last executing test programs:

2m10.256803538s ago: executing program 0 (id=57):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
socket$inet6(0xa, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f000000a800), 0x2, 0x141102)
writev(r0, &(0x7f000000a840)=[{&(0x7f000000a880)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x187)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a8c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f000000a900)={'ip6tnl0\x00', &(0x7f000000a940)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0xf2, 0x4, 0x4, @empty, @empty, 0x8, 0x80, 0x4, 0x6}})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x6080, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl(r4, 0x4048aecb, &(0x7f000000aa00))
ioctl(r4, 0xc048aeca, 0x0)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f000000aa40)='my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f000000aa80)='my_configfs\x00', &(0x7f000000aac0)='configfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f000000ab00)='my_configfs/nullb\x00', 0x10000, 0x0)
mkdirat(r5, &(0x7f000000ab40)='nullb1\x00', 0x1ff)
unlinkat(r5, &(0x7f000000ab80)='nullb1\x00', 0x200)

2m3.763664424s ago: executing program 0 (id=63):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
socket$inet6(0xa, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f000000a800), 0x2, 0x141102)
writev(r0, &(0x7f000000a840)=[{&(0x7f000000a880)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x187)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a8c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f000000a900)={'ip6tnl0\x00', &(0x7f000000a940)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0xf2, 0x4, 0x4, @empty, @empty, 0x8, 0x80, 0x4, 0x6}})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x6080, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl(r4, 0x4048aecb, &(0x7f000000aa00))
ioctl(r4, 0xc048aeca, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f000000aa40)='my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f000000aa80)='my_configfs\x00', &(0x7f000000aac0)='configfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f000000ab00)='my_configfs/nullb\x00', 0x10000, 0x0)
mkdirat(r5, &(0x7f000000ab40)='nullb1\x00', 0x1ff)
unlinkat(r5, &(0x7f000000ab80)='nullb1\x00', 0x200)

2m2.098850152s ago: executing program 0 (id=65):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
listns(&(0x7f0000000200)={0x20, 0x0, 0x3, 0x14020000, 0x0, 0x1}, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0)
ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}})
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000240)=0x1, 0x4)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2800)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x3, 0x9dc5, 0x0, 0x0, 0xef7826c8d995ba17})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0)
r6 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
rseq(0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r7, @ANYBLOB='.'], 0x20)

2m0.274794533s ago: executing program 0 (id=67):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x20}}, 0x10)

1m54.407120065s ago: executing program 3 (id=70):
r0 = syz_open_dev$sg(&(0x7f0000000280), 0xffff0000, 0x2842)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'])

1m54.302313853s ago: executing program 1 (id=72):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0)

1m51.689180601s ago: executing program 1 (id=76):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80000000000003)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0)

1m47.610526802s ago: executing program 0 (id=80):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323900080003400000000720000480060001000002000005000200110000000c000300080001000000001e14000000110001"], 0xcd0}}, 0x0)

1m46.077849599s ago: executing program 3 (id=83):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f)
syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
socket$inet(0x2, 0xa, 0x9268)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/uevent_helper', 0xa82, 0x0)
sendfile(r6, r6, 0x0, 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r5, 0x84, 0x7a, &(0x7f0000000280)={0x0, <r7=>0xffffffffffffffff, 0x80800}, &(0x7f0000000300)=0xc)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="2e801d", 0x3)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r8, 0x5}, &(0x7f00000002c0)=0x8)

1m42.251483594s ago: executing program 3 (id=86):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0)

1m41.506976617s ago: executing program 1 (id=88):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
socket$inet6(0xa, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f000000a800), 0x2, 0x141102)
writev(r0, &(0x7f000000a840)=[{&(0x7f000000a880)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x187)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a8c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f000000a900)={'ip6tnl0\x00', &(0x7f000000a940)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0xf2, 0x4, 0x4, @empty, @empty, 0x8, 0x80, 0x4, 0x6}})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x6080, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl(r4, 0xc048aeca, 0x0)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f000000aa40)='my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f000000aa80)='my_configfs\x00', &(0x7f000000aac0)='configfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f000000ab00)='my_configfs/nullb\x00', 0x10000, 0x0)
mkdirat(r5, &(0x7f000000ab40)='nullb1\x00', 0x1ff)
unlinkat(r5, &(0x7f000000ab80)='nullb1\x00', 0x200)

1m40.363545246s ago: executing program 3 (id=89):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}})
r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1201, 0xffffffff}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4000000000000009, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x80}}}, &(0x7f0000000280))
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r6=>r0, {0x5}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
ioctl$UBLK_U_CMD_GET_FEATURES(0xffffffffffffffff, 0x80207513, 0x0)
syz_io_uring_submit$UBLK(0x0, r4, 0x0, &(0x7f00000006c0)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r6, 0x80207509, 0x0, 0x0, 0x0, 0x0, 0x51eb5ee40000, 0x0, r7, '\x00', @del_dev_cmd})
writev(r1, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2)
syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
r8 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r8, 0x40044160, 0x3)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@none}}}, 0x9)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
setrlimit(0x7, &(0x7f00000002c0)={0x8, 0x7})
ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x8, 0x400}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1'])
chdir(&(0x7f0000000300)='./file0\x00')
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x1)

1m37.900274568s ago: executing program 1 (id=90):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x20}}, 0x10)

1m36.702961152s ago: executing program 1 (id=92):
mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x2008c000}, 0x0)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
socket$rds(0x15, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f00000004c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0)
read$msr(r4, &(0x7f0000000640)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000019640)=0x80000000000003)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000019680)={@map, 0xffffffffffffffff, 0xc, 0x24}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000196c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x1)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x24000808)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000019700)={0x0, 0x0, &(0x7f0000019740)={&(0x7f0000019780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0)
mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000280), 0x8, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}})
write(r1, &(0x7f0000000100)='isp1301 0x2', 0xb)

1m34.039238785s ago: executing program 0 (id=94):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f)
syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
socket$inet(0x2, 0xa, 0x9268)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/uevent_helper', 0xa82, 0x0)
sendfile(r6, r6, 0x0, 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r5, 0x84, 0x7a, &(0x7f0000000280)={0x0, <r7=>0xffffffffffffffff, 0x80800}, &(0x7f0000000300)=0xc)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="2e801d", 0x3)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r8, 0x5}, &(0x7f00000002c0)=0x8)

1m30.584195639s ago: executing program 3 (id=97):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x80000000000003)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x20}}, 0x10)

1m26.40100079s ago: executing program 3 (id=98):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$unix(0x1, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f40)={0xffffffffffffffff, 0x0, 0x7cb9df5ae125b5d6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x17, 0x0, &(0x7f0000000480)="2dc3afba1c7bd04f0aed673571fb75584f2fd74ad83233", 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1})
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r4, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r2, 0x10, 0x1, 0xa436, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0]}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg0\x00', <r5=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001fc0)={0x6, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="18550000050c00"/16], &(0x7f0000000500)='GPL\x00', 0xcd900, 0x85, &(0x7f00000006c0)=""/133, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x7, 0x7fffffff, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x1, 0x1], 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000300))
r6 = syz_open_procfs(0x0, &(0x7f0000000800)='mountinfo\x00')
ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000040)=0x8)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r5], 0x1413)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), 0x0})
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000600)={0x1, r3})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

1m25.296895091s ago: executing program 1 (id=100):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}}, 0x0)
write$vhost_msg(0xffffffffffffffff, &(0x7f0000000540)={0x1, {&(0x7f0000000380)=""/71, 0x47, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x3, 0x7ffffdbd}]})
statfs(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0)
pipe(0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x100}], 0x2, 0x0, 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x3, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0xe, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xffffffff, 0x9, 0x25, 0x6, 0xfffffff9, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0xb, 0x3, 0x3, 0x297, 0x5, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffffb, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x14, 0xfffffffe, 0xfffffff9, 0x0, 0x1000, 0xb, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x4, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4000004, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x8003, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
readv(r0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)=""/41, 0x29}], 0x1)
write$input_event(r0, &(0x7f0000000e00)={{0x77359400}, 0x15}, 0xfe4f)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000001d40)={0x2, 0x0, {&(0x7f0000000840)=""/178, 0xb2, 0x0, 0x3, 0x2}}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="a800000000010506000000000000000002000000340001801400018008000100ac14142308000200ac1414aa1c0002800500010006000000060002004e220000060003004e230000340002801400018008000100ac1414aa08000200ac1414231c0002800500010006000000060002004e230000060003004e220000100004800c00018005000100010000001400188008000100000001000800020000000000080007000000"], 0xa8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1a, 0x28, 0x66, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e23, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x10, 0x4ede}}}}}}, 0x0)

1m19.404887623s ago: executing program 2 (id=101):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x4002, 0x5}]})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000200))
r7 = syz_open_pts(r6, 0x2)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0xf)
ioctl$TCSBRK(r7, 0x400455c8, 0x1)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001cc0)={'ip_vti0\x00', <r9=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="7833100008000000fb1a0a7bc97a151b9fb3ca57a034d8ad71af7ddce1db732a"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x64, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffef9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001e40)={'vcan0\x00'})

