last executing test programs:

4.532483909s ago: executing program 0 (id=21):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18)
fcntl$setlease(r0, 0x400, 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x1}, 0x1c)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000)=0x1, 0x4)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e23, @private=0xfffffffc}})

4.421406494s ago: executing program 0 (id=24):
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={<r0=>0xffffffffffffffff, &(0x7f0000000000)='L\x00', 0x0, &(0x7f0000000040)={@align=0xffec, {0xfdf5, 0x4, 0x9, 0x81}}, 0x7, &(0x7f0000000080), &(0x7f00000000c0)})
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000140)={0x1, 0x3, 0x1d})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x1f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c010}, 0x4004810)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x234, r2, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x220, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xde8f}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "9b487b76ae3578073767e6af7f4ffb0d668299e7ea9bbad0654c470ccb"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "10a71235a49bc301fbb1cf4c190eab69fc6b4276e8fc"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xae, 0x3, "f80cb25374864c1909b0ee69434223e526b832d41b5a78fcad90583bf6da082326f5a231438d869dc9f402ba04464194de1fdca44f1b131b656a113e8a3891f1678d0314f3929ca709fd2e81885a773a45fd17fb8185e3b72698aab1286bf4b30886dbeacab1f445e736184c9e764debafe976991348065a9aabeeab9bf1a352660f39cf323c1152de9d5e6491601059af6bd6f9ad8c8913b77a1b50234a4b467b99d423bcf48529dc96"}, @TIPC_NLA_NODE_ID={0x7e, 0x3, "0fc69ec974a92229919fe17ec631a831d7d4feac6962c5a234df40ec2977e2537fea7bae0ad814aa7cf2c209ad722653a77eae218adf605f5c9f833c91912dcca35397ab2f0dbfe26fc072a702c7e417aa6a3fff2b2ce5cacf8ade9a54c7f8d5431607511861b6301db2ea1f1ec6bae70d394e1877b312b5c454"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "35f8aee7726908864e2a8e6dde50d505dffb4826d01b9db89d17da76471b6e3ef51b"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xdf}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000640)=0x7)
getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000680), &(0x7f00000006c0)=0x4)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000700)=0x1b)
r3 = syz_io_uring_complete(0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x22}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x8000000)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000880)=0x200, 0x4)
setsockopt$MRT6_TABLE(r3, 0x29, 0xcf, &(0x7f00000008c0)=0x1, 0x4)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000002100)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000020c0)={&(0x7f0000000940)={0x177c, r4, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x2b}}}}, [@NL80211_ATTR_IE={0x8e, 0x2a, [@tim={0x5, 0x82, {0x0, 0xfa, 0x11, "7ec4b1286fda47572dff9a9820ce5adc28b489fd58166baa7c760036e60cb9f3f5b17f1289a17a3322e74c92f454ef3db0bde5ff286c1c1898778c18a25a5c2ece3e9fcc7a0394b8aad1b2eacf742088be538f2255ed641d98ead4a538ac63f3f4161e5772bef8cbef0c9fe1948c34df557be60a6327f1b3b903ea72b5ac50"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xa, 0x7, 0x6}}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCAN_SUPP_RATES={0x124, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb5, 0x3, "ec6053382a04b2204e1ab8d7d05eb5beeb0e75c04748e12b3e9ee177d0f89526f24d5a93d839b367dcba50052e44b241267ff6be357f0b105ac078d1256ea96be1f48e2d27ba729164562f71abca5772e11abad46dabb3d357c14f382694a7633f6e291727f20cfb09ab05b1a09ef02eb9aebe05d5c50c50709dffc9a302f8cf26b5f52d4620c3926e74db27af9d54d146f82b5643978331386cba8e25bb1d462ff8ff6cfa41e251a2d8164b9a412cb977"}, @NL80211_BAND_60GHZ={0x67, 0x2, "d2a4a05c81c2f55541944f7432492c6643dd4a380f79cbfda291501d8769dd3c03ddd54fb80d0c2e0ba7755454758cc81f68e419c99a2f3fbf3e8e2b44c519977bff25aece503b6e84c7e04fe4e198b5fcee596abf83b9c91211809ae3337037dcd788"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1384, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x70, 0x3, "f96310363e01dedd5fc82622154d8dbccdd9e19e41cf3bea7f6de0192c44664934262a7f2cf51bfdf489a2cd8d1bb613bf39732598b48f8f4543d306ac07696dec2a553b97b5d19dc22a73b463ab3ca40055afb1d0e1762ccf7561894298418e4314627fb988e8a7014003ba"}, @NL80211_BAND_2GHZ={0x65, 0x0, "bda1fb47114f2fe10a33581b9b24d337365fd22ccc47e28d51205bc9cdc95ff35429529f25185158fcf373fb39aa767f539aaaba1eafbf2c9d29e9032c052b4b0f2c32cb50aa5129cef831c58d68cbf12e3414916deded18e0c1c3404797d8ce0c"}, @NL80211_BAND_6GHZ={0x9b, 0x3, "cc824b7346368da4ca91d9b5446c7ccb6d5b349abc5db399d72185d07965d24010187064bd2bd64589bd02f27f529d7cd5b1b2b1bc8ca2e74baa214780533a726066607b195474979601afdbdbe6b2befb338a20aa31b686e5128ad3642020b015d8bc8665eb15c87d25819a58fbd871718272e823d76203121ca3952b8d0b512a062d0569da8057427b2ea78e16f537e0d0210214bdb0"}, @NL80211_BAND_6GHZ={0xeb, 0x3, "b0a31993a459ea00b210206542d85ccfb5bc020238cb83904230cb3777a588ea54bf54dd96fd260c6a6cba8ead03e75775ea24a2c899f23d9e3ca346a60990d8003e72529a120511b3ca59fc910858890fe82d82623bb2c0eb498511212633808caecf3ebab9d70edb89c3924664082d74a152697123a7f4082ce3e65ee04ee78e99e30e4aa56da93628b13c6972a258e3430e44edeec01cca38045130335747f4df659b3e95cc7a56bbe2a78a384c8b466cd1ed5f8b0f4a6a8fe21b5de2febfbc7f68bbe98cf5df2dea7f99f79324b69890578cec6108072f8ec76748b3207fd1e6176e75ed29"}, @NL80211_BAND_5GHZ={0x4d, 0x1, "5aa57309ecd3784c1c7a9225a75a38e0bdfee379956318fafd65685df2d6622e224d29e5a52dbc603275a013714a938adb8cec5ffa00d609e5d2ecfd2e5a21720e5a5a8716e9c792fa"}, @NL80211_BAND_60GHZ={0x6d, 0x2, "3f7de45d844560852b0b3134cce25006c56092797f027f760c29194bdaa62b179e8c5069d83ec937b5ba574ee4bf80bc70f45300c76e3b215f1683a5d73b7c18bb99042d45c6f94e5ce41ee19f7eac3681099a6d974dc5803834a999ae6174c1689c3df302346ddc3c"}, @NL80211_BAND_5GHZ={0x1004, 0x1, "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"}, @NL80211_BAND_6GHZ={0x42, 0x3, "108620eae7cb2c046ad352ef48442780774d25f6855fd28dba0696c8ed137c7e9a76e36bb2fdf15068fef9455c5b0843d7b83f94edc0cad1c7c5bfa37d59"}, @NL80211_BAND_6GHZ={0x12, 0x3, "c8cddc7425a6851d72d724a96c3b"}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1dc, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x61, 0x1, "67a90b58b4ab131221cc3bde0d9260053cb22194a93423ccc255288f9764df9e7bf0d5686a6e45bcd46b5128e9bcebe1626ba63fd363ee2c446306d5f11187e859edec6b48dc214002b826084b006a5c058530b5020833fe9430edd88a"}, @NL80211_BAND_6GHZ={0xf0, 0x3, "7cad2b45d67f12b5c8392f95a8e4157d9c9a053a5829c4a74c5b6ae110babc02b411d3d646c23a036ff9f124ff4c0cb52bdbe1d4d1262bc10c5cfad6f3591d7d4b806ffc86e6ac916839322fdfe3465e02d7bdf0c1efeff4ef2053c7c2ec6e74f7e3faa7b67d493298d82c9937708e08cdf37a96136aeebf77efdbd4caf8f141f805c73f86b10f27c66624678330e71bf9430968176d59e0396aa64aa8e9688f319261b8f415cd74c9bfcee94538514ab71361098a1c6c5c19772e8559983926b946ecac1a02023ddc2ec87423f25041147523d71442aacb114bea84df3e725b8a6e1fccf34b7439936b0499"}, @NL80211_BAND_5GHZ={0x83, 0x1, "c6d6928acdca6b2470968556510ea78509f95b791a6c3387beb6fa21360c069be3e1f6444bd64d3c22cc92669cfc7b357c2987bccf658c89b2bf80bb4418b6e1e52a24eff1e31e5123e3e1c384e0ee8269051ef1feb39c21d17361d319636213e8b26d524c90a10c2182b512d07749a7e851cd2e73106de7ba26421f5189c0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7f}, {0x8, 0x0, 0x5ea}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_BSSID={0xa}]}, 0x177c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000)
r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000002140), 0x2, 0x0)
fremovexattr(r5, &(0x7f0000002180)=@random={'trusted.', 'wlan1\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x28, r4, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x4f}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x48800)
ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f00000022c0))
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628)
ioctl$int_out(r5, 0x2, &(0x7f0000002300))
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002340)={'vcan0\x00'})
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000002380)={<r6=>0xffffffffffffffff})
ioctl$XFS_IOC_INUMBERS(r6, 0x80405880, &(0x7f0000002400)={{0x10000, 0x0, 0x6, 0x6, 0x3}, [{0x7, 0x3fda, 0x2, 0x6}]})
r7 = openat$cgroup_freezer_state(r6, &(0x7f0000002480), 0x2, 0x0)
sendto$inet_nvme_pdu(r6, &(0x7f00000024c0)=@cmd={{0x4, 0x0, 0x48, 0x9}, {@identify={0x6, 0x7, 0x0, 0x7fff, '\x00', @sgl={0x7, 0x8001, '\x00', 0xf9}, 0x4, 0x0, 0x5, '\x00', 0x20}}}, 0x80, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r7, 0x8400941f, &(0x7f0000002540))
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x68, 0x0, 0x320, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

