last executing test programs:

15.428348168s ago: executing program 1 (id=51):
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000003f80)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_io_uring_setup(0x111, &(0x7f0000003fc0)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000004040), &(0x7f0000004080), &(0x7f00000040c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000004140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
syz_usb_connect$midi(0x0, 0x59, 0x0, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0})
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000004480)=0x4, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f00000044c0)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004500)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)

14.672431781s ago: executing program 4 (id=55):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x3c, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

14.232126699s ago: executing program 2 (id=56):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

12.666053022s ago: executing program 0 (id=58):
memfd_create(&(0x7f0000000340)='y\x105\xfc\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xa4\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01L\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x06\xb3\xf0wVq\xe9d\xac\xe9\xaa\x9dR\x00\x9b\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2G\x1b+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2v\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x1e\x11X\f\x0f\xf0\xe2\xb5\xf8', 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$tipc(0x1e, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, 0x0, &(0x7f00000002c0), &(0x7f00000003c0))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r3, &(0x7f00000004c0)={0x0, 0xd17, 0x10, 0x1, 0x80, 0x0, r4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe702, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x542b, 0x2, 0x4, 0x1bf, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bffc, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0)

12.390532658s ago: executing program 4 (id=59):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

12.226593573s ago: executing program 2 (id=60):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000004f80), 0x0, 0x0)
syz_io_uring_setup(0x5797, &(0x7f0000000040)={0x0, 0x39c4, 0x8000, 0x3, 0x2}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
prctl$PR_SET_MM_MAP(0x49, 0xe, 0x0, 0x0)
timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000240)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000280)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000340)=0x1, 0x4)
recvfrom(r0, &(0x7f0000000380)=""/233, 0xe9, 0x40000002, 0x0, 0x0)
flock(0xffffffffffffffff, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000580)='net/ip_vs_stats\x00')
openat$6lowpan_control(0xffffff9c, &(0x7f00000005c0), 0x2, 0x0)
pselect6(0x40, &(0x7f0000000600)={0xc, 0x800000000000000, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x100000, 0xa}, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x0, 0x3, 0x1})
add_key(&(0x7f0000000680)='asymmetric\x00', 0x0, &(0x7f00000006c0)="3082010c3081baa003020102020101300a06082a85030701010302300c310a30080603550403130141301e170d3230303130313030303030305a170d3330303130313030303030305a300c310a300806035504031301413068302106082a85030701010101301506092a850307010201010106082a85030701010202034300044001010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101300a06082a85030701010302034100020202020202020202020202020202020202020202020202020202020202", 0xee, 0xfffffffffffffffd)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x15}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @random="000300"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x3004c047}, 0x4000050)

12.04983482s ago: executing program 4 (id=61):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="d6", 0x1}], 0x1}}], 0x1, 0x4004851)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
socket$netlink(0x10, 0x3, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f0000000800)={{0xc}, 0x0, [0x0, 0x100, 0x7fff, 0xfffffffffffffffe, 0x9, 0x100000002, 0x0, 0x800000000000004, 0x0, 0x5, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x32, 0x0, 0x3, 0x100000000, 0xffffffffffffffbf, 0xfffffffffffffffc, 0x5, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x3, 0x20, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0x1, 0x0, 0x7d, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x23, 0x804000, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb4e, 0x6, 0x2000000, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x8a95, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004, 0x0, 0x1, 0xfffffffffffffffd, 0xdf9cd8e, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0xfffffffffffffff7, 0xfffffffb, 0x7, 0x7ffffffd, 0x3, 0x8, 0xffffffffffff2328, 0x2, 0x7, 0x2, 0x77, 0x0, 0x2, 0x8000000000000003, 0xf916, 0x8, 0x8, 0x8, 0x4, 0x0, 0x7, 0xb, 0x1, 0x7, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x7ff]})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000300)={0x0, @adiantum, 0x0, @desc2})
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x4d3, 0x3c}, @in6=@mcast1, {0x0, 0x0, 0x82, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)
timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x4}, &(0x7f0000000440)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f00000005c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000600)={0x4, 0x37, 0x783, 0xfff, 0x2, "b850e43615b178e300000000000400190500", 0x800, 0x1})

11.683575715s ago: executing program 1 (id=62):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000851}, 0x40)

11.089087898s ago: executing program 3 (id=63):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x24, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xe8}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

11.087618365s ago: executing program 1 (id=64):
syz_open_dev$I2C(0x0, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x111, &(0x7f0000003fc0)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000004040), &(0x7f0000004080), &(0x7f00000040c0))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000004140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
syz_usb_connect$midi(0x0, 0x59, 0x0, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0})
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000004480)=0x4, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_enter(0xffffffffffffffff, 0x806c23, 0x4e8b, 0x30, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0)
connect$inet(r1, &(0x7f00000044c0)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004500)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)

11.02473084s ago: executing program 2 (id=65):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x5, 0x0, 0x5, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r0 = syz_io_uring_setup(0x111, &(0x7f0000000080)={0x0, 0x39c6, 0x2, 0x1, 0xfffffffe}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f00000001c0)='n', 0x1)
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$kcm(0xa, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syslog(0x3, &(0x7f00000011c0)=""/4091, 0xffb)
sendmmsg$inet6(r1, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000480)='Q', 0x1}], 0x1}}], 0x1, 0x4000840)
shutdown(r1, 0x1)
socket(0x10, 0x803, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket(0x1e, 0x1, 0x0)
connect$tipc(r2, &(0x7f0000000240)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
recvmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/17, 0x11}, 0x8000}], 0x1, 0x2102, 0x0)
write$binfmt_misc(r2, &(0x7f0000000300), 0x2000011a)
timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000005c0))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000600)={0x0, 0x0, 0xfd8b, 0x5})
r3 = syz_open_dev$video(&(0x7f0000000640), 0x101, 0xab02)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000680)=0x1)
ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f00000006c0)={0x9, {0xf8000002, 0x9, 0x8, 0xb}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000021c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x22, 0x9, 0x46d, 0xc082, 0x4, 0x0, "0600ff0901a101851075089506090181020901910285117508951309018102090191"}}, 0x13a)