1m18.714789731s ago: executing program 32 (id=94):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f)
syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
socket$inet(0x2, 0xa, 0x9268)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/uevent_helper', 0xa82, 0x0)
sendfile(r6, r6, 0x0, 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r5, 0x84, 0x7a, &(0x7f0000000280)={0x0, <r7=>0xffffffffffffffff, 0x80800}, &(0x7f0000000300)=0xc)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="2e801d", 0x3)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r8, 0x5}, &(0x7f00000002c0)=0x8)

1m9.965794525s ago: executing program 33 (id=98):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$unix(0x1, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f40)={0xffffffffffffffff, 0x0, 0x7cb9df5ae125b5d6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x17, 0x0, &(0x7f0000000480)="2dc3afba1c7bd04f0aed673571fb75584f2fd74ad83233", 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1})
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r4, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r2, 0x10, 0x1, 0xa436, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0]}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg0\x00', <r5=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001fc0)={0x6, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="18550000050c00"/16], &(0x7f0000000500)='GPL\x00', 0xcd900, 0x85, &(0x7f00000006c0)=""/133, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x7, 0x7fffffff, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x1, 0x1], 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000300))
r6 = syz_open_procfs(0x0, &(0x7f0000000800)='mountinfo\x00')
ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000040)=0x8)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r5], 0x1413)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), 0x0})
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000600)={0x1, r3})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

1m9.436998647s ago: executing program 34 (id=100):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}}, 0x0)
write$vhost_msg(0xffffffffffffffff, &(0x7f0000000540)={0x1, {&(0x7f0000000380)=""/71, 0x47, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x3, 0x7ffffdbd}]})
statfs(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0)
pipe(0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x100}], 0x2, 0x0, 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x3, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0xe, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xffffffff, 0x9, 0x25, 0x6, 0xfffffff9, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0xb, 0x3, 0x3, 0x297, 0x5, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffffb, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x14, 0xfffffffe, 0xfffffff9, 0x0, 0x1000, 0xb, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x4, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4000004, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x8003, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
readv(r0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)=""/41, 0x29}], 0x1)
write$input_event(r0, &(0x7f0000000e00)={{0x77359400}, 0x15}, 0xfe4f)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000001d40)={0x2, 0x0, {&(0x7f0000000840)=""/178, 0xb2, 0x0, 0x3, 0x2}}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="a800000000010506000000000000000002000000340001801400018008000100ac14142308000200ac1414aa1c0002800500010006000000060002004e220000060003004e230000340002801400018008000100ac1414aa08000200ac1414231c0002800500010006000000060002004e230000060003004e220000100004800c00018005000100010000001400188008000100000001000800020000000000080007000000"], 0xa8}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1a, 0x28, 0x66, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e23, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x10, 0x4ede}}}}}}, 0x0)

1m7.091080561s ago: executing program 2 (id=107):
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0)
read$msr(r3, &(0x7f0000000440)=""/102392, 0x18ff8)
r4 = memfd_create(&(0x7f0000019540)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7\xc6yE\xa8\xd6A\xe8*\xedEd\x14m|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6E&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00'/717, 0x2)
lseek(r4, 0xffffffffbffffffe, 0x1)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000019840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000019880)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000198c0)={0x0, 0x0, &(0x7f0000019900)={&(0x7f0000019940)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044084)

1m0.675632581s ago: executing program 4 (id=108):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x80000000000003)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x20}}, 0x10)

57.944989614s ago: executing program 2 (id=109):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}})
r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1201, 0xffffffff}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4000000000000009, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x80}}}, &(0x7f0000000280))
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r6=>r0, {0x5}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
ioctl$UBLK_U_CMD_GET_FEATURES(0xffffffffffffffff, 0x80207513, 0x0)
syz_io_uring_submit$UBLK(0x0, r4, 0x0, &(0x7f00000006c0)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r6, 0x80207509, 0x0, 0x0, 0x0, 0x0, 0x51eb5ee40000, 0x0, r7, '\x00', @del_dev_cmd})
writev(r1, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2)
syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
r8 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r8, 0x40044160, 0x3)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@none}}}, 0x9)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
setrlimit(0x7, &(0x7f00000002c0)={0x8, 0x7})
ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x8, 0x400}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1'])
chdir(&(0x7f0000000300)='./file0\x00')
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x1)

52.949830707s ago: executing program 4 (id=110):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f)
syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
socket$inet(0x2, 0xa, 0x9268)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/uevent_helper', 0xa82, 0x0)
sendfile(r6, r6, 0x0, 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r5, 0x84, 0x7a, &(0x7f0000000280)={0x0, <r7=>0xffffffffffffffff, 0x80800}, &(0x7f0000000300)=0xc)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/afs/sysname\x00', 0x2, 0x84)
write(r8, &(0x7f0000000440)="2e801d", 0x3)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r9, 0x5}, &(0x7f00000002c0)=0x8)

48.81314055s ago: executing program 4 (id=111):
mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x2008c000}, 0x0)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
socket$rds(0x15, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
r2 = getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0)
read$msr(r4, &(0x7f0000000640)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000019640)=0x80000000000003)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000019680)={@map, 0xffffffffffffffff, 0xc, 0x24}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000196c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x1)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x24000808)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000019700)={0x0, 0x0, &(0x7f0000019740)={&(0x7f0000019780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0)
mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000280), 0x8, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}})
write(r1, &(0x7f0000000100)='isp1301 0x2', 0xb)

48.709976778s ago: executing program 2 (id=112):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323900080003400000000720000480060001000002000005000200110000000c000300080001000000001e14000000110001"], 0xcd0}}, 0x0)

42.969829158s ago: executing program 2 (id=113):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x20}}, 0x10)

40.90058197s ago: executing program 4 (id=114):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$unix(0x1, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f40)={0xffffffffffffffff, 0x0, 0x7cb9df5ae125b5d6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x17, 0x0, &(0x7f0000000480)="2dc3afba1c7bd04f0aed673571fb75584f2fd74ad83233", 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1})
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r4, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r2, 0x10, 0x1, 0xa436, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0]}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg0\x00', <r5=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001fc0)={0x6, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="18550000050c00"/16], &(0x7f0000000500)='GPL\x00', 0xcd900, 0x85, &(0x7f00000006c0)=""/133, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x7, 0x7fffffff, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x1, 0x1], 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
read$FUSE(0xffffffffffffffff, &(0x7f0000002540)={0x2020}, 0x2020)
ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000040)=0x8)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r5], 0x1413)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), 0x0})
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000600)={0x1, r3})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

35.084791757s ago: executing program 2 (id=115):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x844)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r1 = getpgrp(0x0)
syz_open_dev$sndmidi(&(0x7f0000000300), 0xc7, 0x2000)
sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x6)
r3 = add_key$fscrypt_v1(&(0x7f0000019480), &(0x7f00000194c0), &(0x7f0000019500)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000195c0)=ANY=[@ANYBLOB="0100000000"])
keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0)
setpriority(0x0, 0xffffffffffffffff, 0x800)
read$msr(r5, &(0x7f0000000400)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x47, &(0x7f0000019400)=0x7)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000019700), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000019740)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000019780)={0x48, 0x2, r7, 0x0, <r8=>0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_DESTROY$stdev(r6, 0x3b80, &(0x7f0000019840)={0x8, r8})

35.082935095s ago: executing program 4 (id=116):
add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @hyper}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000480)={0x8, {{0xa, 0x4e23, 0x1000004, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108)
pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0)
syz_emit_ethernet(0x19a, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60eaff02000c2c00fe8000000000000000000000000000bbfe8000"], 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
timerfd_gettime(0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0)

34.37130332s ago: executing program 4 (id=117):
mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x2008c000}, 0x0)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
socket$rds(0x15, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
r2 = getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0)
read$msr(r4, &(0x7f0000000640)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000019640)=0x80000000000003)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000019680)={@map, 0xffffffffffffffff, 0xc, 0x24}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000196c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x1)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x24000808)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000019700)={0x0, 0x0, &(0x7f0000019740)={&(0x7f0000019780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0)
mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000280), 0x8, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}})
write(r1, &(0x7f0000000100)='isp1301 0x2', 0xb)