4.420691963s ago: executing program 1 (id=25):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x8, 0x7ffe, 0xfffffffffffffffa, 0x8, 0x6, 0x2, 0x5, 0x2000000000000008, 0x7, 0x3, 0x3, 0x8, 0x5, 0x1, 0x100000001, 0xfc], 0x23ff8, 0x800})
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
r3 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\xeaul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.316320189s ago: executing program 0 (id=26):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz0\x00', 0x40})
ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffd, 0x2e44)
close_range(r4, 0xffffffffffffffff, 0x0)

4.265550761s ago: executing program 0 (id=27):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
gettid()
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000002600)=""/4104, 0x1008}], 0x1, 0x0)
process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000000280)=[{&(0x7f0000000080)=""/1, 0x1}, {&(0x7f0000000100)=""/219, 0xdb}], 0x2, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r2, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0)
mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x81a082, 0x0)

4.226277803s ago: executing program 1 (id=28):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async)
socketpair$unix(0x1, 0x7ed9bbb18a307338, 0x0, &(0x7f0000001000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f00000004c0)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170e58410b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xaa6}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc4}, {&(0x7f00000003c0)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb42382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954baef93609f6004185f86c7dc9a356b6093ccd1e034ca94c8f7967be08eabb337387e91f29ea4602dd1e", 0xf3}], 0x8, &(0x7f0000001480)}, 0x0)
pipe2(0x0, 0xc0000) (async, rerun: 32)
recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) (async, rerun: 32)
syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
socket$unix(0x1, 0x5, 0x0) (rerun: 32)
mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) (async)
add_key(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) (async, rerun: 32)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x48202, 0xc)
ioctl(r5, 0x545d, 0x0) (async, rerun: 64)
sched_setscheduler(0x0, 0x2, 0x0) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socket$packet(0x11, 0x3, 0x300) (async, rerun: 32)
socket$xdp(0x2c, 0x3, 0x0) (async)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r7 = syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x85f, 0xfffffffffffffffd, 0xfffffffffffe, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000140)={0x9, 0x4, 0x400ffffffff, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) (async)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r7, 0x10, &(0x7f0000000080)) (rerun: 64)

