 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:44 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003e40)=r7, 0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000003e80)='+-:(\x00', 0x5)
r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003ec0), 0x401, 0x0)
ioctl$NBD_SET_SOCK(r8, 0xab00, 0xffffffffffffffff)

11:01:44 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:44 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:44 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:45 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003e40)=r7, 0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000003e80)='+-:(\x00', 0x5)
r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003ec0), 0x401, 0x0)
ioctl$NBD_SET_SOCK(r8, 0xab00, 0xffffffffffffffff)

11:01:45 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:45 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003e40)=r7, 0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000003e80)='+-:(\x00', 0x5)
r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003ec0), 0x401, 0x0)
ioctl$NBD_SET_SOCK(r8, 0xab00, 0xffffffffffffffff)

11:01:45 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:45 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:45 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:45 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003e40)=r7, 0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000003e80)='+-:(\x00', 0x5)
r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003ec0), 0x401, 0x0)
ioctl$NBD_SET_SOCK(r8, 0xab00, 0xffffffffffffffff)

11:01:45 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003e40)=r7, 0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000003e80)='+-:(\x00', 0x5)
r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003ec0), 0x401, 0x0)
ioctl$NBD_SET_SOCK(r8, 0xab00, 0xffffffffffffffff)

11:01:45 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:45 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:45 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003e40)=r7, 0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000003e80)='+-:(\x00', 0x5)
r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003ec0), 0x401, 0x0)
ioctl$NBD_SET_SOCK(r8, 0xab00, 0xffffffffffffffff)

11:01:45 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x4, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:45 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:45 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:45 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:45 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003e40)=r7, 0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000003e80)='+-:(\x00', 0x5)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003ec0), 0x401, 0x0)

11:01:45 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003e40)=r7, 0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000003e80)='+-:(\x00', 0x5)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003ec0), 0x401, 0x0)

11:01:45 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x4, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:45 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x4, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:45 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:45 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:45 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:45 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003e40)=r7, 0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000003e80)='+-:(\x00', 0x5)

11:01:45 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x4, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:45 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:45 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003e40)=r7, 0x1)

11:01:45 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003e40)=r7, 0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000003e80)='+-:(\x00', 0x5)

11:01:45 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x4, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:45 executing program 0:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:45 executing program 0:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)

11:01:45 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:46 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:46 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

11:01:46 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003e40)=r7, 0x1)

11:01:46 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x4, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:46 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

11:01:46 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:46 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r5, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)

11:01:46 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x0, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:46 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r5, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)

11:01:46 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:46 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

11:01:46 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:46 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r5, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)

11:01:46 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

11:01:46 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r5, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)

11:01:46 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:46 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r5, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)

11:01:46 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r5, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)

11:01:46 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x0, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:46 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

11:01:46 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:46 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r5, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:46 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:46 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r5, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:46 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r5, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:46 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r5, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)

11:01:46 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x0, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:46 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:46 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r5, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)

11:01:46 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:46 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r5, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)

11:01:46 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r5, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:46 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r5, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)

11:01:46 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:47 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r5, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)

11:01:47 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:47 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:47 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r5, &(0x7f0000003740)='./file0\x00', 0x61)
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:47 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r5, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:47 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x5, &(0x7f0000001600)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:47 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r5, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:47 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:47 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:47 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:47 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r5, &(0x7f0000003740)='./file0\x00', 0x61)
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:47 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x5, &(0x7f0000001600)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:47 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
move_mount(r1, &(0x7f00000036c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:47 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:47 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:47 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x5, &(0x7f0000001600)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:47 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:47 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:47 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:47 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:47 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:47 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:47 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x4, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:47 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:47 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:47 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:47 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:47 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x0, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:47 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:47 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x4, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:47 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:47 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
move_mount(r1, &(0x7f00000036c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:47 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:48 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x0, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:48 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:48 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:48 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:48 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x4, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:48 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:48 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:48 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
move_mount(r1, &(0x7f00000036c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:48 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:48 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:48 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x0, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:48 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:48 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:48 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:48 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:48 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:48 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:48 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:48 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:48 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:48 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:48 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:48 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:48 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
fspick(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:48 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:48 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:48 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:48 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
fspick(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:48 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
fspick(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:48 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:48 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:48 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:48 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:48 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
fspick(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:49 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
fspick(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:49 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:49 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:49 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
move_mount(0xffffffffffffffff, &(0x7f00000036c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:49 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
move_mount(0xffffffffffffffff, &(0x7f00000036c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:49 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
fspick(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:49 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
move_mount(0xffffffffffffffff, &(0x7f00000036c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:49 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
fspick(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:49 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:49 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
fspick(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:49 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
move_mount(0xffffffffffffffff, &(0x7f00000036c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:49 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x0, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:49 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:49 executing program 2:
move_mount(0xffffffffffffffff, &(0x7f00000036c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:49 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
fspick(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:49 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:49 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
fspick(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:49 executing program 2:
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:49 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
fspick(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:49 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
fspick(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:49 executing program 2:
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:49 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0), 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:49 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x0, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:49 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:49 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
fspick(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:49 executing program 2:
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:49 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
fspick(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:49 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0), 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:49 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
fspick(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:49 executing program 2:
move_mount(0xffffffffffffffff, &(0x7f00000036c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x61)

