last executing test programs:

38.399172925s ago: executing program 1 (id=20):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e65766500002800028005000d0001000000140007000000000000000000000000000000000108000f"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0xf68f, 0x8, 0x9, 0x1ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x200, 0x3d, 0x5e, 0x1000, 0xffff, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x7ffffffc, 0xd, 0xe9c4, 0xcd8, 0x6e, 0x6, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x3, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x401, 0xeffff801, 0x2b, 0xa, 0x0, 0x7, 0x8, 0x5, 0x3, 0x6, 0x8, 0x23, 0x2, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x5fffffd, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x400, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x1, 0x80, 0x4, 0x2, 0x0, 0xd, 0x2000006, 0x4, 0x8, 0x0, 0x1, 0xfffffffc, 0x12, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x3, 0x4, 0x1, 0xa, 0x6, 0x7fff, 0x1, 0x704, 0x33e3, 0x9, 0x6, 0x7fff, 0x6, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}})
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

38.002983954s ago: executing program 2 (id=23):
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x10000000, 0xfffffffc, 0x3ff}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002801400", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0)
sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0)
accept4$llc(r2, 0x0, 0x0, 0x80000)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x304}, "e40be2fddbe1b537", "9c7b9038977c1647bde65a96b1bb427c4753982091b213d412cc9dea452e4906", '\x00', "1238ccdce86cb818"}, 0x38)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5)
sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40)

34.283340711s ago: executing program 1 (id=25):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x24000840)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
madvise(&(0x7f0000129000/0x2000)=nil, 0x2000, 0xe)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
getdents(r2, 0x0, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e25, 0x1, 'lblcr\x00', 0x14, 0x10002, 0x77}, 0x2c)
setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x4e24, 0x200000001, 'wlc\x00', 0x0, 0x821, 0x2e}, 0x2c)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080)
r5 = openat(r2, 0x0, 0x0, 0x100)
fcntl$setlease(r5, 0x403, 0x2000000)

30.010521395s ago: executing program 3 (id=26):
socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000020000000000000000000000b02000000006100"], 0x0, 0x58, 0x0, 0x1}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r3}, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000008000000049000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r4], 0x20)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={<r6=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, r6, 0x1c, 0x1, @in6={0xa, 0x4e23, 0xf9f, @private0, 0x2}}}, 0xa0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x15)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socket$inet6_tcp(0xa, 0x1, 0x0)

29.678921273s ago: executing program 4 (id=27):
syz_open_procfs(0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}})
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040))
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
sendfile(r5, r4, &(0x7f0000000000)=0x9, 0x80000000000006)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, 0x0, 0x431, 0x70bd28, 0x0, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x24}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0552060000c9000028001280090001007665746800000000180002801400010000000000", @ANYBLOB="0d02020001"], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0)

28.644118194s ago: executing program 2 (id=28):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000100)={0x11})
ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f00000000c0))
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
r8 = syz_open_dev$video4linux(&(0x7f00000003c0), 0x7e, 0x8402)
ioctl$VIDIOC_QUERYCTRL(r8, 0xc0445624, &(0x7f0000000180)={0xffffffff, 0x4, "40179b048380a4f63751aa3b28f32e6c3199a4dfb027b8a93126c4af2a8f7cb7", 0xd5b, 0x5, 0x7, 0x7, 0x840})
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000004c0)=@e={0xff, 0x0, 0x0, 0x0, @generic})

28.202009453s ago: executing program 0 (id=29):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0xc139b9eeb39e1fd1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6d", 0x9)
r5 = accept4(r4, 0x0, 0x0, 0x800)
recvmsg(r5, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa0000000000000000000000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000ac1414aa00000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef00000000000000000000800000000000", @ANYRES32=0x0], 0x158}}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r7 = syz_usb_connect$hid(0x5, 0x3f, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f0000000640)={0x2c, &(0x7f0000000000)={0x20, 0x3, 0x8, {0x8, 0x22, "0b02d210c603"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x5, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})

26.666882786s ago: executing program 3 (id=30):
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0x78}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x58}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
fcntl$getown(r0, 0x9)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x4}}}}}}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50)
mkdir(&(0x7f0000000300)='./file0\x00', 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5, <r6=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_audit(0x10, 0x3, 0x9)

25.165480566s ago: executing program 1 (id=31):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_procfs(0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28)
sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0)

23.052171182s ago: executing program 4 (id=32):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001030000000904a800012d250c", @ANYRESHEX], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xf3a, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r4, 0x0, 0x25, 0x2, @val=@netfilter={0x0, 0x1, 0x6}}, 0x20)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x5}, 0x8)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x10, r1}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x743, 0x0, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1}, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000009c0)={r0, &(0x7f00000008c0)='hash:net,net\x00', 0x10000, &(0x7f0000000900)={@align=0x9, {0x3, 0xd2, 0x9, 0x4}}, 0x2, 0x0, &(0x7f0000000980)=0x5})
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2)
fallocate(r5, 0x0, 0x0, 0x1000f4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