0s ago: executing program 35 (id=115):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x844)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r1 = getpgrp(0x0)
syz_open_dev$sndmidi(&(0x7f0000000300), 0xc7, 0x2000)
sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x6)
r3 = add_key$fscrypt_v1(&(0x7f0000019480), &(0x7f00000194c0), &(0x7f0000019500)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000195c0)=ANY=[@ANYBLOB="0100000000"])
keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0)
setpriority(0x0, 0xffffffffffffffff, 0x800)
read$msr(r5, &(0x7f0000000400)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x47, &(0x7f0000019400)=0x7)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000019700), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000019740)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000019780)={0x48, 0x2, r7, 0x0, <r8=>0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_DESTROY$stdev(r6, 0x3b80, &(0x7f0000019840)={0x8, r8})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts.
[   70.587177][ T5592] cgroup: Unknown subsys name 'net'
[   70.696442][ T5592] cgroup: Unknown subsys name 'cpuset'
[   70.705081][ T5592] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   71.434699][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[   71.434770][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[   72.088448][ T5592] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   74.521810][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   74.522825][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   74.524020][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   74.532840][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   74.534957][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   74.535254][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   74.535654][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   74.542857][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   74.543402][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   74.544258][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   74.544442][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   74.544539][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   74.545806][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   74.546541][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   74.547938][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   74.551209][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   74.555583][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   74.555916][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   74.556398][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   74.557005][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   74.557843][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   74.583551][ T4926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   74.600424][ T4926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   74.606530][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   74.612742][ T4926] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   75.489380][ T5604] rxe_eth0 speed is unknown, defaulting to 1000
[   75.491404][ T5605] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   75.512185][ T5604] rxe_eth0 speed is unknown, defaulting to 1000
[   75.523459][ T5604] rxe_eth0 speed is unknown, defaulting to 1000
[   75.523604][ T5606] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   75.531325][ T5614] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   75.546921][ T5603] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   75.816562][ T5604] infiniband rxe0: set active
[   75.818698][ T5604] infiniband rxe0: added rxe_eth0
[   75.842028][ T5604] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   75.842059][ T5604] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   75.842091][ T5604] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   75.873626][ T5604] RDS/IB: rxe0: added
[   75.873897][ T5604] smc: adding ib device rxe0 with port count 1
[   75.873974][ T5604] smc:    ib device rxe0 port 1 has no pnetid
[   75.921713][  T948] rxe_eth0 speed is unknown, defaulting to 1000
[   75.940618][   T46] rxe_eth0 speed is unknown, defaulting to 1000
[   75.959167][ T5604] rxe_eth0 speed is unknown, defaulting to 1000
[   76.237699][ T5604] rxe_eth0 speed is unknown, defaulting to 1000
[   76.586107][ T5604] rxe_eth0 speed is unknown, defaulting to 1000
[   76.633249][ T5615] Bluetooth: hci2: command tx timeout
[   76.633249][ T5613] Bluetooth: hci1: command tx timeout
[   76.633398][ T5615] Bluetooth: hci3: command tx timeout
[   76.638872][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.639678][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.639816][ T5614] bridge_slave_0: entered allmulticast mode
[   76.641714][ T5614] bridge_slave_0: entered promiscuous mode
[   76.712423][ T5609] Bluetooth: hci4: command tx timeout
[   76.712544][ T5609] Bluetooth: hci0: command tx timeout
[   76.774299][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.774405][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.774803][ T5614] bridge_slave_1: entered allmulticast mode
[   76.776532][ T5614] bridge_slave_1: entered promiscuous mode
[   76.810833][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.810928][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.811178][ T5603] bridge_slave_0: entered allmulticast mode
[   76.812027][ T5603] bridge_slave_0: entered promiscuous mode
[   76.849132][ T5604] rxe_eth0 speed is unknown, defaulting to 1000
[   76.893954][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.894077][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.894466][ T5603] bridge_slave_1: entered allmulticast mode
[   76.896978][ T5603] bridge_slave_1: entered promiscuous mode
[   76.926018][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.926170][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.926293][ T5605] bridge_slave_0: entered allmulticast mode
[   76.927985][ T5605] bridge_slave_0: entered promiscuous mode
[   76.938771][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.946032][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.946210][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.946348][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.947581][ T5606] bridge_slave_0: entered allmulticast mode
[   76.953297][ T5606] bridge_slave_0: entered promiscuous mode
[   76.998461][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.999384][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.999484][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.999595][ T5605] bridge_slave_1: entered allmulticast mode
[   77.005908][ T5605] bridge_slave_1: entered promiscuous mode
[   77.055851][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.055981][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.056099][ T5606] bridge_slave_1: entered allmulticast mode
[   77.058711][ T5606] bridge_slave_1: entered promiscuous mode
[   77.063575][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.124161][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.127447][ T5614] team0: Port device team_slave_0 added
[   77.169377][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.185397][ T5614] team0: Port device team_slave_1 added
[   77.195872][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.205357][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.211364][ T5603] team0: Port device team_slave_0 added
[   77.265242][ T5603] team0: Port device team_slave_1 added
[   77.267140][ T5605] team0: Port device team_slave_0 added
[   77.269878][ T5605] team0: Port device team_slave_1 added
[   77.315600][ T5606] team0: Port device team_slave_0 added
[   77.348281][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.348297][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.348325][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.351669][ T5606] team0: Port device team_slave_1 added
[   77.386377][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.386393][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.386416][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.387644][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.387655][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.387678][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.390869][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.390882][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.390905][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.409272][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.409288][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.409312][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.414137][ T5604] rxe_eth0 speed is unknown, defaulting to 1000
[   77.416326][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.416337][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.416360][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.647818][ T5614] hsr_slave_0: entered promiscuous mode
[   77.648918][ T5614] hsr_slave_1: entered promiscuous mode
[   77.670645][ T5603] hsr_slave_0: entered promiscuous mode
[   77.671649][ T5603] hsr_slave_1: entered promiscuous mode
[   77.673288][ T5603] debugfs: 'hsr0' already exists in 'hsr'
[   77.673378][ T5603] Cannot create hsr debugfs directory
[   77.695221][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.695236][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.695260][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.714740][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.714755][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.714779][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.735259][ T5605] hsr_slave_0: entered promiscuous mode
[   77.736254][ T5605] hsr_slave_1: entered promiscuous mode
[   77.737049][ T5605] debugfs: 'hsr0' already exists in 'hsr'
[   77.737066][ T5605] Cannot create hsr debugfs directory
[   77.908977][ T5606] hsr_slave_0: entered promiscuous mode
[   77.909643][ T5606] hsr_slave_1: entered promiscuous mode
[   77.910032][ T5606] debugfs: 'hsr0' already exists in 'hsr'
[   77.910050][ T5606] Cannot create hsr debugfs directory
[   78.339972][ T5603] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   78.351825][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   78.354287][ T5603] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   78.364721][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   78.367468][ T5603] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   78.381886][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   78.398476][ T5603] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   78.403735][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   78.466189][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.481622][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   78.498627][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.506541][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   78.516961][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.527883][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   78.570203][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   78.582149][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   78.650117][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.650279][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.650399][ T5604] bridge_slave_0: entered allmulticast mode