11:01:49 executing program 2:
move_mount(0xffffffffffffffff, &(0x7f00000036c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0)

11:01:49 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
fspick(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:49 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
fspick(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:49 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
move_mount(0xffffffffffffffff, &(0x7f00000036c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003740)='./file0\x00', 0x61)

11:01:49 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x0, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:49 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x5, &(0x7f0000001600)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:49 executing program 3:
fspick(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:49 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0), 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:49 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
fspick(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:49 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:50 executing program 3:
fspick(0xffffffffffffffff, 0x0, 0x1)

11:01:50 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
fspick(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:50 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x5, &(0x7f0000001600)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:50 executing program 3:
fspick(0xffffffffffffffff, 0x0, 0x0)

11:01:50 executing program 0:
fspick(0xffffffffffffffff, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:50 executing program 3:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x4, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:50 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:50 executing program 0:
fspick(0xffffffffffffffff, 0x0, 0x1)

11:01:50 executing program 2:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:50 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(0x0, r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:50 executing program 0:
fspick(0xffffffffffffffff, 0x0, 0x0)

11:01:50 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x5, &(0x7f0000001600)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:50 executing program 0:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0), 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:50 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:50 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:50 executing program 2:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:50 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(0x0, r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:50 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:50 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r5, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r4, &(0x7f0000003780)='./file0\x00', 0x1)

11:01:50 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r5, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)

11:01:50 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:50 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r5, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)

11:01:50 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(0x0, r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:50 executing program 3:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x0, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:50 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r0}, 0x10)
r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r2, r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r3, &(0x7f00000008c0)='./file0\x00', r3, &(0x7f0000000900)='./file0\x00', 0x40)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r2}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r2, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000003680))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r2}, 0x8)
move_mount(r1, &(0x7f00000036c0)='./file0\x00', r6, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r1, 0xab08)
fspick(r5, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r4, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)

11:01:50 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:50 executing program 0:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:51 executing program 2:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:51 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:51 executing program 4:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x0, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:51 executing program 3:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(0x0, r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

11:01:51 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003e40)=r7, 0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000003e80)='+-:(\x00', 0x5)
r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003ec0), 0x401, 0x0)
ioctl$NBD_SET_SOCK(r8, 0xab00, 0xffffffffffffffff)

11:01:51 executing program 1:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x0, 0xb, 0x3, 0x0, 0x18, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