20.245930316s ago: executing program 2 (id=33):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/13], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
syz_open_dev$usbfs(&(0x7f0000000180), 0x6, 0x800)
r0 = socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0)
sendmsg$tipc(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
request_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='GPL\x00', 0x0)
mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x214003, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0x10000000, 0x100}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xdb40}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048880}, 0x0)
getsockopt$netlink(r5, 0x10e, 0x6, &(0x7f00000000c0)=""/219, &(0x7f00000001c0)=0xdb)

20.23104342s ago: executing program 0 (id=34):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000", 0x50}, {&(0x7f00000001c0)="ee641681c41fda78", 0x8}], 0x2)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x80d03, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r4, 0x0)
socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, 0x0, 0x0)
listen(r4, 0x802)
r5 = socket$inet(0xa, 0x801, 0x84)
accept4(r5, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x3, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000140))

20.218355504s ago: executing program 3 (id=35):
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0xc000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="0203fe031000000033bd7000fbdbdf250200090040000000000000000000000005000600000000000a000000000000000000000000000000000000000000000102000000000000000200010000000002000007020000000005000500000000000a00000000000000fc0100000000000000000000000000010700000000000000"], 0x80}, 0x1, 0x7}, 0x4008000)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe)
shutdown(r4, 0x1)
recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)
r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x161000, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)

19.065927676s ago: executing program 1 (id=36):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{&(0x7f0000000000)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x80, 0x0, 0x0, &(0x7f0000001c00)=ANY=[], 0xc}}], 0x1, 0x45)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8)
inotify_init()
r4 = socket(0x80000000000000a, 0x2, 0x0)
syz_pidfd_open(0x0, 0x0)
mount_setattr(0xffffffffffffff9c, 0x0, 0x9000, &(0x7f0000000000)={0x0, 0xa}, 0x20)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x4e21, 0xadd0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}}}, 0x108)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00010000000000fbdbdf25810000000000030000000000"], 0x30}}, 0x0)
close_range(r5, 0xffffffffffffffff, 0x200000000000000)
socket(0x80000000000000a, 0x2, 0x0)

14.330365172s ago: executing program 0 (id=37):
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)
r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x1, 0x81, 0xb, 0x4, 0x1000, 0x50000, 0xa3, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x6, 0x3, 0x4, 0x0, 0x0, 0x2, 0x400, 0x533, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x46, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0x51a48a3b, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x0, 0x5, 0x2, 0x0, 0x6, 0x0, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x0, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x6, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x8, 0x7, 0xb99c, 0x2, 0x1000001, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x1, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x8, 0x4, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7fffffff, 0x3eef6cc9, 0x1, 0x1000007, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x14, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0x1d, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2000002, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfff, 0x8000, 0x6, 0x6, 0xffff, 0x3, 0xf, 0xfff, 0x93, 0xffff, 0xfffffffe, 0x80, 0x3, 0x7, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c)
ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0)
write$binfmt_format(r3, &(0x7f0000000100)='0\x00', 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
write$qrtrtun(r3, &(0x7f0000000340)="ca0e808b935bd6a80b", 0x9)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40)
syz_clone(0x11841000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$sock_int(r7, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4)
ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000000))

14.264423026s ago: executing program 1 (id=38):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
accept4(r1, 0x0, 0x0, 0x800)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x1, 0x3, 0x8, 0x8a0, 0x1, <r3=>0xffffffffffffffff})
ptrace$ARCH_SHSTK_LOCK(0x1e, r3, 0x0, 0x5003)
syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0x4, 0x4, 0x460, 0xffffffff, 0x288, 0x288, 0x0, 0xfeffffff, 0xffffffff, 0x398, 0x398, 0x398, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x154, 0x19c, 0x0, {}, [@common=@srh1={{0x8c}, {0x2c, 0x0, 0x40, 0x31, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff000000, 0xffffffff, 0xff], [0xffffff00, 0xff, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0x843ffed65da7c136], 0x208, 0x6c}}, @common=@ipv6header={{0x24}, {0x10, 0x16, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 'syzkaller0\x00', {0x4}}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x80}}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, [0xffffffff, 0xff000000, 0x0, 0xff], [0xff000000, 0xffffffff, 0xffffffff], 'ip6tnl0\x00', 'bridge0\x00', {}, {}, 0x3c, 0xb, 0x6, 0x21}, 0x0, 0xa4, 0x110}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x3, 0xffb, 0x7, 0x1, 0x0, "4a24b3123320fbc5ef86f0d111d171d6b7d44a38d5630b11a40cc26dbaa0a201652821e4b9532f31f48b9868fe4340e5da03d5390082ef51717628c8f69f8b97"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4bc)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
poll(&(0x7f0000000440)=[{r5, 0x400}], 0x1, 0x101)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)

14.257224116s ago: executing program 2 (id=39):
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x43}, 0x7, 0x2, 0x2, 0x1, 0x101, 0x9}, &(0x7f0000000140)=0x20)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000880)={0x3, 0x2, 0x5, 0xff5})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
unshare(0x22020600)
r3 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace(0x8, r3)
syz_pidfd_open(r3, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24040014)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)

14.210769049s ago: executing program 4 (id=40):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x96)
read$FUSE(0xffffffffffffffff, &(0x7f0000004440)={0x2020}, 0x2020)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x210)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c)
r5 = socket(0x10, 0x2, 0x0)
write(r5, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb56738a8c7e690d58433", 0x92)
recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2)
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