4.0714646s ago: executing program 0 (id=29):
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000002040)=""/4091, &(0x7f0000001000)=0xffb)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000002900000043000000090000000000000014000000000000002900000004000000ffffff7f00000000580000000000000029000000040000003c080000000000000105000000000005020003c910fe88000000000000ceaf8e0222eb8610c20400000002c910fe8000000000000000000000000000400401090106000120000000140000000000000029000000430000000500000000000000180000000000000029000000390000002e0002070000000014"], 0xd0}}], 0x1, 0xc8000)
pipe2$9p(&(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x0)
clock_gettime(0x1, &(0x7f0000000040))
r3 = signalfd(r1, &(0x7f0000000140)={[0x4]}, 0x8)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@getsa={0xf8, 0x12, 0x1, 0x70bd29, 0x25dfdbff, {@in6=@private1, 0x4d3, 0x2, 0xfd078977a759a07c}, [@iptfs_dont_frag={0x4}, @srcaddr={0x14, 0xd, @in=@local}, @iptfs_pkt_size={0x8, 0x29, 0x7ff}, @algo_auth_trunc={0x4c, 0x14, {{'blake2s-256-x86\x00'}, 0x0, 0x180}}, @address_filter={0x28, 0x1a, {@in=@private=0xa010101, @in6=@local, 0x2, 0x6, 0x4}}, @iptfs_drop_time={0x8, 0x24, 0xffff}, @iptfs_max_qsize={0x8, 0x28, 0x9}, @user_kmaddress={0x2c, 0x13, {@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@private2, 0x0, 0x2}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x2004402, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@access_user}, {@msize={'msize', 0x3d, 0x1000}}, {@version_9p2000}]}})

3.936512936s ago: executing program 0 (id=30):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x32981, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)

3.86376939s ago: executing program 32 (id=30):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x32981, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)

3.276960727s ago: executing program 4 (id=31):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x75)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

3.200675031s ago: executing program 4 (id=36):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0)
r1 = eventfd2(0x800, 0x0)
io_setup(0x81, &(0x7f0000000400)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x1, 0xb, r0, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r1}])
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r3, &(0x7f0000000000)='7', 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)

3.200534981s ago: executing program 1 (id=37):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0)
syz_usb_connect$uac2(0x2, 0x95, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3f8c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0x1, 0x70, 0x51, {0x8, 0xb, 0x0, 0x2, 0x1, 0x7, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x2, 0x23, 0x8}, [@output_terminal={0xc, 0x24, 0x3, 0x6, 0x404, 0xb, 0x4, 0xe, 0x1ff, 0xc}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0x6}, @effect_unit={0x9, 0x24, 0x7, 0x4, 0x2, 0x4, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0x2, 0x8, {0x8, 0x25, 0x1, 0x0, 0x3, 0x4, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x650, 0x4, 0x7, 0x2, {0x8, 0x25, 0x1, 0x2, 0xf, 0x6, 0x3}}}}}}}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
connect$unix(r1, 0x0, 0x0)
syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0)

2.809286689s ago: executing program 4 (id=38):
r0 = inotify_init1(0x800)
sync_file_range(r0, 0x31d6afbf, 0x400010004, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180))
r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00')
openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'tunl0\x00', 0x400})
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r4 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x80000)
r5 = openat(r4, &(0x7f0000000000)='./dev\x00', 0x498002, 0xf)
sendmsg$NFT_BATCH(r1, &(0x7f0000000a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x21}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x9, 0x7, 0x1, 0x0, "0293cb8000"}]}, @NFT_MSG_NEWSET={0x2dc, 0x9, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_USERDATA={0x8a, 0xd, 0x1, 0x0, "140ec153a20424592fb2d02118c16263870436a6b87d04131d5d03f7f4476764c5d0f37662ed740dd8ad942a747dda050e08aaba29f130686ce99874a91a93b7bff6021d81ad35912399c89829af7aadb23d2eb23b3bf2694df5accbd116531fca5da07dce821864a8b8536557a04babe64f2b26324120547e7fcd13147412843c6a6e83d8cf"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xdc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa4}, @NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa8b0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x256}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ed}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff49}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}, @NFTA_SET_EXPRESSIONS={0xfc, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x54, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x80}]}}}, {0x44, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LAST_MSECS={0xc}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x26}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x38c}, 0x1, 0x0, 0x0, 0x80}, 0x80)
ioctl$BLKPG(r5, 0x1269, &(0x7f0000000200)={0x3, 0x0, 0x98, &(0x7f0000000580)={0xe4000000000000, 0x24000, 0x1}})

2.768938111s ago: executing program 4 (id=39):
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001})
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x401, 0x401}) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_usb_control_io(r1, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$hid(r1, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x80080) (async)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0)
syz_usb_control_io(r3, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x20, 0x3, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000001c00))
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x38) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000c00000018000180140002006c6f00000000000000000000000000001c000380"], 0x48}}, 0x0)

1.91137568s ago: executing program 1 (id=41):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e000000000000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000000a010101000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c6174650000000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x3d3)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r2, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100000000000000000000000000003f000000000000000000000000000000000000002e")
stat(&(0x7f0000000200)='./file0/file1\x00', &(0x7f0000000400))
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380100001800010027bd700000010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e2300050000006073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000ffffffffffff000000000000000004000000000000000600000000000000ffff0000800000001c25080000000000020000000000000009000000000000000000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000ca3d0000000000002abd7000043500000a"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

1.849593863s ago: executing program 1 (id=42):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
r2 = getpgid(0x0)
syz_pidfd_open(r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000780)='syscall\x00')
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0xc101, 0x86)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x41}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)