[  986.455302][T27130] ==================================================================
[  986.463427][T27130] BUG: KASAN: use-after-free in nfc_llcp_find_local+0xc5/0xe0
[  986.471128][T27130] Read of size 8 at addr ffff88805dc17010 by task syz-executor.4/27130
[  986.479402][T27130] 
[  986.481744][T27130] CPU: 0 PID: 27130 Comm: syz-executor.4 Not tainted 6.1.0-rc6-next-20221125-syzkaller #0
[  986.491674][T27130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[  986.501759][T27130] Call Trace:
[  986.505056][T27130]  <TASK>
[  986.508021][T27130]  dump_stack_lvl+0xd1/0x138
[  986.512719][T27130]  print_report+0x15e/0x45d
[  986.517305][T27130]  ? __phys_addr+0xc8/0x140
[  986.521873][T27130]  ? nfc_llcp_find_local+0xc5/0xe0
[  986.527045][T27130]  kasan_report+0xbf/0x1f0
[  986.531567][T27130]  ? nfc_llcp_find_local+0xc5/0xe0
[  986.536726][T27130]  nfc_llcp_find_local+0xc5/0xe0
[  986.541801][T27130]  nfc_llcp_unregister_device+0x1a/0x260
[  986.547491][T27130]  nfc_unregister_device+0x196/0x330
[  986.552825][T27130]  virtual_ncidev_close+0x52/0xb0
[  986.558001][T27130]  __fput+0x27c/0xa90
[  986.562099][T27130]  ? virtual_nci_open+0x10/0x10
[  986.567006][T27130]  task_work_run+0x16f/0x270
[  986.571625][T27130]  ? task_work_cancel+0x30/0x30
[  986.576501][T27130]  exit_to_user_mode_prepare+0x23c/0x250
[  986.582150][T27130]  syscall_exit_to_user_mode+0x1d/0x50
[  986.587653][T27130]  do_syscall_64+0x46/0xb0
[  986.592082][T27130]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  986.598058][T27130] RIP: 0033:0x7f3a8283df8b
[  986.602478][T27130] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44
[  986.622097][T27130] RSP: 002b:00007ffc88ec9f80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  986.630614][T27130] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 00007f3a8283df8b
[  986.638588][T27130] RDX: 0000000000000000 RSI: 0000001b2f8281d4 RDI: 0000000000000007
[  986.646563][T27130] RBP: 00007f3a829ad980 R08: 0000000000000000 R09: 0000000008337a43
[  986.654533][T27130] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000f0fb6
[  986.662506][T27130] R13: 00007ffc88eca080 R14: 00007f3a829abf80 R15: 0000000000000032
[  986.670489][T27130]  </TASK>
[  986.673509][T27130] 
[  986.675827][T27130] Allocated by task 27140:
[  986.680237][T27130]  kasan_save_stack+0x22/0x40
[  986.684989][T27130]  kasan_set_track+0x25/0x30
[  986.689603][T27130]  __kasan_kmalloc+0xa5/0xb0
[  986.694295][T27130]  nfc_llcp_register_device+0x49/0x9e0
[  986.699861][T27130]  nfc_register_device+0x70/0x3b0
[  986.704892][T27130]  nci_register_device+0x7cb/0xb50
[  986.710094][T27130]  virtual_ncidev_open+0x14f/0x230
[  986.715225][T27130]  misc_open+0x37a/0x4a0
[  986.719531][T27130]  chrdev_open+0x26a/0x770
[  986.723960][T27130]  do_dentry_open+0x6cc/0x13f0
[  986.728773][T27130]  path_openat+0x1bbc/0x2a50
[  986.733393][T27130]  do_filp_open+0x1ba/0x410
[  986.737917][T27130]  do_sys_openat2+0x16d/0x4c0
[  986.742610][T27130]  __x64_sys_openat+0x143/0x1f0
[  986.747474][T27130]  do_syscall_64+0x39/0xb0
[  986.751919][T27130]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  986.757835][T27130] 
[  986.760153][T27130] Freed by task 27132:
[  986.764215][T27130]  kasan_save_stack+0x22/0x40
[  986.768913][T27130]  kasan_set_track+0x25/0x30
[  986.773519][T27130]  kasan_save_free_info+0x2e/0x40
[  986.778550][T27130]  ____kasan_slab_free+0x160/0x1c0
[  986.783679][T27130]  slab_free_freelist_hook+0x8b/0x1c0
[  986.789065][T27130]  __kmem_cache_free+0xaf/0x3b0
[  986.793939][T27130]  nfc_llcp_unregister_device+0x1ba/0x260
[  986.799678][T27130]  nfc_unregister_device+0x196/0x330
[  986.805078][T27130]  virtual_ncidev_close+0x52/0xb0
[  986.810137][T27130]  __fput+0x27c/0xa90
[  986.814148][T27130]  task_work_run+0x16f/0x270
[  986.818779][T27130]  exit_to_user_mode_prepare+0x23c/0x250
[  986.824433][T27130]  syscall_exit_to_user_mode+0x1d/0x50
[  986.829916][T27130]  do_syscall_64+0x46/0xb0
[  986.834340][T27130]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  986.840250][T27130] 
[  986.842568][T27130] Last potentially related work creation:
[  986.848285][T27130]  kasan_save_stack+0x22/0x40
[  986.852981][T27130]  __kasan_record_aux_stack+0xbc/0xd0
[  986.858364][T27130]  __call_rcu_common.constprop.0+0x99/0x820