14.101063876s ago: executing program 3 (id=41):
syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
listen(0xffffffffffffffff, 0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
socket$netlink(0x10, 0x3, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
r3 = gettid()
ptrace$getregset(0x4204, r3, 0x6, &(0x7f0000000500)={&(0x7f00000003c0)=""/148, 0x94})
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r4, 0x80083313, &(0x7f0000000000))
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)

11.976193943s ago: executing program 4 (id=42):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x8, 0xfa04, 0xb8, 0x6c02, 0x1e8, 0x194, 0x194, 0x1e8, 0x194, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff, 0x0, 'macsec0\x00', 'macsec0\x00', {}, {}, 0x6}, 0x0, 0x98, 0xb8, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x31, 0x30, 0x3, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xb, 0x7, 0xfffffff9, 0x8, '\x00', 'syz0\x00', {0x10000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0)
socket$key(0xf, 0x3, 0x2)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
getxattr(0x0, 0x0, &(0x7f0000002b00)=""/213, 0xd5)
add_key$fscrypt_provisioning(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x1})
fcntl$lock(r7, 0x5, 0x0)
write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000e1ffffffffffffff00000a58000000090a010400000000000000000000000208000a40000000000900020073797a31000000000900010073797a3000"], 0x80}}, 0x0)

8.588699901s ago: executing program 2 (id=43):
kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df3499327f170b861", 0xdf, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5cff90a", 0xee, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e619add", 0x7e, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed488a35c2a00906fbd0e2fa", 0x3e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0), 0x0, 0x5, 0x6}], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca46", 0x15}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6057761ab0f200736ceae852a03caf381f413af6c96075ecb03b216edfcdf6142457f01689d1141660d64a06272cf6d7741d88888d2c4a16b91149c", 0x80}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8b1b2107d046bccc3025bbe70905237ffee5666e0e28cfda9249a7beaeaab10864089fb7c447ce7416df7c0aea488b69d959465338a35aabfb0ed3524428b68945f0a2c8f90e1ced4718c7695aed1e852be6f9a23087af497642cd2560ef1e10729", 0x70}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce679", 0x1a}], 0x2, 0x0, 0x0, 0x10}, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

5.006025548s ago: executing program 1 (id=44):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x18, 0xcc040}, 0x26048040)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r6 = dup(r5)
ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0})
r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
socket(0x10, 0x3, 0x0)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)

4.562576822s ago: executing program 0 (id=45):
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0xc8c4)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$dri(0x0, 0x1, 0x400)
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_rxfh_indir={0x38, 0x2, [0x286, 0x9]}})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, &(0x7f0000000000)='ncpfs\x00', 0x0, &(0x7f0000000080))
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4088c1, 0x185)

4.31412993s ago: executing program 3 (id=46):
getrlimit(0x1, &(0x7f0000000000))
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000003200)={<r1=>0x0, <r2=>0x0, "267d395b1318515ce4e7f66ef02fbee0029734b4cfaafa2702e95c1a9a728091c9311656b8480b0d12268ec39d439fee927c07384abd0b9bb9d2ffad6aaa788e02e9ea8c299da004c4b0ef272dac0f011c3f4c7ded41bed2310f756df27af9cb6c0fa43b6340c33491db058631379473d32bd10ca11424be249141073765368ad40eea122c6c8023a1bd58fc3c77162bde0dd8d47e7d090618c4b8b5442da3bc292c21e2d660fd562219a53269c620a3f666e39bf289abbd981474c1637c06e2919ee0b29a316765b4ca55639ec4ed8d394997ce5e677cffe2a70a2a586f435e0bcb892caaffad43c456b9f5d27c6c5ca335a1f9efe4580e16299bf272b1fe39", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000000c0)={0x8, [{}, {}, {0x0, <r3=>0x0}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {0x0, <r4=>0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {<r5=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {r2}, {}, {0x0, <r6=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}, {}, {r2}, {}, {r2}, {}, {}, {}, {0x0, <r8=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {0x0, <r10=>0x0}, {}, {}, {}, {}, {}, {}, {<r11=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r12=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {0x0, <r13=>0x0}, {}, {r2}], 0x0, "fc7c37c78dba72"})
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000010c0)={0x5, [{}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r14=>0x0}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12, r4}], 0xb1, "cf637f009e94ac"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000020c0)={r10, r14, "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", "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"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r15 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r15, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r16=>0xffffffffffffffff, <r17=>0xffffffffffffffff})
connect$unix(r16, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r17, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r16, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r17, 0x80049363, 0x0)
r18 = socket(0x11, 0x3, 0x0)
setsockopt$packet_rx_ring(r18, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
r19 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r19, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, 0x1, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4004000)
socketpair(0x1, 0x1, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)

3.493888438s ago: executing program 4 (id=47):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x5, 0xc, 0x80000000, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000df84000000d00000009500d12227c5564f274260cec70100000000000052d43c132d1ce44271f4974baf8ee4ff840096748f6b70669d461fdf942d3c0ae4bceb0de36e9807306e4c1b5a642d08158b17ace87bd4ef8f274f4dfbc21e5b6d09ddefbb3b08ff4c4ad33335a72276b9ab"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)