[   78.652022][ T5604] bridge_slave_0: entered promiscuous mode
[   78.698661][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.698822][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.699196][ T5604] bridge_slave_1: entered allmulticast mode
[   78.700773][ T5604] bridge_slave_1: entered promiscuous mode
[   78.715838][ T5615] Bluetooth: hci3: command tx timeout
[   78.722522][ T5615] Bluetooth: hci1: command tx timeout
[   78.722548][ T5615] Bluetooth: hci2: command tx timeout
[   78.725093][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   78.736553][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   78.737397][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   78.747487][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   78.769592][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   78.776485][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   78.777403][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   78.783549][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   78.803415][ T5615] Bluetooth: hci4: command tx timeout
[   78.803502][ T5609] Bluetooth: hci0: command tx timeout
[   78.811889][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.850068][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.923427][ T5604] team0: Port device team_slave_0 added
[   78.926248][ T5604] team0: Port device team_slave_1 added
[   78.946181][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   78.949815][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   78.974147][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.974163][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.974186][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.977630][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   78.980142][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   78.980824][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   78.994123][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   78.995157][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.995169][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.995193][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.017616][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.044345][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   79.124528][ T5604] hsr_slave_0: entered promiscuous mode
[   79.125404][ T5604] hsr_slave_1: entered promiscuous mode
[   79.125841][ T5604] debugfs: 'hsr0' already exists in 'hsr'
[   79.125858][ T5604] Cannot create hsr debugfs directory
[   79.130013][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.252024][ T5603] 8021q: adding VLAN 0 to HW filter on device team0
[   79.287534][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.287631][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.318005][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.318092][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.370791][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.441979][ T5614] 8021q: adding VLAN 0 to HW filter on device team0
[   79.478196][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.478254][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.479389][ T5604] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   79.481882][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   79.525948][ T5604] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   79.529147][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   79.530526][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.530582][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.566342][ T5604] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   79.569294][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   79.591635][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.592004][ T5604] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   79.610707][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   79.640248][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.707737][ T5605] 8021q: adding VLAN 0 to HW filter on device team0
[   79.731253][ T5606] 8021q: adding VLAN 0 to HW filter on device team0
[   79.763842][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.763960][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.800815][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.800917][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.828242][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.828339][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.848338][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.848449][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.113392][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.195155][ T5604] 8021q: adding VLAN 0 to HW filter on device team0
[   80.203080][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.203186][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.248429][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.248540][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.736029][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.754830][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.792937][ T5615] Bluetooth: hci1: command tx timeout
[   80.792967][ T5615] Bluetooth: hci3: command tx timeout
[   80.793093][ T5609] Bluetooth: hci2: command tx timeout
[   80.873476][ T5613] Bluetooth: hci4: command tx timeout
[   80.873559][ T5609] Bluetooth: hci0: command tx timeout
[   80.985201][ T5603] veth0_vlan: entered promiscuous mode
[   81.029190][ T5603] veth1_vlan: entered promiscuous mode
[   81.049175][ T5614] veth0_vlan: entered promiscuous mode
[   81.102200][ T5614] veth1_vlan: entered promiscuous mode
[   81.155112][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.179867][ T5603] veth0_macvtap: entered promiscuous mode
[   81.208589][ T5603] veth1_macvtap: entered promiscuous mode
[   81.257312][ T5614] veth0_macvtap: entered promiscuous mode
[   81.286012][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.286562][ T5614] veth1_macvtap: entered promiscuous mode
[   81.308751][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.321890][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.371387][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.394241][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.395164][   T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.401415][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.447405][ T5605] veth0_vlan: entered promiscuous mode
[   81.535368][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.535784][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.536059][   T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.536423][   T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.536702][   T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.537829][   T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.543857][ T5605] veth1_vlan: entered promiscuous mode
[   81.572897][   T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.580479][ T5606] veth0_vlan: entered promiscuous mode
[   81.669365][ T5606] veth1_vlan: entered promiscuous mode
[   81.671469][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.671489][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.813945][ T5605] veth0_macvtap: entered promiscuous mode
[   81.821820][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.821838][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.843983][ T5605] veth1_macvtap: entered promiscuous mode
[   81.878658][  T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.878679][  T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.935574][ T5606] veth0_macvtap: entered promiscuous mode
[   81.948836][ T5606] veth1_macvtap: entered promiscuous mode
[   81.999794][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.999815][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.000126][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.054143][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.083618][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.126603][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.164719][ T5604] veth0_vlan: entered promiscuous mode
[   82.185905][ T5603] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   82.226793][  T222] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.226841][  T222] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.226875][  T222] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.226908][  T222] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.226942][  T222] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.226975][  T222] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.227007][  T222] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.227041][  T222] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.231435][ T5604] veth1_vlan: entered promiscuous mode
[   83.730290][ T5613] Bluetooth: hci3: command tx timeout
[   83.730326][ T5613] Bluetooth: hci1: command tx timeout
[   83.730349][ T5613] Bluetooth: hci0: command tx timeout
[   83.730370][ T5613] Bluetooth: hci4: command tx timeout
[   83.730437][ T5609] Bluetooth: hci2: command tx timeout
[   83.818482][   T51] IPVS: starting estimator thread 0...
[   83.943353][ T5813] IPVS: using max 28 ests per chain, 67200 per kthread
[   84.194910][ T5816] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   84.368864][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.368922][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.826640][ T5604] veth0_macvtap: entered promiscuous mode
[   85.181978][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.182084][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.355793][ T5604] veth1_macvtap: entered promiscuous mode
[   85.438860][  T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.438881][  T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.460693][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.460713][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.507364][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.749054][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.786287][ T5713] rxe_eth0 speed is unknown, defaulting to 1000
[   86.822912][   T10] cfg80211: failed to load regulatory.db
[   86.895843][  T222] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.896205][  T222] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.965971][  T222] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.984279][  T222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.153853][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.153874][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.302270][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.303125][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.664901][ T5853] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   91.268227][ T5609] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   95.272514][ T5873] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   95.572415][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[   95.880534][ T5609] Bluetooth: hci5: command 0x1003 tx timeout
[   95.903864][ T5615] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  101.988442][ T5896] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  104.262778][ T5914] CIFS: VFS: UNC: path must begin with // or \\