[  986.864268][T27130]  netlink_release+0xeca/0x1f10
[  986.869212][T27130]  __sock_release+0xcd/0x280
[  986.873857][T27130]  sock_close+0x1c/0x20
[  986.878031][T27130]  __fput+0x27c/0xa90
[  986.882021][T27130]  task_work_run+0x16f/0x270
[  986.886625][T27130]  exit_to_user_mode_prepare+0x23c/0x250
[  986.892263][T27130]  syscall_exit_to_user_mode+0x1d/0x50
[  986.897736][T27130]  do_syscall_64+0x46/0xb0
[  986.902159][T27130]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  986.908071][T27130] 
[  986.910387][T27130] Second to last potentially related work creation:
[  986.916962][T27130]  kasan_save_stack+0x22/0x40
[  986.921751][T27130]  __kasan_record_aux_stack+0xbc/0xd0
[  986.927128][T27130]  insert_work+0x48/0x350
[  986.931464][T27130]  __queue_work+0x693/0x13b0
[  986.936062][T27130]  queue_work_on+0xf2/0x110
[  986.940574][T27130]  rfkill_register+0x67c/0xb00
[  986.945394][T27130]  nfc_register_device+0x124/0x3b0
[  986.950514][T27130]  nci_register_device+0x7cb/0xb50
[  986.955632][T27130]  virtual_ncidev_open+0x14f/0x230
[  986.960800][T27130]  misc_open+0x37a/0x4a0
[  986.965067][T27130]  chrdev_open+0x26a/0x770
[  986.969498][T27130]  do_dentry_open+0x6cc/0x13f0
[  986.974276][T27130]  path_openat+0x1bbc/0x2a50
[  986.979221][T27130]  do_filp_open+0x1ba/0x410
[  986.983735][T27130]  do_sys_openat2+0x16d/0x4c0
[  986.988442][T27130]  __x64_sys_openat+0x143/0x1f0
[  986.993309][T27130]  do_syscall_64+0x39/0xb0
[  986.997734][T27130]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  987.003645][T27130] 
[  987.005963][T27130] The buggy address belongs to the object at ffff88805dc17000
[  987.005963][T27130]  which belongs to the cache kmalloc-2k of size 2048
[  987.020027][T27130] The buggy address is located 16 bytes inside of
[  987.020027][T27130]  2048-byte region [ffff88805dc17000, ffff88805dc17800)
[  987.033304][T27130] 
[  987.035627][T27130] The buggy address belongs to the physical page:
[  987.042034][T27130] page:ffffea0001770400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5dc10
[  987.052190][T27130] head:ffffea0001770400 order:3 compound_mapcount:0 subpages_mapcount:0 compound_pincount:0
[  987.062256][T27130] anon flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  987.070684][T27130] raw: 00fff00000010200 ffff888012442000 0000000000000000 dead000000000001
[  987.079273][T27130] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000
[  987.087853][T27130] page dumped because: kasan: bad access detected
[  987.094259][T27130] page_owner tracks the page as allocated
[  987.099968][T27130] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5317, tgid 5317 (syz-executor.2), ts 99192303122, free_ts 15241157547
[  987.120918][T27130]  get_page_from_freelist+0x119c/0x2cd0
[  987.126547][T27130]  __alloc_pages+0x1cb/0x5b0
[  987.131230][T27130]  alloc_pages+0x1aa/0x270
[  987.135648][T27130]  allocate_slab+0x25f/0x350
[  987.140253][T27130]  ___slab_alloc+0xa91/0x1400
[  987.144947][T27130]  __slab_alloc.constprop.0+0x56/0xa0
[  987.150341][T27130]  __kmem_cache_alloc_node+0x1a9/0x430
[  987.155817][T27130]  __kmalloc_node_track_caller+0x4b/0xc0
[  987.161503][T27130]  pskb_expand_head+0x211/0x1110
[  987.166478][T27130]  netlink_trim+0x1ea/0x240
[  987.171002][T27130]  netlink_broadcast+0x63/0xd90
[  987.175872][T27130]  nlmsg_notify+0x93/0x280
[  987.180294][T27130]  rtmsg_ifinfo+0x19b/0x280
[  987.184854][T27130]  __dev_notify_flags+0x240/0x2d0
[  987.189900][T27130]  rtnl_configure_link+0x181/0x260
[  987.195024][T27130]  __rtnl_newlink+0x10f6/0x1840
[  987.199889][T27130] page last free stack trace:
[  987.204559][T27130]  free_pcp_prepare+0x65c/0xc00
[  987.209413][T27130]  free_unref_page+0x1d/0x490
[  987.214098][T27130]  free_contig_range+0xb5/0x180
[  987.218960][T27130]  destroy_args+0xa8/0x64c
[  987.223408][T27130]  debug_vm_pgtable+0x28de/0x296f
[  987.228447][T27130]  do_one_initcall+0x141/0x790
[  987.233229][T27130]  kernel_init_freeable+0x6f9/0x782
[  987.238461][T27130]  kernel_init+0x1e/0x1d0
[  987.242809][T27130]  ret_from_fork+0x1f/0x30
[  987.247242][T27130] 
[  987.249562][T27130] Memory state around the buggy address:
11:01:52 executing program 5:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8, 0x0]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)