1.623126362s ago: executing program 3 (id=48):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000", 0x50}, {&(0x7f00000001c0)="ee641681c41fda78", 0x8}], 0x2)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x80d03, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r4, 0x0)
socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, 0x0, 0x0)
listen(r4, 0x802)
r5 = socket$inet(0xa, 0x801, 0x84)
accept4(r5, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x3, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000140))

1.618908476s ago: executing program 0 (id=58):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = socket$inet(0x2, 0x3, 0xa)
setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
r2 = socket$inet(0x2, 0x3, 0x6)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_int(r3, 0x0, 0x5, 0x0, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000480)={{0xa, 0x1, 0xcc77, 0x0, 'syz0\x00', 0x7}, 0x4, 0x3, 0x0, r4, 0x1, 0x2, 'syz1\x00', &(0x7f0000000180)=['*#\x00'], 0x3})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r7, 0x5421, &(0x7f0000000440)=0x6)
close(r7)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc2, &(0x7f0000000300)=""/194, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r8, 0x31, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0xfffffffffffffe9a, 0x0, 0x0, 0x0, 0x0}}, 0x10)

1.582078653s ago: executing program 2 (id=49):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{&(0x7f0000000000)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x80, 0x0, 0x0, &(0x7f0000001c00)=ANY=[], 0xc}}], 0x1, 0x45)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8)
inotify_init()
r4 = socket(0x80000000000000a, 0x2, 0x0)
syz_pidfd_open(0x0, 0x0)
mount_setattr(0xffffffffffffff9c, 0x0, 0x9000, &(0x7f0000000000)={0x0, 0xa}, 0x20)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x4e21, 0xadd0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}}}, 0x108)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00010000000000fbdbdf25810000000000030000000000"], 0x30}}, 0x0)
close_range(r5, 0xffffffffffffffff, 0x200000000000000)
socket(0x80000000000000a, 0x2, 0x0)

1.372584513s ago: executing program 4 (id=50):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x25, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x99f, 0x100, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1082, 0xffffffff, 0x1, 0x5, 0x344, 0xa2d88593, 0x4007, 0x7ff8, 0xeff, 0x3, 0x3, 0xe, 0x100, 0x6, 0x10001, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]})
unshare(0x2c020400)
r4 = msgget$private(0x0, 0x0)
msgsnd(r4, &(0x7f0000000180)=ANY=[], 0x2000, 0x0)
msgrcv(r4, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000)
r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000080)=ANY=[])
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x1000080, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r6 = syz_io_uring_setup(0x82e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000380)={&(0x7f000000b000)={[{0x0}]}, 0x1}, 0x1)
close(0x3)

0s ago: executing program 0 (id=51):
fchown(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x4, 0x46, &(0x7f00000005c0)=ANY=[], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
sched_setscheduler(0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
io_uring_enter(r0, 0x5721, 0x68f, 0x40, &(0x7f0000000280)={[0x4000000004]}, 0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpid()
ftruncate(r0, 0x6000000)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r0, 0x32, 0x1, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0], 0x0}, 0x40)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x34, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x50)

kernel console output (not intermixed with test programs):