10.785889566s ago: executing program 3 (id=66):
memfd_create(&(0x7f0000000340)='y\x105\xfc\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xa4\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01L\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x06\xb3\xf0wVq\xe9d\xac\xe9\xaa\x9dR\x00\x9b\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2G\x1b+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2v\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x1e\x11X\f\x0f\xf0\xe2\xb5\xf8', 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$tipc(0x1e, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xd17, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe702, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x542b, 0x2, 0x4, 0x1bf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bffc, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0)

10.559072967s ago: executing program 0 (id=67):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendfile(r0, r0, 0x0, 0x20000005)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x24, &(0x7f0000000600)={0x1, 0x0, 0x7, 0x800005fffffffffe})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000840)={0x0, 0x18, 0x0}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = fsopen(&(0x7f00000002c0)='f2fs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000300)='test_dummy_encryption', &(0x7f0000000340)='v8\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="a6", 0x5dc}], 0x2b}}], 0x5, 0x4040000)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000004c0)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

9.672095335s ago: executing program 4 (id=68):
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1c, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ftruncate(0xffffffffffffffff, 0xffffffff)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000100), 0x318, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1)

9.331266443s ago: executing program 3 (id=69):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010"], 0x48}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x3c, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

8.722800058s ago: executing program 2 (id=70):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004851)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
socket$netlink(0x10, 0x3, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f0000000800)={{0xc}, 0x0, [0x0, 0x100, 0x7fff, 0xfffffffffffffffe, 0x9, 0x100000002, 0x0, 0x800000000000004, 0x0, 0x5, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x32, 0x0, 0x3, 0x100000000, 0xffffffffffffffbf, 0xfffffffffffffffc, 0x5, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x3, 0x20, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0x1, 0x0, 0x7d, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x23, 0x804000, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb4e, 0x6, 0x2000000, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x8a95, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004, 0x0, 0x1, 0xfffffffffffffffd, 0xdf9cd8e, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0xfffffffffffffff7, 0xfffffffb, 0x7, 0x7ffffffd, 0x3, 0x8, 0xffffffffffff2328, 0x2, 0x7, 0x2, 0x77, 0x0, 0x2, 0x8000000000000003, 0xf916, 0x8, 0x8, 0x8, 0x4, 0x0, 0x7, 0xb, 0x1, 0x7, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x7ff]})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000300)={0x0, @adiantum, 0x0, @desc2})
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x4d3, 0x3c}, @in6=@mcast1, {0x0, 0x0, 0x82, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)
timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x4}, &(0x7f0000000440)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f00000005c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000600)={0x4, 0x37, 0x783, 0xfff, 0x2, "b850e43615b178e300000000000400190500", 0x800, 0x1})

8.716462061s ago: executing program 1 (id=71):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104"], 0x48}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
ioctl$MEMREAD(0xffffffffffffffff, 0xc0404d1a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', {0x6, 0x8b, 0x4bc}})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0xa03}, 0x14}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

8.247983811s ago: executing program 0 (id=72):
openat$comedi(0xffffffffffffff9c, 0x0, 0x80001, 0x0)
pipe(0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(0x0, r0)
sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x143102)
writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000340)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='1\n', 0x2)
close(r2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x3, 0x3, 0x7fff})
openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r3, &(0x7f0000000600), 0x0)

6.708189341s ago: executing program 1 (id=73):
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x100, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7d178ce}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x28}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000040}, 0x8014)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0)
mmap(&(0x7f00003ff000/0x1000)=nil, 0x1000, 0x8, 0xa012, r1, 0x80000000)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000440)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000005840)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r6, &(0x7f0000000540)="65486d795fe250efdeed7dda726561511574b9ff9be37786fe66e431205f2e7673", 0x21)

6.669426816s ago: executing program 3 (id=74):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004851)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
socket$netlink(0x10, 0x3, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f0000000800)={{0xc}, 0x0, [0x0, 0x100, 0x7fff, 0xfffffffffffffffe, 0x9, 0x100000002, 0x0, 0x800000000000004, 0x0, 0x5, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x32, 0x0, 0x3, 0x100000000, 0xffffffffffffffbf, 0xfffffffffffffffc, 0x5, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x3, 0x20, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0x1, 0x0, 0x7d, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x23, 0x804000, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb4e, 0x6, 0x2000000, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x8a95, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004, 0x0, 0x1, 0xfffffffffffffffd, 0xdf9cd8e, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0xfffffffffffffff7, 0xfffffffb, 0x7, 0x7ffffffd, 0x3, 0x8, 0xffffffffffff2328, 0x2, 0x7, 0x2, 0x77, 0x0, 0x2, 0x8000000000000003, 0xf916, 0x8, 0x8, 0x8, 0x4, 0x0, 0x7, 0xb, 0x1, 0x7, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x7ff]})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000300)={0x0, @adiantum, 0x0, @desc2})
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x4d3, 0x3c}, @in6=@mcast1, {0x0, 0x0, 0x82, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)
timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x4}, &(0x7f0000000440)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f00000005c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000600)={0x4, 0x37, 0x783, 0xfff, 0x2, "b850e43615b178e300000000000400190500", 0x800, 0x1})