[  987.255188][T27130]  ffff88805dc16f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  987.263254][T27130]  ffff88805dc16f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  987.271317][T27130] >ffff88805dc17000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  987.279374][T27130]                          ^
[  987.284044][T27130]  ffff88805dc17080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  987.292107][T27130]  ffff88805dc17100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  987.300189][T27130] ==================================================================
11:01:52 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003e40)=r7, 0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000003e80)='+-:(\x00', 0x5)
r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003ec0), 0x401, 0x0)
ioctl$NBD_SET_SOCK(r8, 0xab00, 0xffffffffffffffff)

[  987.388062][T27130] Kernel panic - not syncing: panic_on_warn set ...
[  987.394710][T27130] CPU: 1 PID: 27130 Comm: syz-executor.4 Not tainted 6.1.0-rc6-next-20221125-syzkaller #0
[  987.404636][T27130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[  987.414717][T27130] Call Trace:
[  987.418018][T27130]  <TASK>
[  987.420981][T27130]  dump_stack_lvl+0xd1/0x138
[  987.425697][T27130]  panic+0x2cc/0x626
[  987.429678][T27130]  ? panic_print_sys_info.part.0+0x110/0x110
11:01:52 executing program 2:
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="ac3c0247819e0e7f77dc197bc779d1181413f4cec01d0e5eafa90a33758f0d14f6f60caffff7", 0x26)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000015c0)={0x8, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/65, 0x41}, {&(0x7f0000001480)=""/5, 0x5}], &(0x7f0000001540)=[0x9, 0x4, 0x7ce, 0x10001, 0x3, 0x5, 0x8]}, 0x20)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x6, &(0x7f0000001600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0xe6, &(0x7f0000001680)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x80)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001940), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044040)
set_mempolicy(0x0, &(0x7f0000001b80), 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000001bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x4, 0x4, 0xc, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call, @alu={0x7, 0x0, 0xb, 0x3, 0xb, 0x18}, @jmp={0x5, 0x1, 0x9, 0x2, 0x4, 0x40, 0x8}], &(0x7f0000001c40)='syzkaller\x00', 0x20, 0x3c, &(0x7f0000001c80)=""/60, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001cc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0xf, 0x800, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[r0]}, 0x80)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000001e00)=""/113, &(0x7f0000001e80)=0x71)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ec0), 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001f40)={&(0x7f0000001f00)='./file0\x00', 0x0, 0x1c}, 0x10)
pipe2$watch_queue(&(0x7f0000001f80)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
write$nci(r3, &(0x7f0000001fc0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x7}, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
write$nci(r4, &(0x7f0000002040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x1f}, 0x3)
bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r3}, 0x8)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002100), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
syz_io_uring_setup(0x1ef6, &(0x7f0000002240)={0x0, 0xe52, 0x10, 0x0, 0x7a, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000022c0), &(0x7f0000002300))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}}, 0x4800)