[   92.228211][  T864] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts.
[   97.220968][ T5588] cgroup: Unknown subsys name 'net'
[   97.482409][ T5588] cgroup: Unknown subsys name 'cpuset'
[   97.536222][ T5588] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   99.728448][ T5588] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  102.350523][   T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  102.393245][   T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  102.407567][   T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  102.414156][   T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  102.421635][   T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  102.759653][   T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  102.781621][   T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  102.790785][   T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  102.841907][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  102.855054][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  102.855288][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  102.897472][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  102.904570][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  102.922827][ T4916] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  102.923653][ T4916] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  103.054278][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  103.081655][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  103.136279][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  103.138775][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  103.143517][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  103.144705][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  103.172143][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  103.176754][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  103.244685][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  103.255103][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  104.516733][   T59] Bluetooth: hci0: command tx timeout
[  105.085908][   T59] Bluetooth: hci2: command tx timeout
[  105.155636][   T59] Bluetooth: hci3: command tx timeout
[  105.316549][   T59] Bluetooth: hci1: command tx timeout
[  105.316668][   T59] Bluetooth: hci4: command tx timeout
[  105.922779][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.924110][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.924318][ T5608] bridge_slave_0: entered allmulticast mode
[  105.932630][ T5608] bridge_slave_0: entered promiscuous mode
[  106.005296][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.006916][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.007575][ T5608] bridge_slave_1: entered allmulticast mode
[  106.016735][ T5608] bridge_slave_1: entered promiscuous mode
[  106.223473][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.283262][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.358044][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.358378][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.358789][ T5617] bridge_slave_0: entered allmulticast mode
[  106.361039][ T5617] bridge_slave_0: entered promiscuous mode
[  106.464661][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.464821][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.465025][ T5617] bridge_slave_1: entered allmulticast mode
[  106.475974][ T5617] bridge_slave_1: entered promiscuous mode
[  106.569589][ T5608] team0: Port device team_slave_0 added
[  106.569897][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.570019][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.570252][ T5616] bridge_slave_0: entered allmulticast mode
[  106.572491][ T5616] bridge_slave_0: entered promiscuous mode
[  106.595593][ T5628] Bluetooth: hci0: command tx timeout
[  106.597791][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.598359][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.599968][ T5615] bridge_slave_0: entered allmulticast mode
[  106.606647][ T5615] bridge_slave_0: entered promiscuous mode
[  106.644134][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.644261][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.662217][ T5618] bridge_slave_0: entered allmulticast mode
[  106.664240][ T5618] bridge_slave_0: entered promiscuous mode
[  106.711148][ T5608] team0: Port device team_slave_1 added
[  106.711432][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.711558][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.713430][ T5616] bridge_slave_1: entered allmulticast mode
[  106.717208][ T5616] bridge_slave_1: entered promiscuous mode
[  106.751533][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.751671][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.752151][ T5615] bridge_slave_1: entered allmulticast mode
[  106.754218][ T5615] bridge_slave_1: entered promiscuous mode
[  106.761728][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.762105][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.765087][ T5618] bridge_slave_1: entered allmulticast mode
[  106.785306][ T5618] bridge_slave_1: entered promiscuous mode
[  106.812605][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.898434][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.991867][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.991883][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  106.991904][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.045989][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.049596][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.053447][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.096279][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.096298][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  107.096326][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.101585][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.125841][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.135290][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.145988][ T5617] team0: Port device team_slave_0 added
[  107.167168][ T5628] Bluetooth: hci2: command tx timeout
[  107.235611][ T5628] Bluetooth: hci3: command tx timeout
[  107.254864][ T5617] team0: Port device team_slave_1 added
[  107.405624][ T5628] Bluetooth: hci4: command tx timeout
[  107.405662][ T5628] Bluetooth: hci1: command tx timeout
[  107.583673][ T5616] team0: Port device team_slave_0 added
[  107.590553][ T5615] team0: Port device team_slave_0 added
[  107.603949][ T5618] team0: Port device team_slave_0 added
[  107.648758][ T5616] team0: Port device team_slave_1 added
[  107.650733][ T5615] team0: Port device team_slave_1 added
[  107.653045][ T5618] team0: Port device team_slave_1 added
[  107.653937][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.653948][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  107.653968][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.803659][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.803673][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  107.803693][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.840790][ T5608] hsr_slave_0: entered promiscuous mode
[  107.850730][ T5608] hsr_slave_1: entered promiscuous mode
[  107.942080][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.942099][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  107.942144][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.952679][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.952737][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  107.952824][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.972992][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.973049][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  107.973129][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.018219][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.018282][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.018359][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.024857][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.024938][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.025021][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.071768][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.071824][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.071889][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.529661][ T5617] hsr_slave_0: entered promiscuous mode