1.754582078s ago: executing program 1 (id=43):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
keyctl$set_reqkey_keyring(0xe, 0x2) (async)
socket$inet6(0xa, 0x4, 0x6) (async, rerun: 32)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1) (rerun: 32)
syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208065000070501020002000705820200020009040001040806620007050102000200032401070502020002000324020705030200020003"], 0x0) (async)
sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xaca}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8880) (async)
sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8015}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000017c0), r2) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001b80), r2)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001bc0)=ANY=[@ANYBLOB='3\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="216325bd7000fddbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x124, r5, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7293ea9e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xbbbc}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xbd3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x880}, 0x40015) (async)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x577, 0x0, &(0x7f0000000480)="22ee"}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) (async, rerun: 64)
r6 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (rerun: 64)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x32, 0x30, 0x62, 0x66, 0x30, 0x30, 0x31, 0x30, 0x67, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1a}, 0x48, r6) (async)
r7 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r6)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x61, 0x38, 0x31, 0x38, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r7) (async)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r6) (async)
add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x30, 0x65, 0x30, 0x37, 0x63, 0x32, 0x30, 0x30, 0x30, 0x31, 0x30, 0x37, 0x35, 0x61, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r6)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x32, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r6) (async)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r6) (async)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r6) (async)
add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r6) (async)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r6) (async)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r6) (async)
add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r6)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x63, 0x65, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x37, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r6)

1.260640961s ago: executing program 3 (id=46):
r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xbc, r3, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x29}}}}, [@NL80211_ATTR_VENDOR_DATA={0x93, 0xc5, "173aac2b60347de9fc52f1c6f16905f2f6cbf1cf6fbf0a01e886df6d4df2caba844866e7a3a02a628da8fb24c84818e5404467633c06ed226a817feaea1540ac4983bd833b36bfe2e63ce82549d9822af4d3b11b2239e63c0833bd1b182a7d617d8c18d392d336720956c7a9fab9a92e78fea241fdf4beaae0f781d50a6f03e21bf9a89bfc89ca3d25c01ff2c8fb65"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}]}, 0xbc}}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x18, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x0, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x20000000)
fchdir(r1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000480001"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004880)
writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="c805000020", 0x5}], 0x1)
r6 = socket$inet6(0x10, 0x3, 0x6)
sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r7 = creat(&(0x7f00000002c0)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x102)
write$cgroup_pid(r7, 0x0, 0x0)

1.224759033s ago: executing program 3 (id=47):
timer_create(0xb, 0x0, &(0x7f0000bbdffc))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x404042, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4000)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x80004, 0x6)
fsetxattr(r3, &(0x7f0000000040)=@random={'security.', '\x00'}, 0x0, 0x0, 0x3)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x0)
pread64(r4, &(0x7f0000000040)=""/222, 0xde, 0x3)
socket$inet_tcp(0x2, 0x1, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000140)={0x2b, 0x17, 0x2, {0x22, './cgroup.cpu/memory.limit_in_bytes'}}, 0x2b)
write(r0, &(0x7f0000000080)='4', 0x1)

1.139535107s ago: executing program 3 (id=48):
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80100, 0x0)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async)
recvmmsg$unix(r1, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012020, 0x0) (async)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (rerun: 64)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=@acquire={0x180, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback, 0x4d6}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x80}, {{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4}, {}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x2}, 0xfffffff9, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x4d2, 0x33}, 0x2, @in=@empty, 0x0, 0x1, 0x1, 0x5, 0x800, 0x401, 0x5}]}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @mark={0xc, 0x15, {0x35075c, 0x80000000}}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) (async)
chdir(&(0x7f0000000140)='./file0\x00') (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x8000, 0x4)

1.138785377s ago: executing program 3 (id=49):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f23f80f20e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000100)={0xb31, 0x20000000, 0x1000, 0x1}, 0x10)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4d, 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000740)={@broadcast, @empty}, 0xc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0})
open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x101)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.06353911s ago: executing program 3 (id=50):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x203, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e1d, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c)
listen(r3, 0x7fff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
gettimeofday(&(0x7f0000000040), 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000030c0)={'filter\x00', 0x6002, 0x4, 0x3d0, 0x0, 0x0, 0xf0, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7}}}, {{@uncond, 0xffffff99, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @local, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @mangle={0x0, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @private=0xa010100, 0xd, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0xff9b)
keyctl$set_reqkey_keyring(0xe, 0x2)
bind$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000240)=0x190, 0x4)
write(r4, &(0x7f0000000000)="01", 0x1)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x41000, 0xa06c, 0xfffffff9, 0x2b2, 0x0, [{0x0, 0x4, 0x4, '\x00', 0x5}, {0x3, 0x4, 0x22, '\x00', 0x9}, {0x0, 0xfc, 0x3, '\x00', 0xc}, {0xac, 0x6, 0x7f, '\x00', 0x80}, {0x3, 0x6, 0x2, '\x00', 0x82}, {0x2, 0x1, 0x4}, {0x5, 0x5, 0x8, '\x00', 0x5}, {0x0, 0x7, 0xff, '\x00', 0x7f}, {0x9, 0x2c, 0x5, '\x00', 0x10}, {0xb, 0x2, 0x80, '\x00', 0x3}, {0x6, 0xa4, 0x3, '\x00', 0xb}, {0xc, 0x4, 0x6, '\x00', 0x68}, {0x3, 0x9, 0x5, '\x00', 0x3}, {0x7, 0x6a, 0x8e, '\x00', 0x7}, {0x1, 0x5, 0x3, '\x00', 0x6}, {0x5, 0x2, 0x7, '\x00', 0x2}, {0x9, 0xb, 0x2}, {0x5, 0x6, 0x9, '\x00', 0x81}, {0xa4, 0x2, 0x6}, {0xf, 0x2, 0x3, '\x00', 0x5}, {0x3, 0x40, 0x1c}, {0x8, 0x2, 0x6, '\x00', 0x12}, {0x0, 0x4, 0x7, '\x00', 0x6}, {0x22, 0x3e, 0x6, '\x00', 0x8}]}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210})
r6 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$packet(r6, &(0x7f00000000c0)={0x11, 0x18, r8, 0x1, 0x81}, 0x14)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="00002bbd7000fcdbdf25060000000c00068008000700", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="060005004e210000060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB="05000500040000000400018048000680060001000a0000001400040020010000000000000000000000000000050002000400000005000200b20000000800060001000000060005004e22000008000600020000000800030002000000"], 0xd0}, 0x1, 0x0, 0x0, 0x804}, 0x840)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x10000)