6.632167801s ago: executing program 0 (id=75):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010"], 0x48}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
ioctl$MEMREAD(0xffffffffffffffff, 0xc0404d1a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', {0x6, 0x8b, 0x4bc}})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/19, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

5.456255872s ago: executing program 4 (id=76):
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000003f80)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_io_uring_setup(0x111, &(0x7f0000003fc0)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000004040), &(0x7f0000004080), &(0x7f00000040c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000004140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
syz_usb_connect$midi(0x0, 0x59, 0x0, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0})
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000004480)=0x4, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f00000044c0)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004500)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)

5.419951229s ago: executing program 2 (id=77):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

5.031069964s ago: executing program 0 (id=78):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840))
r2 = syz_usb_connect(0x2, 0x58, &(0x7f0000000ac0)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, &(0x7f0000000c00)={0x24, 0x0, &(0x7f0000000c40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000c80)={0x24, 0x0, &(0x7f0000000cc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000001300)={0x2c, &(0x7f0000001340)={0x40, 0x8, 0x8, "003cb3a4aa50323f"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000001380)={0x18, &(0x7f0000000000)={0x20, 0x12, 0x4, "06d11a53"}, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r3, 0x0, 0x20)
syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000980)={0x0, 0x81aa5, 0x80, 0x2, 0x20000}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x2, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x56ef, 0x200, 0x1, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x400, 0x10000, 0x3ffffe, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xee2f, 0x2, 0x3, 0x1c0}}], 0x1, &(0x7f0000000240)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xb29, 0x0, 0x0}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x17c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xcf, 0x6, "84364aa6376ec19b0f0f03da8617df48f17b700df63874fb4f5b03ab349bb8e157dfa924c3af32bce6ecfa9671fc9b8722cc62b141293417e8f533a51f6fe62a13ef5e922c83d3f7e8c43b02bab24e80f49257441292b38b3b10c5646ee8422a7c19cede0c4a0cca9c5daa02be91640ebd552252d037b36ba98473b0adb972239f658bce488609dffee2972b2126bb6078fab5eaea6657cc216cf341ab702de7606c5b0fefe309dcdef96d46fbcb5858811f0b09ddcb4d14a53c99161147fa0593545d9a9dac67b7de46d1"}, @NFTA_TABLE_USERDATA={0x4f, 0x6, "6bb54bb7bd5ace24c149eae88f8fdf2ee6b464eee68a2d906164332cdb30207f8cf082bd2184e986c45cd7edaf06f4fbf72515752905824a7b16472a51c05e6b4de738aadafba5238350a7"}, @NFTA_TABLE_USERDATA={0x22, 0x6, "eb65fd57000043fd379f7644ce4d34d1300326ed4a240ecd7d89f8ab727d"}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x204}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1, 0x2000007, 0x403f031, 0xffffffffffffffff, 0x0)
munlockall()
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f0000000a40), 0x2, 0x2)
r7 = epoll_create(0x1002)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000a80)={0x1000000d})
sendto$inet(r5, &(0x7f0000000440)='01234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789\x00', 0xc8, 0x4000000, &(0x7f0000000540)={0x2, 0x4d2, @remote}, 0x10)

4.741146855s ago: executing program 2 (id=79):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendfile(r0, r0, 0x0, 0x20000005)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x7}, {0xe}, {0x0, 0xfff2}}}, 0x24}}, 0x40000d0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x24, &(0x7f0000000600)={0x1, 0x0, 0x7, 0x800005fffffffffe})
write$binfmt_script(r3, &(0x7f00000006c0), 0x208e24b)
preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000740)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000840)={0x0, 0x18, 0x0}, 0x0)
r5 = fsopen(&(0x7f00000002c0)='f2fs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000300)='test_dummy_encryption', &(0x7f0000000340)='v8\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$inet(r6, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="a6", 0x5dc}], 0x2b}}], 0x5, 0x4040000)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0xfffffffffffffffa)
socket$igmp(0x2, 0x3, 0x2)

4.454087162s ago: executing program 3 (id=80):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x2, @remote, 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="d6", 0x1}], 0x1}}], 0x1, 0x4004851)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x24, 0x1e, 0x21, 0x70bd2b, 0x0, {0x6}, [@typed={0x5, 0x12c, 0x0, 0x0, @str='\x00'}, @nested={0x8, 0xf, 0x0, 0x1, [@typed={0x4, 0xb6}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x2008800}, 0x8086)
r4 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105511, &(0x7f0000000800)={{0xc}, 0x0, [0x0, 0x100, 0x7fff, 0xfffffffffffffffe, 0x9, 0x100000002, 0x0, 0x800000000000004, 0x0, 0x5, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x32, 0x0, 0x3, 0x100000000, 0xffffffffffffffbf, 0xfffffffffffffffc, 0x5, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x3, 0x20, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0x1, 0x0, 0x7d, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x23, 0x804000, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb4e, 0x6, 0x2000000, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x8a95, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004, 0x0, 0x1, 0xfffffffffffffffd, 0xdf9cd8e, 0x7, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0xfffffffffffffff7, 0xfffffffb, 0x7, 0x7ffffffd, 0x3, 0x8, 0xffffffffffff2328, 0x2, 0x7, 0x2, 0x77, 0x0, 0x2, 0x8000000000000003, 0xf916, 0x8, 0x8, 0x8, 0x4, 0x0, 0x7, 0xb, 0x1, 0x7, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x7ff]})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000300)={0x0, @adiantum, 0x0, @desc2})
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x4d3, 0x3c}, @in6=@mcast1, {0x0, 0x0, 0x82, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0)