11:01:52 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_release_ptpage\x00'}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x81}, [@alu={0x4, 0x1, 0x7, 0xa, 0x1, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffc01, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xe, 0x8, 0x7}, 0x10}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3f}, @exit, @exit, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x40, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1f, 0xd4, &(0x7f0000000300)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='hrtimer_init\x00', r1}, 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x4e}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}], &(0x7f0000000600)='GPL\x00', 0x9, 0xad, &(0x7f0000000640)=""/173, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x0, 0x7aba0a59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80)
move_mount(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x40)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r3}, 0x8)
ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000980)={0x1c})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000009c0)={0x34, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xe, 0x7ff, 0x1, 0x6629, 0xa2, r3, 0xfb5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003440)=[{0x8, 0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/119, 0x77}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001c80)=""/227, 0xe3}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/42, 0x2a}], &(0x7f0000001f00)=[0x2, 0x100000001, 0x7, 0x0, 0x3f]}, {0x6, 0x1, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/194, 0xc2}, {&(0x7f0000002040)=""/101, 0x65}, {&(0x7f00000020c0)=""/230, 0xe6}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/4096, 0x1000}], &(0x7f0000003400)=[0x1000]}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003640)={0x2, 0x1, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/232, 0xe8}, {&(0x7f0000003580)=""/37, 0x25}], &(0x7f0000003600)=[0x5, 0x0, 0xbc, 0x1f]}, 0x20)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000003680))
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000003700)={r3}, 0x8)
move_mount(r2, &(0x7f00000036c0)='./file0\x00', r7, &(0x7f0000003740)='./file0\x00', 0x61)
ioctl$NBD_DISCONNECT(r2, 0xab08)
fspick(r6, &(0x7f0000003780)='./file0\x00', 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003800)={0x0, r5, 0x0, 0xb, &(0x7f00000037c0)='/dev/vcsu#\x00'}, 0x30)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003bc0)={0x4, 0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/152, 0x98}, {&(0x7f0000003a00)=""/196, 0xc4}, {&(0x7f0000003b00)=""/32, 0x20}], &(0x7f0000003b80)=[0x8, 0x8, 0xfff, 0xfffffffffffff3bc]}, 0x20)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000003c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003e40)=r7, 0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000003e80)='+-:(\x00', 0x5)
r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003ec0), 0x401, 0x0)
ioctl$NBD_SET_SOCK(r8, 0xab00, 0xffffffffffffffff)

[  987.435713][T27130]  ? preempt_schedule_common+0x59/0xc0
[  987.441217][T27130]  ? preempt_schedule_thunk+0x1a/0x20
[  987.446644][T27130]  end_report.part.0+0x3f/0x7c
[  987.451441][T27130]  ? nfc_llcp_find_local+0xc5/0xe0
[  987.456590][T27130]  kasan_report.cold+0xa/0xf
[  987.461229][T27130]  ? nfc_llcp_find_local+0xc5/0xe0
[  987.466397][T27130]  nfc_llcp_find_local+0xc5/0xe0
[  987.471385][T27130]  nfc_llcp_unregister_device+0x1a/0x260
[  987.477073][T27130]  nfc_unregister_device+0x196/0x330
[  987.482410][T27130]  virtual_ncidev_close+0x52/0xb0
[  987.487496][T27130]  __fput+0x27c/0xa90
[  987.491525][T27130]  ? virtual_nci_open+0x10/0x10
[  987.496446][T27130]  task_work_run+0x16f/0x270
[  987.501093][T27130]  ? task_work_cancel+0x30/0x30
[  987.505998][T27130]  exit_to_user_mode_prepare+0x23c/0x250
[  987.511672][T27130]  syscall_exit_to_user_mode+0x1d/0x50
[  987.517217][T27130]  do_syscall_64+0x46/0xb0
[  987.521678][T27130]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  987.527602][T27130] RIP: 0033:0x7f3a8283df8b
[  987.532026][T27130] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44
[  987.551649][T27130] RSP: 002b:00007ffc88ec9f80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  987.560075][T27130] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 00007f3a8283df8b
[  987.568050][T27130] RDX: 0000000000000000 RSI: 0000001b2f8281d4 RDI: 0000000000000007
[  987.576027][T27130] RBP: 00007f3a829ad980 R08: 0000000000000000 R09: 0000000008337a43
[  987.584002][T27130] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000f0fb6
[  987.591973][T27130] R13: 00007ffc88eca080 R14: 00007f3a829abf80 R15: 0000000000000032
[  987.599961][T27130]  </TASK>
[  987.603183][T27130] Kernel Offset: disabled
[  987.607505][T27130] Rebooting in 86400 seconds..