937.470546ms ago: executing program 3 (id=51):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80840, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 32)
mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 32)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000000c0)={0x28}) (async)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) (async)
close(0x4)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20033e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) (async)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (rerun: 32)
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000000), 0x24, 0x0) (async)
listxattr(&(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x0) (async)
r6 = openat(r4, &(0x7f0000000280)='./trace/events/kmem/kmalloc/filter\x00', 0x802, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x26) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000d00)="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", 0x559, r9) (async, rerun: 64)
request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0x0) (rerun: 64)
setsockopt$inet6_buf(r8, 0x29, 0x23, &(0x7f0000000000)="31a15332938f7bd53c804648c6af344a7aabaf11bbcc8bdacf09e294161eae3db93a1e635b5007ea868317c1bb202a99e68d4f7ec15a7cc415f8b6db3bc571854d56d2fd80d933417a54ee7702e5ba97728fa002a003afcca3114ea440169f5898800bc8bce40f5260f2e5b10b6b32b120a8e9156672f243d9901235958a5e1df051cfc12569b86a9e89d79399a85394af80ebf77ef1003884df8f06922bbe08321cdd023049d6c5", 0xa8) (async)
write$cgroup_pid(r7, &(0x7f0000000240), 0x12)

374.992752ms ago: executing program 2 (id=54):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async, rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000020000000008000000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0d002b80080002"], 0x30}], 0x1}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) (async)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async, rerun: 64)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64)
bind$bt_sco(r2, &(0x7f0000000040), 0x8) (async)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0xa0802, 0x0)
write(r3, &(0x7f0000000000)='7', 0x1) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)

272.987017ms ago: executing program 2 (id=55):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x1, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0x3, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x7, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x2, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x0, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x774, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x2, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0x2, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x4, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0xfffc, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x80, 0x9, 0x81, 0x7, 0x9d87, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x137, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x80, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x6, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) (async, rerun: 32)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x1ff, 0x8000, 0x7ff, 0x6d, 0x2, 0x40, 0x1, 0x357, 0xfa41, 0x40, 0x4, 0x3, 0x2, 0x6, 0x4, 0x1eca], 0xb000, 0x80}) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)='S', 0x1}], 0x1) (async)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 32)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

119.333055ms ago: executing program 2 (id=56):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xa49, 0x0, 0x0, 0x1000, 0x6}}}, &(0x7f0000000300)=<r0=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="24000000180003041dfffd946f6105000a0100000005fe060c10880008001e80fff3c00e", 0x24}], 0x1}, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x20000, 0x0, 0x1, 0x154, 0x0, r2}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x2000000, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff8, 0x42, 0x0, 0x0}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x88140000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40010)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="36d38d6c1466b9800000c00f326635001000000f300fc71bf2a52e0f01c2baf80c66b85cd75f8266efbafc0c66ed660f38820c66b8000000000f23c00f21f86635020006000f23f866b93b0600000f3266b94109000066b80700000066ba000000000f30", 0x64}], 0x1, 0x0, &(0x7f0000000140), 0x0)

119.059264ms ago: executing program 2 (id=57):
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RGETLOCK(r1, &(0x7f00000002c0)=ANY=[], 0x200002e6) (async)
fcntl$setpipe(r0, 0x407, 0x7000001) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x26) (async, rerun: 64)
recvfrom$unix(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000040)=0x3, 0x4) (async)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, 0x0, 0x8000) (async, rerun: 64)
socket$inet6(0xa, 0x80000, 0x7) (rerun: 64)
write(r2, &(0x7f0000000000)='3', 0x4e) (async)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) (async)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async, rerun: 32)
r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c00000018000902000000000000000002000000000000800400d800"], 0x1c}}, 0x0) (async)
mmap(&(0x7f000045b000/0x3000)=nil, 0x3000, 0x2, 0x4010, 0xffffffffffffffff, 0x0)

27.579769ms ago: executing program 2 (id=58):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
timerfd_create(0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x800}, 0x0, &(0x7f0000000280)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000300)={0x0, 0x989680}, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0xd9, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11})
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
socket$netlink(0x10, 0x3, 0x7)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x2, 0x100}, 0x0)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={r2, 0x0, 0x4000, 0xfffffffff0000000})