1.73196346s ago: executing program 3 (id=81):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x5, 0x0, 0x5, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r0 = syz_io_uring_setup(0x111, &(0x7f0000000080)={0x0, 0x39c6, 0x2, 0x1, 0xfffffffe}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f00000001c0)='n', 0x1)
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$kcm(0xa, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syslog(0x3, &(0x7f00000011c0)=""/4091, 0xffb)
sendmmsg$inet6(r1, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000480)='Q', 0x1}], 0x1}}], 0x1, 0x4000840)
shutdown(r1, 0x1)
socket(0x10, 0x803, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket(0x1e, 0x1, 0x0)
connect$tipc(r2, &(0x7f0000000240)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
recvmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/17, 0x11}, 0x8000}], 0x1, 0x2102, 0x0)
write$binfmt_misc(r2, &(0x7f0000000300), 0x2000011a)
timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000005c0))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000600)={0x0, 0x0, 0xfd8b, 0x5})
r3 = syz_open_dev$video(&(0x7f0000000640), 0x101, 0xab02)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000680)=0x1)
ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f00000006c0)={0x9, {0xf8000002, 0x9, 0x8, 0xb}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000021c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x22, 0x9, 0x46d, 0xc082, 0x4, 0x0, "0600ff0901a101851075089506090181020901910285117508951309018102090191"}}, 0x13a)

791.634399ms ago: executing program 0 (id=82):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802)

711.875019ms ago: executing program 1 (id=83):
memfd_create(&(0x7f0000000340)='y\x105\xfc\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xa4\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01L\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x06\xb3\xf0wVq\xe9d\xac\xe9\xaa\x9dR\x00\x9b\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2G\x1b+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2v\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x1e\x11X\f\x0f\xf0\xe2\xb5\xf8', 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$tipc(0x1e, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r2, &(0x7f00000004c0)={0x0, 0xd17, 0x10, 0x1, 0x80, 0x0, r3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe702, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x542b, 0x2, 0x4, 0x1bf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bffc, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0)

0s ago: executing program 4 (id=84):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010"], 0x48}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x3c, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