[  104.262880][ T5914] Malformed UNC in devname
[  104.262880][ T5914] 
[  104.263050][ T5914] CIFS: VFS: Malformed UNC in devname
[  104.687965][ T5917] Zero length message leads to an empty skb
[  105.453538][ T5911] ima: policy update failed
[  105.461586][   T32] audit: type=1802 audit(1792145735.191:2): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.19" res=0 errno=-22
[  108.749647][ T5615] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  110.522911][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  110.697439][ T5613] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  110.719340][   T51] IPVS: starting estimator thread 0...
[  110.842882][ T5943] IPVS: using max 30 ests per chain, 72000 per kthread
[  110.937432][ T5945] SET target dimension over the limit!
[  110.944661][ T5945] syz.1.28 uses obsolete (PF_INET,SOCK_PACKET)
[  111.026978][ T5945] sctp: [Deprecated]: syz.1.28 (pid 5945) Use of struct sctp_assoc_value in delayed_ack socket option.
[  111.026978][ T5945] Use struct sctp_sack_info instead
[  113.492386][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  113.581561][ T1106] IPVS: starting estimator thread 0...
[  113.689110][ T5951] IPVS: using max 30 ests per chain, 72000 per kthread
[  116.968366][  T222] IPVS: starting estimator thread 0...
[  117.072415][ T5961] IPVS: using max 30 ests per chain, 72000 per kthread
[  117.552883][ T5965] input: syz1 as /devices/virtual/input/input5
[  119.656394][ T5978] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  121.177310][ T5985] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  121.903943][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  122.070919][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  122.071038][    T9] usb 5-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40
[  122.081440][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  122.081463][    T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  122.081612][    T9] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  122.081645][    T9] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  122.081680][    T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  122.081703][    T9] usb 5-1: config 1 interface 1 has no altsetting 0
[  122.089392][    T9] usb 5-1: string descriptor 0 read error: -22
[  122.089514][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.322731][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  123.669055][    T9] usb 5-1: 2:0: failed to get current value for ch 0 (-71)
[  123.724002][    T9] usb 5-1: 2:0: cannot get RANGE values for control 2 (id 2)
[  123.724032][    T9] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  123.724049][    T9] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1
[  123.932694][    T9] usb 5-1: 2:0: cannot get RANGE values for control 2 (id 2)
[  124.007431][    T9] usb 5-1: 2:0: cannot get RANGE values for control 2 (id 2)
[  124.104223][    T9] usb 5-1: USB disconnect, device number 2
[  126.949188][ T6013] input: syz1 as /devices/virtual/input/input6
[  128.827455][ T6023] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  129.572369][ T6024] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  131.888215][ T6029] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  132.874834][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  132.874890][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  135.006559][ T6043] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  136.532538][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  136.621966][ T6050] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  137.931437][ T6054] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  139.092680][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  139.202467][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  141.827426][ T6069] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  146.362638][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  146.573508][ T6087] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  149.032969][ T6106] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  150.330028][ T6103] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  152.473151][ T6117] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  154.452330][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  156.152671][   T46] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  156.215171][ T6137] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  156.320505][   T46] usb 3-1: unable to get BOS descriptor or descriptor too short
[  156.320701][   T46] usb 3-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40
[  156.357803][   T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  156.357856][   T46] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  156.358004][   T46] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  156.358091][   T46] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  156.358182][   T46] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  156.358240][   T46] usb 3-1: config 1 interface 1 has no altsetting 0
[  156.514890][   T46] usb 3-1: string descriptor 0 read error: -22
[  156.515497][   T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.124080][   T46] usb 3-1: 2:0: failed to get current value for ch 0 (-32)
[  157.254255][ T6139] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  157.413466][ T6140] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  157.503262][   T46] usb 3-1: 2:0: cannot get RANGE values for control 2 (id 2)
[  157.503296][   T46] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  157.503312][   T46] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1
[  158.590426][   T46] usb 3-1: 2:0: cannot get RANGE values for control 2 (id 2)
[  158.613489][   T46] usb 3-1: 2:0: cannot get RANGE values for control 2 (id 2)
[  158.638558][   T46] usb 3-1: USB disconnect, device number 2
[  159.572372][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  160.136246][ T6153] netlink: 'syz.2.78': attribute type 5 has an invalid length.
[  160.533686][ T6152] program syz.3.70 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  161.680120][ T6163] netlink: 'syz.4.82': attribute type 1 has an invalid length.
[  161.680175][ T6163] netlink: 'syz.4.82': attribute type 2 has an invalid length.
[  162.449147][ T6164] SET target dimension over the limit!
[  162.551722][ T6164] sctp: [Deprecated]: syz.3.83 (pid 6164) Use of struct sctp_assoc_value in delayed_ack socket option.
[  162.551722][ T6164] Use struct sctp_sack_info instead
[  171.403221][ T6196] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  179.434611][ T6220] 9pnet_fd: p9_fd_create_tcp (6220): problem connecting socket to 127.0.0.1
[  189.784298][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  189.786642][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  189.787246][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  189.789784][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  189.790478][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  193.756048][ T5613] Bluetooth: hci5: command tx timeout
[  194.323455][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  194.323512][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  194.515389][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.680950][ T6263] input: syz1 as /devices/virtual/input/input7
[  195.285484][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.228007][ T5613] Bluetooth: hci5: command tx timeout
[  198.009193][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.309380][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.314003][ T5609] Bluetooth: hci5: command tx timeout
[  198.450752][ T6240] rxe_eth0 speed is unknown, defaulting to 1000
[  198.514142][ T5615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  198.524720][ T5615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  198.525739][ T5615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  198.527996][ T5615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  198.531392][ T5615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  199.184512][ T5609] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  199.226569][ T5609] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  199.270884][ T5609] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  199.459492][ T5620] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  199.460109][ T5620] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  199.591476][   T13] bridge_slave_1: left allmulticast mode
[  199.591513][   T13] bridge_slave_1: left promiscuous mode
[  199.595057][ T5615] Bluetooth: hci4: command 0x1003 tx timeout
[  199.595124][ T5613] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  199.679378][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.392422][ T5613] Bluetooth: hci5: command tx timeout
[  200.441972][   T13] bridge_slave_0: left allmulticast mode
[  200.441998][   T13] bridge_slave_0: left promiscuous mode
[  200.442241][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.712597][ T5613] Bluetooth: hci6: command tx timeout
[  201.530413][ T5613] Bluetooth: hci3: command 0x0406 tx timeout
[  201.530455][ T5613] Bluetooth: hci1: command 0x0406 tx timeout
[  201.592515][ T5615] Bluetooth: hci7: command tx timeout
[  203.224036][ T4926] Bluetooth: hci6: command tx timeout
[  203.682520][   T54] Bluetooth: hci7: command tx timeout
[  204.524168][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  205.231795][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  205.259845][   T13] bond0 (unregistering): Released all slaves
[  205.284950][   T54] Bluetooth: hci6: command tx timeout
[  205.752502][   T54] Bluetooth: hci7: command tx timeout
[  206.164891][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1
[  207.611674][   T54] Bluetooth: hci6: command tx timeout
[  207.859497][   T54] Bluetooth: hci7: command tx timeout
[  210.828390][ T6277] rxe_eth0 speed is unknown, defaulting to 1000
[  212.220344][ T6281] rxe_eth0 speed is unknown, defaulting to 1000
[  212.406768][ T6240] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.419623][ T6240] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.419786][ T6240] bridge_slave_0: entered allmulticast mode
[  212.450422][ T6240] bridge_slave_0: entered promiscuous mode
[  212.491055][ T6240] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.491166][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.491315][ T6240] bridge_slave_1: entered allmulticast mode
[  212.519843][ T6240] bridge_slave_1: entered promiscuous mode
[  212.756291][ T6240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  212.833232][ T6240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.141174][ T6240] team0: Port device team_slave_0 added
[  213.161507][ T6240] team0: Port device team_slave_1 added
[  220.273364][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2
[  220.275037][ T6240] batman_adv: batadv0: Adding interface: batadv_slave_0
[  220.275051][ T6240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  220.275076][ T6240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  220.376906][   T13] hsr_slave_0: left promiscuous mode
[  220.381825][   T13] hsr_slave_1: left promiscuous mode
[  220.395118][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.395154][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.399449][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.399468][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.447071][   T13] veth1_macvtap: left promiscuous mode