0s ago: executing program 2 (id=59):
r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="21d2824daa6f0efe1790900d2dd9606c2497346c3a7bd319d77455313f7858fbf69acdad62921cc8faeb5fe17c1465a893f0dbde79c54c152e5b338a30790756b52fab7b142bf17aa4be2b71883f5061229e1ac456dd32da7dc3d83d16d538e2105823f4e955ab8e948050e8d9237f02648021e6773f2ce6c06a9c19789403d0560d288b400cfb85750e2f9cb7553032bd04d7f82e28ae187d9bf4d28d8bca0bb02d902dff4836006bf36c74b4ad3a4a774a14"], 0x0}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.100' (ED25519) to the list of known hosts.
[   22.429018][   T36] audit: type=1400 audit(1790074012.160:64): avc:  denied  { mounton } for  pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   22.432056][  T287] cgroup: Unknown subsys name 'net'
[   22.451659][   T36] audit: type=1400 audit(1790074012.160:65): avc:  denied  { mount } for  pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.479129][   T36] audit: type=1400 audit(1790074012.200:66): avc:  denied  { unmount } for  pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.479630][  T287] cgroup: Unknown subsys name 'devices'
[   22.606666][  T287] cgroup: Unknown subsys name 'hugetlb'
[   22.612279][  T287] cgroup: Unknown subsys name 'rlimit'
[   22.707397][   T36] audit: type=1400 audit(1790074012.440:67): avc:  denied  { setattr } for  pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   22.730688][   T36] audit: type=1400 audit(1790074012.440:68): avc:  denied  { mounton } for  pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   22.755410][   T36] audit: type=1400 audit(1790074012.440:69): avc:  denied  { mount } for  pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   22.781090][  T289] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   22.789848][   T36] audit: type=1400 audit(1790074012.520:70): avc:  denied  { relabelto } for  pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.815241][   T36] audit: type=1400 audit(1790074012.520:71): avc:  denied  { write } for  pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.827864][  T287] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   22.842269][   T36] audit: type=1400 audit(1790074012.550:72): avc:  denied  { read } for  pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.875148][   T36] audit: type=1400 audit(1790074012.550:73): avc:  denied  { open } for  pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.686687][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.693758][  T295] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.700982][  T295] bridge_slave_0: entered allmulticast mode
[   23.707465][  T295] bridge_slave_0: entered promiscuous mode
[   23.721233][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.728318][  T295] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.735486][  T295] bridge_slave_1: entered allmulticast mode
[   23.741707][  T295] bridge_slave_1: entered promiscuous mode
[   23.774067][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.781142][  T296] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.788241][  T296] bridge_slave_0: entered allmulticast mode
[   23.794526][  T296] bridge_slave_0: entered promiscuous mode
[   23.803076][  T297] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.810159][  T297] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.817312][  T297] bridge_slave_0: entered allmulticast mode
[   23.823557][  T297] bridge_slave_0: entered promiscuous mode
[   23.834857][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.841890][  T296] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.848990][  T296] bridge_slave_1: entered allmulticast mode
[   23.855209][  T296] bridge_slave_1: entered promiscuous mode
[   23.861250][  T297] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.868323][  T297] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.875414][  T297] bridge_slave_1: entered allmulticast mode
[   23.881616][  T297] bridge_slave_1: entered promiscuous mode
[   23.887724][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.894780][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.901848][  T294] bridge_slave_0: entered allmulticast mode
[   23.908120][  T294] bridge_slave_0: entered promiscuous mode
[   23.917343][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.924391][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.931454][  T294] bridge_slave_1: entered allmulticast mode
[   23.937743][  T294] bridge_slave_1: entered promiscuous mode
[   24.082907][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.089992][  T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.097307][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.104342][  T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.130923][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.138081][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.145385][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.152456][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.171740][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.178890][  T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.186215][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.193258][  T295] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.209432][  T297] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.216508][  T297] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.223777][  T297] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.230825][  T297] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.258177][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.265663][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.273121][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.280512][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.287865][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.295289][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.302445][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.309726][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.327100][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.334160][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.342690][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.349744][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.367525][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.374605][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.382237][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.389315][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.410441][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.417521][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.425303][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.432410][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.446106][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.453174][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.463048][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.470108][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.519589][  T294] veth0_vlan: entered promiscuous mode
[   24.530943][  T295] veth0_vlan: entered promiscuous mode
[   24.542892][  T294] veth1_macvtap: entered promiscuous mode
[   24.549824][  T296] veth0_vlan: entered promiscuous mode
[   24.565012][  T296] veth1_macvtap: entered promiscuous mode
[   24.573202][  T295] veth1_macvtap: entered promiscuous mode
[   24.606202][  T297] veth0_vlan: entered promiscuous mode
[   24.637653][  T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   24.653415][  T297] veth1_macvtap: entered promiscuous mode
[   24.747665][  T314] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   24.785980][  T317] netlink: 'syz.2.3': attribute type 27 has an invalid length.