[  108.530756][ T5617] hsr_slave_1: entered promiscuous mode
[  108.531583][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[  108.531677][ T5617] Cannot create hsr debugfs directory
[  108.688695][   T59] Bluetooth: hci0: command tx timeout
[  108.712663][ T5616] hsr_slave_0: entered promiscuous mode
[  108.713856][ T5616] hsr_slave_1: entered promiscuous mode
[  108.714649][ T5616] debugfs: 'hsr0' already exists in 'hsr'
[  108.714668][ T5616] Cannot create hsr debugfs directory
[  108.744126][ T5615] hsr_slave_0: entered promiscuous mode
[  108.745214][ T5615] hsr_slave_1: entered promiscuous mode
[  108.749891][ T5615] debugfs: 'hsr0' already exists in 'hsr'
[  108.749991][ T5615] Cannot create hsr debugfs directory
[  108.803139][ T5618] hsr_slave_0: entered promiscuous mode
[  108.804250][ T5618] hsr_slave_1: entered promiscuous mode
[  108.805013][ T5618] debugfs: 'hsr0' already exists in 'hsr'
[  108.805043][ T5618] Cannot create hsr debugfs directory
[  109.236976][   T59] Bluetooth: hci2: command tx timeout
[  109.315691][   T59] Bluetooth: hci3: command tx timeout
[  109.475905][   T59] Bluetooth: hci4: command tx timeout
[  109.475944][   T59] Bluetooth: hci1: command tx timeout
[  109.891449][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  109.942046][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  109.960378][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  109.994143][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  110.007190][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  110.053475][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  110.087993][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  110.111774][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  110.329474][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  110.366747][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  110.388834][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  110.430387][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  110.434345][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  110.479698][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  110.524663][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  110.540615][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  110.752757][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  110.757290][ T5628] Bluetooth: hci0: command tx timeout
[  110.809875][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  110.815109][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  110.872941][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  110.892590][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  110.931996][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  110.972490][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  111.019385][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  111.259516][ T5618] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  111.304564][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  111.316233][ T5628] Bluetooth: hci2: command tx timeout
[  111.346607][ T5618] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  111.382801][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  111.396953][ T5628] Bluetooth: hci3: command tx timeout
[  111.399602][ T5618] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  111.439431][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  111.453304][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.498469][ T5618] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  111.530484][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  111.566312][ T5628] Bluetooth: hci1: command tx timeout
[  111.566350][ T5628] Bluetooth: hci4: command tx timeout
[  111.729909][ T5608] 8021q: adding VLAN 0 to HW filter on device team0
[  111.747973][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  111.791261][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  111.816021][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  111.853607][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  111.883030][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  111.915260][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  111.937621][ T1192] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.937923][ T1192] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.950494][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  112.019740][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  112.081220][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.081332][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.168929][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.334949][ T5615] 8021q: adding VLAN 0 to HW filter on device team0
[  112.396653][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.400165][ T2263] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.400323][ T2263] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.481690][ T2263] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.481799][ T2263] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.596910][ T5616] 8021q: adding VLAN 0 to HW filter on device team0
[  112.695005][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.695182][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.738584][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.808380][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.831571][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.987694][ T5618] 8021q: adding VLAN 0 to HW filter on device team0
[  113.145740][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.173299][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.173443][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.248239][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.248378][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.399727][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[  113.503260][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.503658][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.637021][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.637166][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.773051][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.442668][ T5608] veth0_vlan: entered promiscuous mode
[  114.565327][ T5608] veth1_vlan: entered promiscuous mode
[  114.817655][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.014295][ T5608] veth0_macvtap: entered promiscuous mode
[  115.095896][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.099085][ T5608] veth1_macvtap: entered promiscuous mode
[  115.337824][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.444490][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.496318][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.571674][ T5615] veth0_vlan: entered promiscuous mode
[  115.710694][   T93] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.731967][   T93] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.758719][   T93] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.759192][   T93] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.792399][ T5615] veth1_vlan: entered promiscuous mode
[  115.924099][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.316865][ T5618] veth0_vlan: entered promiscuous mode
[  116.347289][ T5615] veth0_macvtap: entered promiscuous mode
[  116.395129][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.395164][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.482740][ T5616] veth0_vlan: entered promiscuous mode