[   99.380426][   T10] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts.
[  106.414397][ T5590] cgroup: Unknown subsys name 'net'
[  106.657420][ T5590] cgroup: Unknown subsys name 'cpuset'
[  106.729675][ T5590] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  109.111165][ T5590] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  112.842088][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.864458][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  112.879016][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.934474][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  112.962679][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.964044][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.964664][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  112.968925][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  112.972086][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.991164][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  113.015508][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  113.019201][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  113.020634][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  113.034330][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  113.052210][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  113.054392][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  113.098971][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  113.100759][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  113.103493][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  113.118147][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  113.120996][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  113.233762][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  113.473075][ T5614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  113.474882][   T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  113.476864][   T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  115.442026][ T5622] Bluetooth: hci0: command tx timeout
[  115.442033][ T5613] Bluetooth: hci3: command tx timeout
[  115.599174][ T5613] Bluetooth: hci4: command tx timeout
[  115.599206][ T5622] Bluetooth: hci1: command tx timeout
[  115.599393][ T5613] Bluetooth: hci2: command tx timeout
[  115.611645][ T5606] rxe_eth0 speed is unknown, defaulting to 1000
[  115.623547][ T5608] rdma_rxe: Failed to create IPv4 UDP tunnel
[  115.670147][ T5609] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[  115.737049][ T5606] rxe_eth0 speed is unknown, defaulting to 1000
[  115.814304][ T5607] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[  115.866824][ T5606] rxe_eth0 speed is unknown, defaulting to 1000
[  115.977189][ T5605] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[  116.717111][ T5606] infiniband rxe0: set active
[  116.720284][ T5606] infiniband rxe0: added rxe_eth0
[  116.854834][  T203] rxe_eth0 speed is unknown, defaulting to 1000
[  116.936253][ T5606] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  116.936287][ T5606] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  116.936320][ T5606] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  117.163198][ T5606] RDS/IB: rxe0: added
[  117.163981][ T5606] smc: adding ib device rxe0 with port count 1
[  117.164197][ T5606] smc:    ib device rxe0 port 1 has no pnetid
[  117.232354][   T31] rxe_eth0 speed is unknown, defaulting to 1000
[  117.314474][   T36] rxe_eth0 speed is unknown, defaulting to 1000
[  117.381266][ T5606] rxe_eth0 speed is unknown, defaulting to 1000
[  117.521092][   T63] Bluetooth: hci0: command tx timeout
[  117.530391][   T63] Bluetooth: hci3: command tx timeout
[  117.683559][   T63] Bluetooth: hci1: command tx timeout
[  117.683602][   T63] Bluetooth: hci2: command tx timeout
[  117.683698][ T5622] Bluetooth: hci4: command tx timeout
[  118.039839][ T5606] rxe_eth0 speed is unknown, defaulting to 1000
[  118.775256][ T5606] rxe_eth0 speed is unknown, defaulting to 1000
[  119.436730][ T5606] rxe_eth0 speed is unknown, defaulting to 1000
[  119.598930][ T5613] Bluetooth: hci3: command tx timeout
[  119.599129][ T5622] Bluetooth: hci0: command tx timeout
[  119.738362][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.740569][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.741389][ T5605] bridge_slave_0: entered allmulticast mode
[  119.744433][ T5605] bridge_slave_0: entered promiscuous mode
[  119.759058][ T5622] Bluetooth: hci4: command tx timeout
[  119.759103][ T5622] Bluetooth: hci2: command tx timeout
[  119.759130][ T5622] Bluetooth: hci1: command tx timeout
[  119.926709][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.926853][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.927036][ T5605] bridge_slave_1: entered allmulticast mode
[  119.936201][ T5605] bridge_slave_1: entered promiscuous mode
[  119.945996][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.946330][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.946804][ T5607] bridge_slave_0: entered allmulticast mode
[  120.000653][ T5607] bridge_slave_0: entered promiscuous mode
[  120.030192][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.031295][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.031536][ T5608] bridge_slave_0: entered allmulticast mode
[  120.034550][ T5608] bridge_slave_0: entered promiscuous mode
[  120.109078][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.109207][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.109404][ T5607] bridge_slave_1: entered allmulticast mode
[  120.115102][ T5607] bridge_slave_1: entered promiscuous mode
[  120.117826][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.117961][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.118368][ T5609] bridge_slave_0: entered allmulticast mode
[  120.131617][ T5609] bridge_slave_0: entered promiscuous mode
[  120.192856][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.192947][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.193104][ T5608] bridge_slave_1: entered allmulticast mode
[  120.195403][ T5608] bridge_slave_1: entered promiscuous mode
[  120.308920][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.309052][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.309216][ T5609] bridge_slave_1: entered allmulticast mode
[  120.311170][ T5609] bridge_slave_1: entered promiscuous mode
[  120.386135][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.477419][ T5606] rxe_eth0 speed is unknown, defaulting to 1000
[  120.493805][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.575213][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.683045][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.760286][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.782023][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.788199][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.896958][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.950644][ T5605] team0: Port device team_slave_0 added
[  121.063655][ T5605] team0: Port device team_slave_1 added
[  121.068709][ T5607] team0: Port device team_slave_0 added
[  121.107630][ T5608] team0: Port device team_slave_0 added
[  121.147358][ T5607] team0: Port device team_slave_1 added
[  121.170584][ T5609] team0: Port device team_slave_0 added
[  121.175862][ T5608] team0: Port device team_slave_1 added
[  121.236605][ T5609] team0: Port device team_slave_1 added
[  121.264458][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.264475][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  121.264495][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.403954][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.403975][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  121.404004][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.405381][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.405403][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  121.405424][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.523487][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.523556][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  121.523637][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.606752][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.606777][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  121.606800][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.683503][ T5622] Bluetooth: hci3: command tx timeout