[  220.447124][   T13] veth0_macvtap: left promiscuous mode
[  220.447353][   T13] veth1_vlan: left promiscuous mode
[  220.447436][   T13] veth0_vlan: left promiscuous mode
[  224.719004][   T13] team0 (unregistering): Port device team_slave_1 removed
[  224.878231][   T13] team0 (unregistering): Port device team_slave_0 removed
[  225.285031][ T6240] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.285048][ T6240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  225.285072][ T6240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.610687][ T6240] hsr_slave_0: entered promiscuous mode
[  226.622385][ T6240] hsr_slave_1: entered promiscuous mode
[  232.442218][   T13] IPVS: stop unused estimator thread 0...
[  233.179135][    C1] sched: DL replenish lagged too much
[  234.235294][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.410350][ T6277] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.410451][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.410587][ T6277] bridge_slave_0: entered allmulticast mode
[  234.416246][ T6277] bridge_slave_0: entered promiscuous mode
[  234.440304][ T6277] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.448811][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.448980][ T6277] bridge_slave_1: entered allmulticast mode
[  234.450881][ T6277] bridge_slave_1: entered promiscuous mode
[  235.247779][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.852276][ T6393] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02
[  244.355947][ T6403] 9pnet_fd: p9_fd_create_tcp (6403): problem connecting socket to 127.0.0.1
[  256.884855][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  256.892033][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  314.276654][ T5609] Bluetooth: hci5: command 0x0406 tx timeout
[  317.294680][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  317.308946][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  325.831415][ T5615] Bluetooth: hci7: command 0x0406 tx timeout
[  325.831500][ T5615] Bluetooth: hci6: command 0x0406 tx timeout
[  378.838453][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  378.845619][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  404.326731][   T33] INFO: task kworker/u8:1:13 blocked for more than 149 seconds.
[  404.326760][   T33]       Not tainted syzkaller #0
[  404.326771][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  404.326779][   T33] task:kworker/u8:1    state:D stack:22952 pid:13    tgid:13    ppid:2      task_flags:0x4208060 flags:0x00080000
[  404.326833][   T33] Workqueue: netns cleanup_net
[  404.326876][   T33] Call Trace:
[  404.326886][   T33]  <TASK>
[  404.326899][   T33]  __schedule+0x17dd/0x5820
[  404.326950][   T33]  ? __pfx___schedule+0x10/0x10
[  404.326980][   T33]  ? schedule+0x90/0x2b0
[  404.327003][   T33]  schedule+0x164/0x2b0
[  404.327024][   T33]  schedule_preempt_disabled+0x13/0x30
[  404.327044][   T33]  __mutex_lock+0x7c4/0x15a0
[  404.327070][   T33]  ? __mutex_lock+0x5cd/0x15a0
[  404.327096][   T33]  ? nsim_destroy+0x173/0x800
[  404.327117][   T33]  ? __pfx___mutex_lock+0x10/0x10
[  404.327137][   T33]  ? __kfree_rcu_sheaf+0x21/0x690
[  404.327156][   T33]  ? __kfree_rcu_sheaf+0x21/0x690
[  404.327177][   T33]  ? mutex_is_locked+0x17/0x50
[  404.327200][   T33]  ? mutex_destroy+0x39/0xf0
[  404.327221][   T33]  ? kvfree_call_rcu+0x9c/0x430
[  404.327257][   T33]  nsim_destroy+0x173/0x800
[  404.327283][   T33]  __nsim_dev_port_del+0x14e/0x200
[  404.327311][   T33]  nsim_dev_reload_destroy+0x288/0x490
[  404.327340][   T33]  nsim_dev_reload_down+0x8a/0xc0
[  404.327365][   T33]  devlink_reload+0x1c5/0x890
[  404.327400][   T33]  ? __pfx_devlink_reload+0x10/0x10
[  404.327442][   T33]  devlink_pernet_pre_exit+0x1ff/0x420
[  404.327471][   T33]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[  404.327497][   T33]  ? _raw_spin_unlock+0x28/0x50
[  404.327514][   T33]  ? iput+0xb7f/0xf00
[  404.327542][   T33]  ops_undo_list+0x17d/0x8f0
[  404.327570][   T33]  ? __pfx_ops_undo_list+0x10/0x10
[  404.327593][   T33]  ? idr_destroy+0x218/0x290
[  404.327612][   T33]  ? do_raw_spin_unlock+0xf5/0x200
[  404.327644][   T33]  cleanup_net+0x572/0x810
[  404.327667][   T33]  ? __pfx_cleanup_net+0x10/0x10
[  404.327694][   T33]  ? rcu_is_watching+0x16/0xb0
[  404.327721][   T33]  ? process_scheduled_works+0x97a/0x1630
[  404.327746][   T33]  process_scheduled_works+0xc3d/0x1630
[  404.327802][   T33]  ? __pfx_process_scheduled_works+0x10/0x10
[  404.327834][   T33]  ? assign_work+0x3cf/0x5d0
[  404.327864][   T33]  worker_thread+0xa47/0xfb0
[  404.327918][   T33]  kthread+0x38b/0x480
[  404.327937][   T33]  ? __pfx_worker_thread+0x10/0x10
[  404.327960][   T33]  ? __pfx_kthread+0x10/0x10
[  404.327981][   T33]  ret_from_fork+0x514/0xb70
[  404.328004][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[  404.328023][   T33]  ? __switch_to+0xc78/0x1410
[  404.328051][   T33]  ? __pfx_kthread+0x10/0x10
[  404.328072][   T33]  ret_from_fork_asm+0x1a/0x30
[  404.328107][   T33]  </TASK>
[  404.328257][   T33] INFO: task syz-executor:6281 blocked for more than 149 seconds.
[  404.328272][   T33]       Not tainted syzkaller #0
[  404.328281][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  404.328290][   T33] task:syz-executor    state:D stack:23304 pid:6281  tgid:6281  ppid:6276   task_flags:0x400140 flags:0x00080000
[  404.328336][   T33] Call Trace:
[  404.328342][   T33]  <TASK>
[  404.328354][   T33]  __schedule+0x17dd/0x5820
[  404.328404][   T33]  ? __pfx___schedule+0x10/0x10
[  404.328433][   T33]  ? schedule+0x90/0x2b0
[  404.328456][   T33]  schedule+0x164/0x2b0
[  404.328478][   T33]  schedule_preempt_disabled+0x13/0x30
[  404.328496][   T33]  __mutex_lock+0x7c4/0x15a0
[  404.328522][   T33]  ? __mutex_lock+0x5cd/0x15a0
[  404.328548][   T33]  ? rtnl_newlink+0xc1d/0x1c30
[  404.328572][   T33]  ? __pfx___mutex_lock+0x10/0x10
[  404.328604][   T33]  ? ns_capable+0x84/0xe0
[  404.328627][   T33]  ? rtnl_nets_add+0x16c/0x300
[  404.328648][   T33]  ? refcount_inc+0x46/0x70
[  404.328669][   T33]  rtnl_newlink+0xc1d/0x1c30
[  404.328703][   T33]  ? __pfx_rtnl_newlink+0x10/0x10
[  404.328722][   T33]  ? __lock_acquire+0x747/0x2de0
[  404.328752][   T33]  ? __lock_acquire+0x747/0x2de0
[  404.328838][   T33]  ? kernel_text_address+0xa5/0xe0
[  404.328860][   T33]  ? __pfx_hook_capable+0x10/0x10
[  404.328879][   T33]  ? unwind_get_return_address+0x4d/0x90
[  404.328902][   T33]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  404.328950][   T33]  ? __pfx_rtnl_newlink+0x10/0x10
[  404.328970][   T33]  rtnetlink_rcv_msg+0x802/0xc00
[  404.328995][   T33]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  404.329015][   T33]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  404.329038][   T33]  ? __lock_acquire+0x747/0x2de0
[  404.329072][   T33]  netlink_rcv_skb+0x226/0x4a0
[  404.329101][   T33]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  404.329125][   T33]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  404.329165][   T33]  ? netlink_deliver_tap+0x2e/0x1b0
[  404.329193][   T33]  ? netlink_deliver_tap+0x2e/0x1b0
[  404.329225][   T33]  netlink_unicast+0x8ef/0xa80
[  404.329276][   T33]  netlink_sendmsg+0x7f0/0xb20
[  404.329301][   T33]  ? __pfx_netlink_sendmsg+0x10/0x10
[  404.329324][   T33]  ? aa_sock_msg_perm+0x144/0x210
[  404.329347][   T33]  ? apparmor_socket_sendmsg+0x98/0x360
[  404.329375][   T33]  ? __pfx_netlink_sendmsg+0x10/0x10
[  404.329392][   T33]  sock_sendmsg_nosec+0x14e/0x190
[  404.329423][   T33]  __sys_sendto+0x408/0x5a0
[  404.329450][   T33]  ? __pfx___sys_sendto+0x10/0x10
[  404.329499][   T33]  ? rcu_is_watching+0x16/0xb0
[  404.329531][   T33]  __x64_sys_sendto+0xde/0x100
[  404.329555][   T33]  do_syscall_64+0x166/0x520
[  404.329576][   T33]  ? trace_irq_disable+0x3b/0x140
[  404.329598][   T33]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.329617][   T33]  ? clear_bhb_loop+0x70/0xc0
[  404.329640][   T33]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.329658][   T33] RIP: 0033:0x7fdc7855ed8e
[  404.329682][   T33] RSP: 002b:00007ffd8285c618 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  404.329701][   T33] RAX: ffffffffffffffda RBX: 000055557799c500 RCX: 00007fdc7855ed8e
[  404.329715][   T33] RDX: 000000000000004c RSI: 00007fdc79354670 RDI: 0000000000000003
[  404.329727][   T33] RBP: 0000000000000001 R08: 00007ffd8285c694 R09: 000000000000000c
[  404.329738][   T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  404.329750][   T33] R13: 0000000000000000 R14: 00007fdc79354670 R15: 0000000000000000
[  404.329780][   T33]  </TASK>
[  404.329802][   T33] 
[  404.329802][   T33] Showing all locks held in the system:
[  404.329810][   T33] locks held by kthreadd/2: 1, last CPU#0:
[  404.329823][   T33]  #0: ffffffff8feb0830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  404.329870][   T33] locks held by kworker/R-kvfre/6: 1, on CPU#1:
[  404.329883][   T33]  #0: ffffffff8fbf64e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  404.329934][   T33] locks held by kworker/0:0/9: 4, on CPU#0:
[  404.329947][   T33]  #0: ffff88807f711148 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.330001][   T33]  #1: ffffc900000e7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.330062][   T33]  #2: ffff88807ec35440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0
[  404.330116][   T33]  #3: ffff8880316a0d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0
[  404.330168][   T33] locks held by kworker/0:1/10: 4, on CPU#0:
[  404.330181][   T33]  #0: ffff888067265d48 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.330241][   T33]  #1: ffffc900000f7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.330302][   T33]  #2: ffff88807cdb1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0
[  404.330354][   T33]  #3: ffff8880316a7028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0
[  404.330406][   T33] locks held by kworker/u8:0/12: 2, last CPU#0:
[  404.330419][   T33]  #0: ffff888079298948 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.330468][   T33]  #1: ffffc90000117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.330518][   T33] locks held by kworker/u8:1/13: 6, on CPU#1:
[  404.330531][   T33]  #0: ffff88801d2de148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.330579][   T33]  #1: ffffc90000127c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.330644][   T33]  #2: ffffffff91250868 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[  404.330689][   T33]  #3: ffff888077247128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420
[  404.330738][   T33]  #4: ffff888077246258 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420
[  404.330788][   T33]  #5: ffffffff9125f220 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800
[  404.330831][   T33] locks held by kworker/R-mm_pe/14: 1, on CPU#0:
[  404.330843][   T33]  #0: ffffffff8fbf64e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xdbe/0x12a0
[  404.330897][   T33] locks held by kworker/1:0/27: 4, last CPU#1:
[  404.330909][   T33]  #0: ffff88807e3e5d48 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.330963][   T33]  #1: ffffc90000a1fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.331025][   T33]  #2: ffff88807d409440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0