[  116.493962][ T5615] veth1_macvtap: entered promiscuous mode
[  116.545175][ T5618] veth1_vlan: entered promiscuous mode
[  116.602040][ T5616] veth1_vlan: entered promiscuous mode
[  116.602265][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.602282][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.714102][ T5617] veth0_vlan: entered promiscuous mode
[  116.724068][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.782370][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.828293][ T5617] veth1_vlan: entered promiscuous mode
[  116.834541][ T1089] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.857236][ T1089] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.876142][ T1089] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.882681][ T1089] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.913292][ T5618] veth0_macvtap: entered promiscuous mode
[  117.003930][ T5618] veth1_macvtap: entered promiscuous mode
[  117.067011][ T5616] veth0_macvtap: entered promiscuous mode
[  117.226641][ T5616] veth1_macvtap: entered promiscuous mode
[  117.296317][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.428346][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.457928][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.462082][ T5617] veth0_macvtap: entered promiscuous mode
[  117.852835][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.866668][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.867023][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.871603][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.871625][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.874674][ T5617] veth1_macvtap: entered promiscuous mode
[  118.558423][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.603216][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.864875][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.893647][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.909223][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.935090][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.030145][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.030167][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.277448][ T5802] =======================================================
[  119.277448][ T5802] WARNING: The mand mount option has been deprecated and
[  119.277448][ T5802]          and is ignored by this kernel. Remove the mand
[  119.277448][ T5802]          option from the mount to silence this warning.
[  119.277448][ T5802] =======================================================
[  120.594573][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.783724][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.185575][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.257237][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.263340][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.320684][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.356257][   T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.356275][   T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.478364][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.478386][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.745446][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  121.957337][ T5810] CUSE: info not properly terminated
[  123.031113][ T3307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.031147][ T3307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.262714][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.262735][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.355443][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  123.375429][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  123.385425][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  123.395424][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  123.455435][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  123.465458][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  123.475435][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  123.892853][ T5812] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  123.892882][ T5812] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  124.111382][ T5812] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  124.111410][ T5812] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  124.360684][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.360704][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.464295][ T5812] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  124.464316][ T5812] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  124.656967][ T5812] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  124.656985][ T5812] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  124.901430][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'.
[  124.901450][ T5819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8'.
[  124.903427][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'.
[  124.903444][ T5819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8'.
[  124.903568][ T5819] Zero length message leads to an empty skb
[  125.033099][ T5812] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  125.033125][ T5812] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  127.259349][ T5839] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  127.553668][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.553690][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.358991][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  133.359087][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[  134.783657][ T5875] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12'.
[  135.439369][ T5876] hugetlbfs: syz.0.14 (5876): Using mlock ulimits for SHM_HUGETLB is obsolete
[  136.189410][ T5888] lo speed is unknown, defaulting to 1000
[  136.190232][ T5888] lo speed is unknown, defaulting to 1000
[  136.239548][ T5888] lo speed is unknown, defaulting to 1000
[  136.274175][ T5888] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  136.274242][ T5888] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  136.274310][ T5888] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  136.378658][ T5888] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  136.538418][ T5888] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  136.805012][ T5888] lo speed is unknown, defaulting to 1000
[  136.813203][ T5888] lo speed is unknown, defaulting to 1000
[  136.819562][ T5888] lo speed is unknown, defaulting to 1000
[  136.828071][ T5888] lo speed is unknown, defaulting to 1000
[  136.839839][ T5888] lo speed is unknown, defaulting to 1000
[  139.377039][ T5902] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  141.048144][ T5915] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  141.048192][ T5915] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.413053][ T5917] geneve2: entered promiscuous mode
[  141.985456][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  142.015424][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  147.082717][ T3307] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  147.097607][ T3307] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  147.097673][ T3307] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  147.097713][ T3307] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  148.738761][    T9] IPVS: starting estimator thread 0...
[  149.189851][ T5939] IPVS: using max 7 ests per chain, 16800 per kthread
[  151.531944][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'.
[  154.678171][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'.
[  158.815062][ T5970] warning: `syz.3.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  159.236492][ T5971] netlink: 64 bytes leftover after parsing attributes in process `syz.0.34'.
[  161.463275][ T5987] befs: (nullb0): invalid magic header
[  161.549820][  T820] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  162.770844][ T5994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.36'.