[  121.683555][ T5613] Bluetooth: hci0: command tx timeout
[  121.839006][ T5613] Bluetooth: hci1: command tx timeout
[  121.839029][ T5622] Bluetooth: hci2: command tx timeout
[  121.839062][ T5622] Bluetooth: hci4: command tx timeout
[  121.873115][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.873140][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  121.873161][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.874512][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.874529][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  121.874560][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.024086][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.024110][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  122.024138][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.271376][ T5605] hsr_slave_0: entered promiscuous mode
[  122.272986][ T5605] hsr_slave_1: entered promiscuous mode
[  122.391996][ T5607] hsr_slave_0: entered promiscuous mode
[  122.393307][ T5607] hsr_slave_1: entered promiscuous mode
[  122.394240][ T5607] debugfs: 'hsr0' already exists in 'hsr'
[  122.394350][ T5607] Cannot create hsr debugfs directory
[  122.474709][ T5608] hsr_slave_0: entered promiscuous mode
[  122.476192][ T5608] hsr_slave_1: entered promiscuous mode
[  122.476896][ T5608] debugfs: 'hsr0' already exists in 'hsr'
[  122.476928][ T5608] Cannot create hsr debugfs directory
[  122.521529][ T5609] hsr_slave_0: entered promiscuous mode
[  122.522563][ T5609] hsr_slave_1: entered promiscuous mode
[  122.523410][ T5609] debugfs: 'hsr0' already exists in 'hsr'
[  122.523442][ T5609] Cannot create hsr debugfs directory
[  124.169491][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.171020][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.171595][ T5606] bridge_slave_0: entered allmulticast mode
[  124.177918][ T5606] bridge_slave_0: entered promiscuous mode
[  124.249411][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.249582][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.249746][ T5606] bridge_slave_1: entered allmulticast mode
[  124.255168][ T5606] bridge_slave_1: entered promiscuous mode
[  124.402903][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.407548][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.462982][ T5605] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  124.513920][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  124.561738][ T5605] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  124.606698][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  124.618220][ T5606] team0: Port device team_slave_0 added
[  124.641409][ T5605] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  124.685068][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  124.697970][ T5606] team0: Port device team_slave_1 added
[  124.740386][ T5605] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  124.772866][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  124.994463][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.994485][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  124.994518][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.076053][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.076076][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  125.076107][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.434351][ T5608] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  125.471837][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  125.516771][ T5608] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  125.552989][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  125.636738][ T5606] hsr_slave_0: entered promiscuous mode
[  125.654669][ T5606] hsr_slave_1: entered promiscuous mode
[  125.656372][ T5606] debugfs: 'hsr0' already exists in 'hsr'
[  125.656403][ T5606] Cannot create hsr debugfs directory
[  125.656793][ T5608] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  125.726219][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  125.744593][ T5608] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  125.792355][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  126.348208][ T5607] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  126.383036][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  126.457144][ T5607] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  126.504259][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  126.548269][ T5607] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  126.576679][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  126.686219][ T5607] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  126.725023][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  127.080582][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  127.126177][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  127.154526][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  127.177002][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  127.215629][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  127.253944][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  127.288490][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  127.332500][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  127.521699][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.582036][ T5606] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  127.622907][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  127.643347][ T5606] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  127.683376][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  127.701004][ T5606] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  127.741876][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  127.746195][ T5606] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  127.803402][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  127.916216][ T5605] 8021q: adding VLAN 0 to HW filter on device team0
[  127.983634][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.005885][ T1421] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.006098][ T1421] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.124567][ T1421] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.124723][ T1421] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.325057][ T5608] 8021q: adding VLAN 0 to HW filter on device team0
[  128.435112][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.466284][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.466505][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.564795][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.564919][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.732725][ T5607] 8021q: adding VLAN 0 to HW filter on device team0
[  128.797874][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.862909][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.863091][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.977773][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.977872][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.185532][  T203] rxe_eth0 speed is unknown, defaulting to 1000
[  129.254132][ T5609] 8021q: adding VLAN 0 to HW filter on device team0
[  129.320058][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.574252][ T1421] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.574441][ T1421] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.054437][ T1421] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.054676][ T1421] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.106150][ T5606] 8021q: adding VLAN 0 to HW filter on device team0
[  130.285762][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.294827][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.452178][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.452315][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.116715][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.594910][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.819491][ T5605] veth0_vlan: entered promiscuous mode
[  132.943534][ T5605] veth1_vlan: entered promiscuous mode
[  133.474957][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.499243][ T5605] veth0_macvtap: entered promiscuous mode
[  133.594001][ T5605] veth1_macvtap: entered promiscuous mode