[   24.812224][  T317] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.819492][  T317] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.863758][  T322] netlink: 'syz.1.2': attribute type 4 has an invalid length.
[   24.883086][  T322] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2'.
[   24.924952][  T322] netlink: 'syz.1.2': attribute type 27 has an invalid length.
[   25.461112][  T348] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   25.486002][  T348] tipc: Started in network mode
[   25.490906][  T348] tipc: Node identity aaaaaaaaaa24, cluster identity 4711
[   25.498565][  T348] tipc: Enabled bearer <eth:dummy0>, priority 10
[   25.507191][  T348] sit0: entered promiscuous mode
[   25.513312][  T348] netlink: 'syz.1.9': attribute type 1 has an invalid length.
[   25.521126][  T348] netlink: 'syz.1.9': attribute type 3 has an invalid length.
[   25.564503][    T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   25.670205][  T361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   25.679365][  T361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   25.694493][    T9] usb 4-1: device descriptor read/64, error -71
[   25.914520][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   25.922182][  T345] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   25.934512][    T9] usb 4-1: device descriptor read/64, error -71
[   26.074501][   T10] usb 2-1: Using ep0 maxpacket: 16
[   26.080892][  T345] usb 3-1: config 162 has an invalid interface number: 79 but max is 1
[   26.089236][   T10] usb 2-1: unable to get BOS descriptor set
[   26.095616][  T345] usb 3-1: config 162 has an invalid interface number: 183 but max is 1
[   26.104645][  T345] usb 3-1: config 162 has no interface number 0
[   26.111007][  T345] usb 3-1: config 162 has no interface number 1
[   26.117360][   T10] usb 2-1: config 1 has an invalid descriptor of length 137, skipping remainder of the config
[   26.127845][  T345] usb 3-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   26.141163][  T345] usb 3-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[   26.152356][  T345] usb 3-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64
[   26.163842][  T345] usb 3-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[   26.175280][  T345] usb 3-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[   26.187231][  T345] usb 3-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64
[   26.198711][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   26.207863][    T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   26.215523][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.223581][   T10] usb 2-1: Product: syz
[   26.228098][   T10] usb 2-1: Manufacturer: syz
[   26.232774][   T10] usb 2-1: SerialNumber: syz
[   26.237494][  T345] usb 3-1: config 162 interface 183 altsetting 1 endpoint 0x85 has invalid maxpacket 64988, setting to 64
[   26.249473][  T345] usb 3-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[   26.263263][  T345] usb 3-1: config 162 interface 79 has no altsetting 0
[   26.270690][  T345] usb 3-1: config 162 interface 183 has no altsetting 0
[   26.279058][  T345] usb 3-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1
[   26.288281][  T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.296505][  T345] usb 3-1: Product: syz
[   26.300713][  T345] usb 3-1: Manufacturer: syz
[   26.305429][  T345] usb 3-1: SerialNumber: syz
[   26.374489][    T9] usb 4-1: device descriptor read/64, error -71
[   26.471883][   T10] usb 2-1: bad CDC descriptors
[   26.477874][   T10] usb 2-1: USB disconnect, device number 2
[   26.614871][  T364] tipc: Node number set to 9349802
[   26.634519][    T9] usb 4-1: device descriptor read/64, error -71
[   26.754605][    T9] usb usb4-port1: attempt power cycle
[   27.047198][  T375] capability: warning: `syz.0.16' uses deprecated v2 capabilities in a way that may be insecure
[   27.058824][  T375] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   27.067652][  T375] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   27.082278][  T380] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   27.091104][  T381] overlay: Unknown parameter 'cgroup.controllers'
[   27.104516][    T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   27.150883][    T9] usb 4-1: device descriptor read/8, error -71
[   27.295836][    T9] usb 4-1: device descriptor read/8, error -71
[   27.452886][   T36] kauditd_printk_skb: 81 callbacks suppressed
[   27.452903][   T36] audit: type=1400 audit(1790074017.180:155): avc:  denied  { mounton } for  pid=399 comm="syz.1.22" path="/8/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   27.464405][  T401] overlayfs: maximum fs stacking depth exceeded
[   27.481979][  T404] overlayfs: maximum fs stacking depth exceeded
[   27.491154][   T36] audit: type=1400 audit(1790074017.180:156): avc:  denied  { getattr } for  pid=399 comm="syz.1.22" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   27.516434][   T36] audit: type=1400 audit(1790074017.180:157): avc:  denied  { mounton } for  pid=399 comm="syz.1.22" path="/8/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   27.557136][   T36] audit: type=1400 audit(1790074017.280:158): avc:  denied  { unmount } for  pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   27.577390][    T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[   27.607423][  T411] input: syz0 as /devices/virtual/input/input5
[   27.615551][    T9] usb 4-1: device descriptor read/8, error -71
[   27.622472][   T36] audit: type=1400 audit(1790074017.350:159): avc:  denied  { append } for  pid=410 comm="syz.0.26" name="event3" dev="devtmpfs" ino=440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   27.623916][  T408] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[   27.775968][    T9] usb 4-1: device descriptor read/8, error -71
[   27.815352][   T36] audit: type=1400 audit(1790074017.550:160): avc:  denied  { read write } for  pid=413 comm="syz.0.27" name="binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   27.852441][   T36] audit: type=1400 audit(1790074017.550:161): avc:  denied  { open } for  pid=413 comm="syz.0.27" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   27.890623][    T9] usb usb4-port1: unable to enumerate USB device
[   27.898912][   T36] audit: type=1400 audit(1790074017.580:162): avc:  denied  { ioctl } for  pid=413 comm="syz.0.27" path="/dev/binderfs/binder0" dev="binder" ino=5 ioctlcmd=0x620b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   27.927696][   T36] audit: type=1400 audit(1790074017.580:163): avc:  denied  { unmount } for  pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   27.947535][   T36] audit: type=1400 audit(1790074017.620:164): avc:  denied  { mount } for  pid=415 comm="syz.1.28" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   27.990035][  T327] bridge_slave_1: left allmulticast mode
[   27.995785][  T327] bridge_slave_1: left promiscuous mode
[   28.012675][  T327] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.026695][  T327] bridge_slave_0: left allmulticast mode
[   28.032381][  T327] bridge_slave_0: left promiscuous mode
[   28.040401][  T327] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.198621][  T327] veth1_macvtap: left promiscuous mode
[   28.204284][  T327] veth0_vlan: left promiscuous mode
[   28.378418][  T425] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.385780][  T425] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.392921][  T425] bridge_slave_0: entered allmulticast mode
[   28.399477][  T425] bridge_slave_0: entered promiscuous mode