[  165.518287][ T6006] Bluetooth: MGMT ver 1.23
[  167.195556][  T820] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  167.588829][  T820] usb 2-1: Using ep0 maxpacket: 8
[  168.170319][ T6012] input: syz0 as /devices/virtual/input/input5
[  168.412270][  T820] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  168.412930][  T820] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  168.412997][  T820] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  168.413068][  T820] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  168.413129][  T820] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  168.413270][  T820] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  168.413332][  T820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.781312][ T6025] random: crng reseeded on system resumption
[  170.344208][ T6029] netlink: 36 bytes leftover after parsing attributes in process `syz.4.42'.
[  171.959030][  T820] usb 2-1: can't set config #16, error -71
[  171.995780][  T820] usb 2-1: USB disconnect, device number 2
[  175.100487][ T6081] random: crng reseeded on system resumption
[  177.703905][ T6092] netlink: 64 bytes leftover after parsing attributes in process `syz.3.48'.
[  178.136417][ T6100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.49'.
[  178.208975][ T6101] comedi comedi2: c6xdigio: I/O base address not correctly aligned
[  180.144266][  T820] ------------[ cut here ]------------
[  180.144282][  T820] faux_driver vkms: [drm] vblank wait timed out on crtc 0
[  180.144307][  T820] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:2/820
[  180.144361][  T820] Modules linked in:
[  180.144408][  T820] CPU: 1 UID: 0 PID: 820 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  180.144432][  T820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  180.144452][  T820] Workqueue: events drm_fb_helper_damage_work
[  180.144485][  T820] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500
[  180.144514][  T820] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 2a 58 d0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff
[  180.144533][  T820] RSP: 0018:ffffc9000589f8c0 EFLAGS: 00010246
[  180.144552][  T820] RAX: 1ffff11004bb2c00 RBX: ffffffff8f940fd0 RCX: 0000000000000000
[  180.144568][  T820] RDX: ffffffff8bc05620 RSI: ffffffff8bc21d40 RDI: ffffffff8f940fd0
[  180.144586][  T820] RBP: ffffc9000589f9a8 R08: 0000000000000000 R09: 0000000000000000
[  180.144601][  T820] R10: dffffc0000000000 R11: fffffbfff1f1209f R12: ffffffff8bc21d40
[  180.144617][  T820] R13: ffff888025d96000 R14: 0000000000000000 R15: ffffffff8bc05620
[  180.144634][  T820] FS:  0000000000000000(0000) GS:ffff888126271000(0000) knlGS:0000000000000000
[  180.144652][  T820] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  180.144667][  T820] CR2: 000055555a92ca38 CR3: 00000000289e8000 CR4: 00000000003526f0
[  180.144686][  T820] Call Trace:
[  180.144695][  T820]  <TASK>
[  180.144709][  T820]  ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10
[  180.144737][  T820]  ? rt_spin_unlock+0x14f/0x200
[  180.144762][  T820]  ? __pfx_autoremove_wake_function+0x10/0x10
[  180.144795][  T820]  ? rt_spin_unlock+0x160/0x200
[  180.144823][  T820]  ? drm_vblank_get+0x147/0x260
[  180.144851][  T820]  drm_client_modeset_wait_for_vblank+0xc5/0xf0
[  180.144892][  T820]  drm_fb_helper_damage_work+0x131/0x6f0
[  180.144923][  T820]  ? process_scheduled_works+0xa70/0x1860
[  180.144983][  T820]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[  180.145019][  T820]  ? process_scheduled_works+0xa70/0x1860
[  180.145043][  T820]  ? process_scheduled_works+0xa70/0x1860
[  180.145071][  T820]  process_scheduled_works+0xb5d/0x1860
[  180.145132][  T820]  ? __pfx_process_scheduled_works+0x10/0x10
[  180.145166][  T820]  ? assign_work+0x3d5/0x5e0
[  180.145197][  T820]  worker_thread+0xa53/0xfc0
[  180.145263][  T820]  kthread+0x388/0x470
[  180.145294][  T820]  ? __pfx_worker_thread+0x10/0x10
[  180.145357][  T820]  ? __pfx_kthread+0x10/0x10
[  180.145392][  T820]  ret_from_fork+0x514/0xb70
[  180.145423][  T820]  ? __pfx_ret_from_fork+0x10/0x10
[  180.145450][  T820]  ? __switch_to+0xc79/0x1410
[  180.145489][  T820]  ? __pfx_kthread+0x10/0x10
[  180.145522][  T820]  ret_from_fork_asm+0x1a/0x30
[  180.145571][  T820]  </TASK>
[  180.145583][  T820] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  180.145599][  T820] CPU: 1 UID: 0 PID: 820 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  180.145623][  T820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  180.145636][  T820] Workqueue: events drm_fb_helper_damage_work
[  180.145662][  T820] Call Trace:
[  180.145671][  T820]  <TASK>
[  180.145680][  T820]  vpanic+0x56c/0xa60
[  180.145709][  T820]  ? __pfx__printk+0x10/0x10
[  180.145743][  T820]  ? __pfx_vpanic+0x10/0x10
[  180.145769][  T820]  ? is_bpf_text_address+0x292/0x2b0
[  180.145798][  T820]  ? is_bpf_text_address+0x26/0x2b0
[  180.145842][  T820]  panic+0xc5/0xd0
[  180.145870][  T820]  ? __pfx_panic+0x10/0x10
[  180.145909][  T820]  ? ret_from_fork_asm+0x1a/0x30
[  180.145945][  T820]  __warn+0x315/0x4c0
[  180.145971][  T820]  ? drm_crtc_wait_one_vblank+0x357/0x500
[  180.146000][  T820]  ? drm_crtc_wait_one_vblank+0x357/0x500
[  180.146028][  T820]  __report_bug+0x29a/0x540
[  180.146065][  T820]  ? drm_crtc_wait_one_vblank+0x357/0x500
[  180.146094][  T820]  ? __pfx___report_bug+0x10/0x10
[  180.146143][  T820]  ? drm_crtc_wait_one_vblank+0x4bb/0x500
[  180.146167][  T820]  ? drm_crtc_wait_one_vblank+0x4b6/0x500
[  180.146203][  T820]  report_bug_entry+0x19a/0x290
[  180.146241][  T820]  ? drm_crtc_wait_one_vblank+0x4b6/0x500
[  180.146266][  T820]  ? drm_crtc_wait_one_vblank+0x4bb/0x500
[  180.146292][  T820]  handle_bug+0xce/0x200
[  180.146326][  T820]  exc_invalid_op+0x1a/0x50
[  180.146358][  T820]  asm_exc_invalid_op+0x1a/0x20
[  180.146380][  T820] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500
[  180.146406][  T820] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 2a 58 d0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff
[  180.146424][  T820] RSP: 0018:ffffc9000589f8c0 EFLAGS: 00010246
[  180.146441][  T820] RAX: 1ffff11004bb2c00 RBX: ffffffff8f940fd0 RCX: 0000000000000000
[  180.146456][  T820] RDX: ffffffff8bc05620 RSI: ffffffff8bc21d40 RDI: ffffffff8f940fd0
[  180.146472][  T820] RBP: ffffc9000589f9a8 R08: 0000000000000000 R09: 0000000000000000
[  180.146485][  T820] R10: dffffc0000000000 R11: fffffbfff1f1209f R12: ffffffff8bc21d40
[  180.146500][  T820] R13: ffff888025d96000 R14: 0000000000000000 R15: ffffffff8bc05620
[  180.146538][  T820]  ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10
[  180.146563][  T820]  ? rt_spin_unlock+0x14f/0x200
[  180.146587][  T820]  ? __pfx_autoremove_wake_function+0x10/0x10
[  180.146618][  T820]  ? rt_spin_unlock+0x160/0x200
[  180.146645][  T820]  ? drm_vblank_get+0x147/0x260
[  180.146673][  T820]  drm_client_modeset_wait_for_vblank+0xc5/0xf0
[  180.146712][  T820]  drm_fb_helper_damage_work+0x131/0x6f0
[  180.146743][  T820]  ? process_scheduled_works+0xa70/0x1860
[  180.146772][  T820]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[  180.146805][  T820]  ? process_scheduled_works+0xa70/0x1860
[  180.146827][  T820]  ? process_scheduled_works+0xa70/0x1860
[  180.146854][  T820]  process_scheduled_works+0xb5d/0x1860
[  180.146913][  T820]  ? __pfx_process_scheduled_works+0x10/0x10
[  180.146946][  T820]  ? assign_work+0x3d5/0x5e0
[  180.146975][  T820]  worker_thread+0xa53/0xfc0
[  180.147031][  T820]  kthread+0x388/0x470
[  180.147061][  T820]  ? __pfx_worker_thread+0x10/0x10
[  180.147084][  T820]  ? __pfx_kthread+0x10/0x10
[  180.147114][  T820]  ret_from_fork+0x514/0xb70
[  180.147142][  T820]  ? __pfx_ret_from_fork+0x10/0x10
[  180.147168][  T820]  ? __switch_to+0xc79/0x1410
[  180.147203][  T820]  ? __pfx_kthread+0x10/0x10
[  180.147241][  T820]  ret_from_fork_asm+0x1a/0x30
[  180.147287][  T820]  </TASK>
[  180.148126][  T820] Kernel Offset: disabled