[  133.817018][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0
[  133.906234][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.025200][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.046898][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.119692][ T5607] veth0_vlan: entered promiscuous mode
[  134.333840][ T5607] veth1_vlan: entered promiscuous mode
[  134.336706][ T5608] veth0_vlan: entered promiscuous mode
[  134.701596][ T5608] veth1_vlan: entered promiscuous mode
[  134.837159][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.837202][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.956046][ T5606] veth0_vlan: entered promiscuous mode
[  135.031591][ T5609] veth0_vlan: entered promiscuous mode
[  135.037602][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.037632][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.110954][ T5607] veth0_macvtap: entered promiscuous mode
[  135.177154][ T5606] veth1_vlan: entered promiscuous mode
[  135.202167][ T5607] veth1_macvtap: entered promiscuous mode
[  135.234984][ T5609] veth1_vlan: entered promiscuous mode
[  135.258241][ T5608] veth0_macvtap: entered promiscuous mode
[  135.358523][ T5608] veth1_macvtap: entered promiscuous mode
[  135.516508][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.584164][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.588523][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.708508][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.725084][ T5606] veth0_macvtap: entered promiscuous mode
[  135.766590][ T5609] veth0_macvtap: entered promiscuous mode
[  135.844318][ T5606] veth1_macvtap: entered promiscuous mode
[  135.886743][ T5609] veth1_macvtap: entered promiscuous mode
[  135.943281][ T5605] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  136.498643][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.612113][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.878298][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.967867][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.454916][  T778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.454943][  T778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.971632][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.971657][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.222603][   T17] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.222627][   T17] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.996754][   T17] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.996800][   T17] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.399550][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.427085][  T826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.427436][  T826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.427759][  T826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.428081][  T826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.733783][   T74] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.733835][   T74] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.733871][   T74] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.733905][   T74] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.733941][   T74] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.733977][   T74] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.734035][   T74] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.734069][   T74] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.734106][   T74] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.734136][   T74] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.734166][   T74] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.734197][   T74] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.734230][   T74] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.734274][   T74] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.734304][   T74] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.017992][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.018704][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.339649][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  140.361226][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  140.777651][   T17] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.777678][   T17] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.136996][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.137023][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.298680][ T5851] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  141.904284][ T5854] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  142.387269][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.387296][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.427407][ T5867] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  148.631929][   T36] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  149.188851][   T36] usb 5-1: Using ep0 maxpacket: 16
[  149.305593][   T36] usb 5-1: New USB device found: idVendor=249c, idProduct=9006, bcdDevice=0.40
[  149.530589][ T2240] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  149.600262][   T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.600299][   T36] usb 5-1: Product: љ
[  149.600318][   T36] usb 5-1: Manufacturer: ⊲蹂쑔竳⃇뒋ԡ从鳻蛣귰喡霨礡茝奰㬣㍀⏖ᤗ鸵⩄劘앢蒊͑᣻솚୑뚋율梙춆千깃牥곤ꡟ᫵ꬩ㒍솆腬
[  149.600345][   T36] usb 5-1: SerialNumber: syz
[  149.974540][ T2240] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  150.018509][ T2240] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  150.018549][ T2240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  150.018576][ T2240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  150.018600][ T2240] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  150.018646][ T2240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.185296][ T2240] usb 4-1: config 0 descriptor??
[  150.499397][ T5914] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  152.123759][   T36] usb 5-1: can't set config #1, error -71
[  152.855081][   T36] usb 5-1: USB disconnect, device number 2
[  154.375491][ T2240] usbhid 4-1:0.0: can't add hid device: -71
[  154.404530][ T2240] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  154.676367][ T2240] usb 4-1: USB disconnect, device number 2
[  156.704524][ T5930] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  161.029856][ T5964] ptp ptp0: new virtual clock ptp1
[  161.029952][ T5964] ptp ptp0: guarantee physical clock free running
[  161.888886][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  162.466960][   T10] usb 2-1: device descriptor read/all, error -71
[  166.139042][ T5800] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  166.574912][ T5800] usb 5-1: unable to get BOS descriptor or descriptor too short
[  166.575734][ T5800] usb 5-1: not running at top speed; connect to a high speed hub
[  166.575775][ T5800] usb 5-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13
[  166.622790][ T5800] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[  166.622812][ T5800] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[  166.622827][ T5800] usb 5-1: config 14 has no interface number 0
[  166.622839][ T5800] usb 5-1: config 14 has no interface number 1
[  166.622891][ T5800] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  166.622909][ T5800] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  166.622929][ T5800] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  166.622950][ T5800] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  166.622970][ T5800] usb 5-1: config 14 interface 57 has no altsetting 0
[  166.622984][ T5800] usb 5-1: config 14 interface 228 has no altsetting 0
[  166.815367][ T5800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.815391][ T5800] usb 5-1: Product: syz
[  166.815403][ T5800] usb 5-1: Manufacturer: syz
[  166.815422][ T5800] usb 5-1: SerialNumber: syz
[  167.179128][ T5820] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  167.674775][ T5800] legousbtower 5-1:14.57: interrupt endpoints not found
[  169.921189][ T5800] legousbtower 5-1:14.228: get version request failed: -71
[  169.921381][ T5800] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71
[  170.248758][ T5800] usb 5-1: USB disconnect, device number 3
[  173.561757][ T6030] ptp ptp0: guarantee physical clock free running