[  404.331077][   T33]  #3: ffff88807b8a0330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0
[  404.331130][   T33] locks held by khungtaskd/33: 1, last CPU#0:
[  404.331142][   T33]  #0: ffffffff8fd5a2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  404.331186][   T33] locks held by kworker/u8:2/44: 3, last CPU#0:
[  404.331199][   T33]  #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.331254][   T33]  #1: ffffc90000b47c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.331304][   T33]  #2: ffff888055610800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  404.331351][   T33] locks held by kworker/u8:3/51: 2, last CPU#0:
[  404.331364][   T33]  #0: ffff888033348948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.331413][   T33]  #1: ffffc90000bb7c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.331463][   T33] locks held by kworker/u8:4/63: 3, last CPU#0:
[  404.331476][   T33]  #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.331524][   T33]  #1: ffffc9000205fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.331572][   T33]  #2: ffff888055700800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  404.331619][   T33] locks held by kworker/u8:5/70: 3, last CPU#0:
[  404.331632][   T33]  #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.331680][   T33]  #1: ffffc9000209fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.331729][   T33]  #2: ffff888066bb0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  404.331776][   T33] locks held by kswapd0/90: 3, last CPU#0:
[  404.331789][   T33]  #0: ffffffff8fe93be0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xa53/0x3a20
[  404.331840][   T33]  #1: ffff8880375cc0e8 (&type->s_umount_key#51){++++}-{4:4}, at: super_cache_scan+0x94/0x4a0
[  404.331890][   T33]  #2: ffffffff8fd5a2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  404.331940][   T33] locks held by kworker/0:2/193: 4, on CPU#0:
[  404.331953][   T33]  #0: ffff88807e3e5d48 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.332006][   T33]  #1: ffffc90002e2fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.332067][   T33]  #2: ffff88807d409440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0
[  404.332119][   T33]  #3: ffff88807b8a0330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0
[  404.332171][   T33] locks held by kworker/u8:6/222: 2, last CPU#0:
[  404.332184][   T33]  #0: ffff88801c0aa948 ((wq_completion)kvfree_rcu_reclaim){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.332233][   T33]  #1: ffffc90002f8fc40 ((work_completion)(&(&krcp->krw_arr[i].rcu_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  404.332289][   T33] locks held by kworker/u8:7/297: 3, last CPU#0:
[  404.332302][   T33]  #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.774153][   T33]  #1: ffffc9000305fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.774204][   T33]  #2: ffff88804d8f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  406.774256][   T33] locks held by kworker/1:2/948: 5, last CPU#1:
[  406.774270][   T33]  #0: ffff888067265d48 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.774323][   T33]  #1: ffffc9000471fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.774383][   T33]  #2: ffff8880316a7028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  406.774436][   T33]  #3: ffffffff8feb0830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  406.774479][   T33]  #4: ffffffff8fd5a2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  406.774536][   T33] locks held by kworker/u8:8/1106: 4, last CPU#1:
[  406.774549][   T33]  #0: ffff88802b24e148 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.774601][   T33]  #1: ffffc90004bb7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.774650][   T33]  #2: ffff88807718d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  406.774702][   T33]  #3: ffff88807eb26640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  406.774753][   T33] locks held by kworker/u8:9/1123: 3, last CPU#1:
[  406.774766][   T33]  #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.774815][   T33]  #1: ffffc90004bf7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.774863][   T33]  #2: ffff888055970800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  406.774910][   T33] locks held by kworker/u8:10/1133: 3, on CPU#1:
[  406.774923][   T33]  #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.774971][   T33]  #1: ffffc900045cfc40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.775018][   T33]  #2: ffffffff8fbf64e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: idle_cull_fn+0xd8/0x740
[  406.775068][   T33] locks held by kworker/0:3/2258: 3, last CPU#0:
[  406.775081][   T33]  #0: ffff888036b11548 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.775134][   T33]  #1: ffffc900066e7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.775194][   T33]  #2: ffff88802a0cf028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  406.775257][   T33] locks held by klogd/4964: 1, last CPU#1:
[  406.775270][   T33]  #0: ffffffff8feb0830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  406.775313][   T33] locks held by udevd/4975: 5, last CPU#1:
[  406.775325][   T33]  #0: ffffffff8fe393d0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x470
[  406.775371][   T33]  #1: ffff88807ef80f80 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  406.775419][   T33]  #2: ffff88807ceb3440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[  406.775471][   T33]  #3: ffffffff8feb0830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  406.775519][   T33]  #4: ffffffff8fd5a2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  406.775566][   T33] locks held by getty/5364: 2, on CPU#1:
[  406.775579][   T33]  #0: ffff888036b650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  406.775624][   T33]  #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  406.775676][   T33] locks held by syz-executor/5604: 1, last CPU#1:
[  406.775689][   T33]  #0: ffff88803489e460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  406.775739][   T33] locks held by syz-executor/5606: 1, last CPU#1:
[  406.775752][   T33]  #0: ffffffff8fd5a2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  406.775800][   T33] locks held by kworker/R-wg-cr/5689: 1, on CPU#1:
[  406.775813][   T33]  #0: ffffffff8fbf64e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  406.775863][   T33] locks held by kworker/R-wg-cr/5691: 1, on CPU#0:
[  406.775877][   T33]  #0: ffffffff8fbf64e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xdbe/0x12a0
[  406.775928][   T33] locks held by kworker/R-wg-cr/5692: 1, on CPU#0:
[  406.775940][   T33]  #0: ffffffff8fbf64e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xdbe/0x12a0
[  406.775991][   T33] locks held by kworker/R-wg-cr/5694: 1, on CPU#1:
[  406.776004][   T33]  #0: ffffffff8fbf64e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xdbe/0x12a0
[  406.776053][   T33] locks held by kworker/R-wg-cr/5696: 1, last CPU#0:
[  406.776066][   T33]  #0: ffffffff8fbf64e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  406.776116][   T33] locks held by kworker/1:4/5705: 2, last CPU#1:
[  406.776129][   T33]  #0: ffff888034a60548 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.776182][   T33]  #1: ffffc90003e3fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.776243][   T33] locks held by kworker/1:5/5713: 4, last CPU#1:
[  406.776256][   T33]  #0: ffff888036b11548 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.776308][   T33]  #1: ffffc90003eafc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.776369][   T33]  #2: ffff888036491440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0
[  406.776421][   T33]  #3: ffff88802a0cf028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0
[  406.776473][   T33] locks held by kworker/0:4/5729: 3, on CPU#0:
[  406.776486][   T33]  #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.776540][   T33]  #1: ffffc90003f9fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.776588][   T33]  #2: ffffffff9125f220 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  406.776636][   T33] locks held by kworker/0:5/5736: 4, on CPU#0:
[  406.776649][   T33]  #0: ffff88803643e948 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.776701][   T33]  #1: ffffc9000400fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.776762][   T33]  #2: ffff888037499440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0
[  406.776814][   T33]  #3: ffff88807b8a4888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0
[  406.776867][   T33] locks held by kworker/0:6/5744: 7, last CPU#0:
[  406.776879][   T33]  #0: ffff888034a60548 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.776932][   T33]  #1: ffffc900044afc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.776993][   T33]  #2: ffff888036549440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0
[  406.777044][   T33]  #3: ffff88807b8a34b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0
[  406.777095][   T33]  #4: ffffffff8fd5a2e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0
[  406.777139][   T33]  #5: ffffffff8fd5a2e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0
[  406.777188][   T33]  #6: ffffffff8fd5a2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  406.777234][   T33] locks held by kworker/1:6/5795: 4, last CPU#1:
[  406.777247][   T33]  #0: ffff88807f711148 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.777299][   T33]  #1: ffffc9000470fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.777360][   T33]  #2: ffff88807ec35440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0
[  406.777412][   T33]  #3: ffff8880316a0d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0
[  406.777463][   T33] locks held by kworker/1:7/5806: 5, last CPU#1:
[  406.777476][   T33]  #0: ffff88803643e948 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.777560][   T33]  #1: ffffc900047bfc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.777619][   T33]  #2: ffff88807b8a4888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  406.777671][   T33]  #3: ffffffff8feb0830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  406.777713][   T33]  #4: ffffffff8fd5a2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  406.777760][   T33] locks held by kworker/u8:11/5946: 4, last CPU#1:
[  406.777773][   T33]  #0: ffff88802cc7a948 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.777826][   T33]  #1: ffffc90005087c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.777875][   T33]  #2: ffff88807d409440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  406.777926][   T33]  #3: ffff88807b8a0d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  406.777978][   T33] locks held by kworker/u8:12/6031: 4, last CPU#1:
[  406.777991][   T33]  #0: ffff88801c0aa948 ((wq_completion)kvfree_rcu_reclaim){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.778039][   T33]  #1: ffffc900053f7c40 ((work_completion)(&(&krcp->monitor_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.778088][   T33]  #2: ffffffff8fd5a400 (rcu_callback){....}-{0:0}, at: kvfree_rcu_bulk+0x6d/0x180
[  406.778135][   T33]  #3: ffffffff8fd5a2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  406.778182][   T33] locks held by kworker/u8:13/6032: 3, last CPU#1:
[  406.778195][   T33]  #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.778243][   T33]  #1: ffffc900052d7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.778291][   T33]  #2: ffff88804da50800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  406.778338][   T33] locks held by kworker/u8:14/6110: 3, last CPU#1:
[  406.778351][   T33]  #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.778399][   T33]  #1: ffffc90005fc7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.778447][   T33]  #2: ffff888055aa0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  406.778494][   T33] locks held by kworker/u8:15/6205: 3, last CPU#1:
[  406.778512][   T33]  #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.778561][   T33]  #1: ffffc90006577c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.778610][   T33]  #2: ffff888051190800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  406.778657][   T33] locks held by syz-executor/6240: 7, on CPU#0:
[  406.778669][   T33]  #0: ffff8880375cc460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  406.778716][   T33]  #1: ffff888027f32080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[  406.778768][   T33]  #2: ffff888029cf3968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540
[  406.778823][   T33]  #3: ffffffff90add620 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6c0
[  406.778865][   T33]  #4: ffff8880223e1128 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  406.778907][   T33]  #5: ffff88807abb0258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_probe+0xfb/0xbb0
[  406.778957][   T33]  #6: ffffffff9125f220 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x8b/0x290
[  406.779008][   T33] locks held by syz-executor/6277: 4, last CPU#0:
[  406.779021][   T33]  #0: ffffffff909cce08 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  406.779072][   T33]  #1: ffffffff9125f220 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30
[  406.779116][   T33]  #2: ffffffff8feb0830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  406.779158][   T33]  #3: ffffffff8fd5a2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  406.779205][   T33] locks held by syz-executor/6281: 2, on CPU#1:
[  406.779218][   T33]  #0: ffffffff909da508 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  406.779268][   T33]  #1: ffffffff9125f220 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30
[  406.779315][   T33] locks held by udevd/6405: 3, last CPU#0:
[  406.779327][   T33]  #0: ffff88804b1f8f80 (&type->i_mutex_dir_key#4){++++}-{4:4}, at: lookup_slow+0x46/0x80
[  406.779375][   T33]  #1: ffffffff8feb0830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  406.779416][   T33]  #2: ffffffff8fd5a2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  406.779463][   T33] locks held by rm/6406: 3, last CPU#1:
[  406.779475][   T33]  #0: ffff888076928f80 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0
[  406.779532][   T33]  #1: ffffffff8feb0830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  406.779574][   T33]  #2: ffffffff8fd5a2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  406.779620][   T33] locks held by kworker/u8:16/6407: 3, last CPU#0:
[  406.779633][   T33]  #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.779681][   T33]  #1: ffffc9000454fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  406.779731][   T33]  #2: ffff888032655258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30
[  406.779787][   T33] locks held by kworker/u8:17/6408: 3, on CPU#1:
[  406.779800][   T33]  #0: ffff88801d76e148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  412.218418][   T33]  #1: ffffc9000455fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  412.218472][   T33]  #2: ffffffff9125f220 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  412.218524][   T33] locks held by syz-executor/6410: 4, last CPU#1:
[  412.218538][   T33]  #0: ffff888030376420 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xbc/0x1590
[  412.218589][   T33]  #1: ffffffff904fcd78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_bprm_check_security+0xef/0x180
[  412.218641][   T33]  #2: ffffffff8feb0830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  412.218684][   T33]  #3: ffffffff8fd5a2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  412.218735][   T33] 
[  412.218740][   T33] =============================================
[  412.218740][   T33] 
[  412.218764][   T33] NMI backtrace for cpu 1
[  412.218787][   T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  412.218825][   T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  412.218840][   T33] Call Trace:
[  412.218849][   T33]  <TASK>
[  412.218862][   T33]  dump_stack_lvl+0xe8/0x150
[  412.218909][   T33]  nmi_cpu_backtrace+0x274/0x2d0
[  412.218957][   T33]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  412.218992][   T33]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  412.219053][   T33]  sys_info+0x135/0x170
[  412.219093][   T33]  watchdog+0x1073/0x10f0
[  412.219122][   T33]  ? watchdog+0x209/0x10f0
[  412.219150][   T33]  kthread+0x38b/0x480
[  412.219169][   T33]  ? __pfx_watchdog+0x10/0x10
[  412.219188][   T33]  ? __pfx_kthread+0x10/0x10
[  412.219207][   T33]  ret_from_fork+0x514/0xb70
[  412.219229][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[  412.219247][   T33]  ? __switch_to+0xc78/0x1410
[  412.219275][   T33]  ? __pfx_kthread+0x10/0x10
[  412.219294][   T33]  ret_from_fork_asm+0x1a/0x30
[  412.219327][   T33]  </TASK>
[  412.219339][   T33] Sending NMI from CPU 1 to CPUs 0:
[  412.219372][    C0] NMI backtrace for cpu 0
[  412.219384][    C0] CPU: 0 UID: 0 PID: 193 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) 
[  412.219404][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  412.219415][    C0] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker
[  412.219438][    C0] RIP: 0010:debug_lockdep_rcu_enabled+0x18/0x40
[  412.219460][    C0] Code: cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d 03 f6 85 05 00 74 1d 83 3d ea 23 86 05 00 74 14 <65> 48 8b 0d 08 94 a4 08 31 c0 83 b9 a4 0b 00 00 00 0f 94 c0 e9 cf
[  412.219475][    C0] RSP: 0018:ffffc90000007618 EFLAGS: 00000202
[  412.219489][    C0] RAX: 0000000000000000 RBX: ffff888075b26078 RCX: ffffc90000007900
[  412.219502][    C0] RDX: ffffc90000007906 RSI: 0000000000000100 RDI: ffffc90000007800
[  412.219514][    C0] RBP: ffffc90000007870 R08: ffffc900000077ff R09: 0000000000000000
[  412.219526][    C0] R10: ffffc900000077f0 R11: fffff52000000f00 R12: ffff88819dcc4e46
[  412.219539][    C0] R13: dffffc0000000000 R14: ffffc900000077f0 R15: ffff88807e645f80
[  412.219553][    C0] FS:  0000000000000000(0000) GS:ffff888123a8f000(0000) knlGS:0000000000000000
[  412.219567][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  412.219580][    C0] CR2: 0000560eb189a4a0 CR3: 0000000057ab6000 CR4: 00000000003526f0
[  412.219595][    C0] Call Trace:
[  412.219601][    C0]  <IRQ>
[  412.219608][    C0]  nft_do_chain+0x219/0x1b10
[  412.219640][    C0]  ? lock_acquire+0x115/0x350
[  412.219659][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[  412.219687][    C0]  ? ipt_do_table+0x2b9/0x15d0
[  412.219716][    C0]  ? unwind_next_frame+0x8f/0x2550
[  412.219744][    C0]  nft_do_chain_inet+0x360/0x4b0
[  412.219770][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  412.219793][    C0]  ? ipt_do_table+0x2b9/0x15d0
[  412.219818][    C0]  ? nf_nat_ipv4_local_in+0x21f/0x720
[  412.219838][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  412.219863][    C0]  nf_hook_slow+0xc5/0x220
[  412.219884][    C0]  NF_HOOK+0x21f/0x3c0
[  412.219909][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  412.219933][    C0]  ? NF_HOOK+0x9e/0x3c0
[  412.219955][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  412.219979][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  412.220007][    C0]  ? ip_local_deliver+0x113/0x190
[  412.220032][    C0]  NF_HOOK+0x336/0x3c0
[  412.220055][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  412.220078][    C0]  ? NF_HOOK+0x9e/0x3c0
[  412.220107][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  412.220131][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  412.220154][    C0]  ? ip_rcv_core+0x88d/0xd50
[  412.220180][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  412.220203][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  412.220226][    C0]  process_backlog+0xa6b/0x18b0
[  412.220247][    C0]  ? process_backlog+0x3de/0x18b0
[  412.220272][    C0]  __napi_poll+0xaa/0x330
[  412.220290][    C0]  net_rx_action+0x61d/0xf50
[  412.220315][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  412.220349][    C0]  handle_softirqs+0x223/0x840
[  412.220371][    C0]  ? do_softirq+0x77/0xd0
[  412.220393][    C0]  ? wg_packet_handshake_receive_worker+0x72f/0x10b0
[  412.220414][    C0]  do_softirq+0x77/0xd0
[  412.220433][    C0]  </IRQ>
[  412.220438][    C0]  <TASK>
[  412.220444][    C0]  __local_bh_enable_ip+0x100/0x140
[  412.220465][    C0]  wg_packet_handshake_receive_worker+0x863/0x10b0
[  412.220486][    C0]  ? look_up_lock_class+0x57/0x110
[  412.220511][    C0]  ? wg_packet_handshake_receive_worker+0x72f/0x10b0
[  412.220532][    C0]  ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10
[  412.220553][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  412.220574][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  412.220603][    C0]  ? lock_acquire+0x115/0x350
[  412.220626][    C0]  ? rcu_is_watching+0x16/0xb0
[  412.220647][    C0]  ? process_scheduled_works+0x97a/0x1630
[  412.220670][    C0]  process_scheduled_works+0xc3d/0x1630
[  412.220709][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  412.220735][    C0]  ? assign_work+0x3cf/0x5d0
[  412.220760][    C0]  worker_thread+0xa47/0xfb0
[  412.220790][    C0]  ? __kthread_parkme+0x71/0x1f0
[  412.220820][    C0]  kthread+0x38b/0x480
[  412.220837][    C0]  ? __pfx_worker_thread+0x10/0x10
[  412.220858][    C0]  ? __pfx_kthread+0x10/0x10
[  412.220876][    C0]  ret_from_fork+0x514/0xb70
[  412.220894][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  412.220911][    C0]  ? __switch_to+0xc78/0x1410
[  412.220935][    C0]  ? __pfx_kthread+0x10/0x10
[  412.220953][    C0]  ret_from_fork_asm+0x1a/0x30
[  412.220977][    C0]  </TASK>
[  412.221381][   T33] Kernel panic - not syncing: hung_task: blocked tasks
[  414.911984][   T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  414.921097][   T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  414.931155][   T33] Call Trace:
[  414.934436][   T33]  <TASK>
[  414.937374][   T33]  vpanic+0x26f/0x710
[  414.941467][   T33]  panic+0xc5/0xd0
[  414.945215][   T33]  ? __pfx_panic+0x10/0x10
[  414.949693][   T33]  ? wq_watchdog_touch+0xf9/0x160
[  414.954731][   T33]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[  414.960903][   T33]  watchdog+0x10e7/0x10f0
[  414.965250][   T33]  ? watchdog+0x209/0x10f0
[  414.969684][   T33]  kthread+0x38b/0x480
[  414.973764][   T33]  ? __pfx_watchdog+0x10/0x10
[  414.978449][   T33]  ? __pfx_kthread+0x10/0x10
[  414.983053][   T33]  ret_from_fork+0x514/0xb70
[  414.987653][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[  414.992771][   T33]  ? __switch_to+0xc78/0x1410
[  414.997462][   T33]  ? __pfx_kthread+0x10/0x10
[  415.002067][   T33]  ret_from_fork_asm+0x1a/0x30
[  415.006848][   T33]  </TASK>
[  415.010159][   T33] Kernel Offset: disabled
[  415.014484][   T33] Rebooting in 86400 seconds..