[  177.795322][ T6067] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  178.341290][ T6078] Zero length message leads to an empty skb
[  181.790802][ T6112] FAULT_INJECTION: forcing a failure.
[  181.790802][ T6112] name failslab, interval 1, probability 0, space 0, times 1
[  181.790869][ T6112] CPU: 0 UID: 0 PID: 6112 Comm: syz.0.57 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  181.790898][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  181.790922][ T6112] Call Trace:
[  181.790936][ T6112]  <TASK>
[  181.790946][ T6112]  dump_stack_lvl+0xe8/0x150
[  181.791004][ T6112]  should_fail_ex+0x447/0x5e0
[  181.791045][ T6112]  should_failslab+0xa8/0x100
[  181.791361][ T6112]  __kmalloc_cache_noprof+0x9c/0x670
[  181.791386][ T6112]  ? __io_uring_add_tctx_node+0x186/0x630
[  181.791415][ T6112]  ? __io_uring_add_tctx_node+0x186/0x630
[  181.791449][ T6112]  __io_uring_add_tctx_node+0x186/0x630
[  181.791485][ T6112]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[  181.791517][ T6112]  ? __anon_inode_getfile+0x16c/0x210
[  181.791587][ T6112]  io_uring_create+0x591/0x980
[  181.791621][ T6112]  __se_sys_io_uring_setup+0x2a8/0x2c0
[  181.791654][ T6112]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[  181.791700][ T6112]  ? rcu_is_watching+0x16/0xb0
[  181.791740][ T6112]  do_syscall_64+0x166/0x520
[  181.791765][ T6112]  ? trace_irq_disable+0x3b/0x140
[  181.791788][ T6112]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.791811][ T6112]  ? clear_bhb_loop+0x70/0xc0
[  181.791840][ T6112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.791863][ T6112] RIP: 0033:0x7f69c862f559
[  181.791903][ T6112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  181.791923][ T6112] RSP: 002b:00007f69c687dfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  181.791951][ T6112] RAX: ffffffffffffffda RBX: 0000200000000500 RCX: 00007f69c862f559
[  181.791968][ T6112] RDX: 00002000000005c0 RSI: 0000200000000500 RDI: 000000000000001a
[  181.791983][ T6112] RBP: 00007f69c86c6b20 R08: 0000000000000000 R09: 0000000000000000
[  181.791998][ T6112] R10: 0000200000000600 R11: 0000000000000206 R12: 00002000000005c0
[  181.792014][ T6112] R13: 0000200000000600 R14: 0000200000000580 R15: 00007ffd155be5f8
[  181.792050][ T6112]  </TASK>
[  184.866634][ T6142] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  185.203070][ T6136] syz.2.65 (6136) used greatest stack depth: 18816 bytes left
[  190.610310][ T5970] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  190.887025][ T5970] usb 1-1: unable to get BOS descriptor or descriptor too short
[  190.920731][ T5970] usb 1-1: not running at top speed; connect to a high speed hub
[  190.920763][ T5970] usb 1-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13
[  190.924695][ T5970] usb 1-1: config 14 has an invalid interface number: 57 but max is 1
[  190.924716][ T5970] usb 1-1: config 14 has an invalid interface number: 228 but max is 1
[  190.924730][ T5970] usb 1-1: config 14 has no interface number 0
[  190.924742][ T5970] usb 1-1: config 14 has no interface number 1
[  190.924793][ T5970] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  190.924810][ T5970] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  190.924829][ T5970] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  190.924849][ T5970] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  190.924869][ T5970] usb 1-1: config 14 interface 57 has no altsetting 0
[  190.924882][ T5970] usb 1-1: config 14 interface 228 has no altsetting 0
[  191.099553][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.099587][ T5970] usb 1-1: Product: syz
[  191.099599][ T5970] usb 1-1: Manufacturer: syz
[  191.099611][ T5970] usb 1-1: SerialNumber: syz
[  192.301231][ T5970] legousbtower 1-1:14.57: interrupt endpoints not found
[  192.741475][ T6192] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  193.267358][ T5970] legousbtower 1-1:14.228: get version request failed: -71
[  193.267501][ T5970] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71
[  193.377964][ T5970] usb 1-1: USB disconnect, device number 3
[  194.724003][ T5800] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  194.975593][ T5800] usb 1-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01
[  195.011293][ T5800] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  195.011362][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.034256][ T5800] as10x_usb: device has been detected
[  196.059248][ T5800] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  196.649566][ T5800] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  196.780581][ T6221] INFO: trying to register non-static key.
[  196.788182][ T6221] The code is fine but needs lockdep annotation, or maybe
[  196.796814][ T6221] you didn't initialize this object before use?
[  196.806466][ T6221] turning off the locking correctness validator.
[  196.814493][ T6221] CPU: 1 UID: 0 PID: 6221 Comm: syz.0.82 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  196.825326][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  196.837838][ T6221] Call Trace:
[  196.841355][ T6221]  <TASK>
[  196.844695][ T6221]  dump_stack_lvl+0xe8/0x150
[  196.849686][ T6221]  assign_lock_key+0x133/0x150
[  196.854491][ T6221]  register_lock_class+0xcc/0x2e0
[  196.859701][ T6221]  ? __lock_acquire+0x747/0x2de0
[  196.865365][ T6221]  __lock_acquire+0x10c/0x2de0
[  196.870170][ T6221]  ? __lock_acquire+0x747/0x2de0
[  196.876067][ T6221]  ? __lock_acquire+0x747/0x2de0
[  196.881211][ T6221]  lock_acquire+0x115/0x350
[  196.885950][ T6221]  ? as102_stream_ctrl+0x27/0xc0
[  196.891082][ T6221]  ? as102_stream_ctrl+0x27/0xc0
[  196.896310][ T6221]  ? as102_stream_ctrl+0x27/0xc0
[  196.901382][ T6221]  mutex_lock_interruptible_nested+0x55/0x1c0
[  196.907653][ T6221]  ? as102_stream_ctrl+0x27/0xc0
[  196.912614][ T6221]  as102_stream_ctrl+0x27/0xc0
[  196.917567][ T6221]  __dvb_frontend_open+0x2ef/0xcb0
[  196.923154][ T6221]  ? dvb_frontend_open+0x1d4/0x880
[  196.928278][ T6221]  ? mutex_lock_nested+0x14d/0x1d0
[  196.935187][ T6221]  ? __pfx_dvb_frontend_open+0x10/0x10
[  196.941475][ T6221]  dvb_device_open+0x258/0x350
[  196.947234][ T6221]  chrdev_open+0x4dc/0x600
[  196.951781][ T6221]  ? __pfx_chrdev_open+0x10/0x10
[  196.957071][ T6221]  ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0
[  196.965039][ T6221]  ? __pfx_chrdev_open+0x10/0x10
[  196.970702][ T6221]  do_dentry_open+0x841/0x1410
[  196.977146][ T6221]  vfs_open_consume+0x4a/0x360
[  196.982740][ T6221]  ? path_openat+0x16e6/0x2100
[  196.987830][ T6221]  path_openat+0x1701/0x2100
[  196.992944][ T6221]  do_file_open+0x23e/0x4a0
[  196.997662][ T6221]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  197.003788][ T6221]  ? __pfx_do_file_open+0x10/0x10
[  197.009129][ T6221]  ? alloc_fd+0x6b2/0x760
[  197.013718][ T6221]  do_sys_openat2+0x115/0x200
[  197.018988][ T6221]  ? __pfx_do_sys_openat2+0x10/0x10
[  197.024786][ T6221]  __x64_sys_openat+0x138/0x170
[  197.030089][ T6221]  do_syscall_64+0x166/0x520
[  197.037750][ T6221]  ? trace_irq_disable+0x3b/0x140
[  197.043941][ T6221]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.052567][ T6221]  ? clear_bhb_loop+0x70/0xc0
[  197.058306][ T6221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.064657][ T6221] RIP: 0033:0x7f69c85efd8e
[  197.069741][ T6221] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  197.090679][ T6221] RSP: 002b:00007f69c6418b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  197.099809][ T6221] RAX: ffffffffffffffda RBX: 00007f69c64196c0 RCX: 00007f69c85efd8e
[  197.108007][ T6221] RDX: 0000000000000802 RSI: 00007f69c6418c00 RDI: ffffffffffffff9c
[  197.116642][ T6221] RBP: 00007f69c6418c00 R08: 0000000000000000 R09: 0000000000000000
[  197.125523][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  197.133903][ T6221] R13: 00007f69c88b6308 R14: 00007f69c88b6270 R15: 00007ffd155be5f8
[  197.142447][ T6221]  </TASK>
[  197.332907][ T5800] as10x_usb: error during firmware upload part1
[  197.335660][ T5800] Registered device Abilis Systems DVB-Titan
[  201.759952][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  201.760059][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  202.624028][ T5860] usb 1-1: USB disconnect, device number 4
[  202.657185][ T5860] Unregistered device Abilis Systems DVB-Titan
[  202.665004][ T5860] as10x_usb: device has been disconnected