[   28.412996][  T425] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.432330][  T425] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.439955][  T425] bridge_slave_1: entered allmulticast mode
[   28.446518][  T425] bridge_slave_1: entered promiscuous mode
[   28.510099][  T425] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.517214][  T425] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.524522][  T425] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.531583][  T425] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.553311][  T437] ./file0: Can't lookup blockdev
[   28.596579][  T425] veth0_vlan: entered promiscuous mode
[   28.609579][  T425] veth1_macvtap: entered promiscuous mode
[   28.630383][  T345] pl2303 3-1:162.79: required endpoints missing
[   28.643735][  T345] pl2303 3-1:162.183: pl2303 converter detected
[   28.655815][  T345] pl2303 3-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[   28.667068][  T345] pl2303 3-1:162.183: pl2303_vendor_write - failed to write [0404]: -71
[   28.680328][  T345] pl2303 3-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[   28.693005][  T345] pl2303 3-1:162.183: pl2303_vendor_read - failed to read [8383]: -71
[   28.709227][  T345] pl2303 3-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[   28.721549][  T345] pl2303 3-1:162.183: pl2303_vendor_write - failed to write [0404]: -71
[   28.744163][  T345] pl2303 3-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[   28.757612][  T345] pl2303 3-1:162.183: pl2303_vendor_read - failed to read [8383]: -71
[   28.773998][  T444] FAULT_INJECTION: forcing a failure.
[   28.773998][  T444] name failslab, interval 1, probability 0, space 0, times 1
[   28.787271][  T444] CPU: 0 UID: 0 PID: 444 Comm: syz.4.36 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4
[   28.787308][  T444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   28.787327][  T444] Call Trace:
[   28.787336][  T444]  <TASK>
[   28.787344][  T444]  __dump_stack+0x21/0x30
[   28.787388][  T444]  dump_stack_lvl+0x140/0x1c0
[   28.787422][  T444]  ? __cfi_dump_stack_lvl+0x10/0x10
[   28.787459][  T444]  dump_stack+0x19/0x20
[   28.787491][  T444]  should_fail_ex+0x3c2/0x510
[   28.787520][  T444]  should_failslab+0xac/0x100
[   28.787563][  T444]  __kmalloc_node_track_caller_noprof+0x65/0x4f0
[   28.787590][  T444]  ? pcpu_block_refresh_hint+0x201/0x320
[   28.787637][  T444]  ? kstrdup_const+0x45/0x60
[   28.787655][  T444]  ? pcpu_block_update_hint_alloc+0x8a0/0xc50
[   28.787683][  T444]  kstrdup+0x4d/0x130
[   28.787700][  T444]  ? kstrdup_const+0x3a/0x60
[   28.787731][  T444]  kstrdup_const+0x45/0x60
[   28.787748][  T444]  __kernfs_new_node+0xaa/0x740
[   28.787775][  T444]  ? mutex_unlock+0x90/0x240
[   28.787818][  T444]  ? pcpu_alloc_noprof+0x1440/0x1440
[   28.787844][  T444]  ? kernfs_new_node+0x280/0x280
[   28.787875][  T444]  ? pcpu_alloc_noprof+0xd93/0x1440
[   28.787901][  T444]  kernfs_new_node+0x154/0x280
[   28.787930][  T444]  kernfs_create_dir_ns+0x4b/0x130
[   28.787960][  T444]  cgroup_mkdir+0x396/0x1600
[   28.787988][  T444]  ? __kasan_check_write+0x18/0x20
[   28.788012][  T444]  ? __cfi_cgroup_mkdir+0x10/0x10
[   28.788047][  T444]  kernfs_iop_mkdir+0x1be/0x2d0
[   28.788078][  T444]  vfs_mkdir+0x591/0x810
[   28.788111][  T444]  do_mkdirat+0x240/0x530
[   28.788141][  T444]  ? __cfi_do_mkdirat+0x10/0x10
[   28.788171][  T444]  ? __kasan_check_write+0x18/0x20
[   28.788190][  T444]  ? getname_flags+0x203/0x6b0
[   28.788214][  T444]  ? __kasan_check_write+0x18/0x20
[   28.788236][  T444]  __x64_sys_mkdirat+0x8b/0xa0
[   28.788266][  T444]  x64_sys_call+0x2ba8/0x2ee0
[   28.788286][  T444]  do_syscall_64+0x57/0xf0
[   28.788306][  T444]  ? clear_bhb_loop+0x50/0xa0
[   28.788335][  T444]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   28.788362][  T444] RIP: 0033:0x7f1cfc19e159
[   28.788388][  T444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   28.788407][  T444] RSP: 002b:00007f1cfd07d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   28.788438][  T444] RAX: ffffffffffffffda RBX: 00007f1cfc425fa0 RCX: 00007f1cfc19e159
[   28.788454][  T444] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[   28.788470][  T444] RBP: 00007f1cfc23506b R08: 0000000000000000 R09: 0000000000000000
[   28.788485][  T444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   28.788499][  T444] R13: 00007f1cfc426038 R14: 00007f1cfc425fa0 R15: 00007ffd8e06b768
[   28.788517][  T444]  </TASK>
[   28.788578][  T345] pl2303 3-1:162.183: pl2303_vendor_write - failed to write [0000]: -71
[   28.845663][  T439] netlink: 'syz.2.35': attribute type 1 has an invalid length.
[   28.860152][  T345] pl2303 3-1:162.183: pl2303_vendor_write - failed to write [0001]: -71
[   29.088036][  T345] pl2303 3-1:162.183: pl2303_vendor_write - failed to write [0002]: -71
[   29.097792][  T345] usb 3-1: pl2303 converter now attached to ttyUSB0
[   29.104995][  T310] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   29.113609][  T345] usb 3-1: USB disconnect, device number 2
[   29.123046][  T345] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[   29.131465][  T345] pl2303 3-1:162.183: device disconnected
[   29.255323][  T310] usb 2-1: not running at top speed; connect to a high speed hub
[   29.263885][  T310] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1616, setting to 1023
[   29.280908][  T310] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40
[   29.290075][  T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.298210][  T310] usb 2-1: Product: syz
[   29.302511][  T310] usb 2-1: Manufacturer: syz
[   29.307177][  T310] usb 2-1: SerialNumber: syz
[   29.435377][  T345] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   29.444480][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   29.518011][  T446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   29.526651][  T446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   29.548416][  T310] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   29.555372][  T310] usb 2-1: unit 14 not found!
[   29.564026][  T310] usb 2-1: USB disconnect, device number 3
[   29.564564][  T364] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   29.588290][  T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   29.603989][  T345] usb 3-1: Using ep0 maxpacket: 32
[   29.609215][   T10] usb 5-1: Using ep0 maxpacket: 32
[   29.616001][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   29.626978][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   29.636904][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   29.646250][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.655575][  T345] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40
[   29.664869][   T10] usb 5-1: config 0 descriptor??
[   29.669903][  T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.678025][  T345] usb 3-1: Product: Ⰱ
[   29.678989][   T10] hub 5-1:0.0: USB hub found
[   29.687828][  T345] usb 3-1: Manufacturer: 汤듏쓨뵧▋嬰뀪➄屹᷋笄⡝辙퍃踭ື쟕熙蘃ᖼ쑒簊捺嗌ة덡薎ɇﵿ〷⽲芵㓗戀蔆慒㉢ـ曩ӵ䍒⤡䌌櫥﬌쟂嗃偦줍ﺖ舉䮞厎㌫뭧츁뛶DŽ傡屴䮸뙘◘㱬㷫犥熐也駷杹潾䒗ࢾ낽骻⣄梐ꀞ餾埙닌⌥ꭦ፪ꇿ笞ж혹玤恝앋孙ܫ骣⫣줼㾯च敎
[   29.719649][  T345] usb 3-1: SerialNumber: Х
[   29.735942][  T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   29.745736][  T364] usb 4-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00
[   29.754843][  T364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.763916][  T364] usb 4-1: config 0 descriptor??
[   29.878714][   T10] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19)
[   29.947529][  T345] usb 3-1: USB disconnect, device number 3
[   29.957979][  T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   30.072856][  T459] device-mapper: ioctl: device name cannot be "control", ".", or ".."
[   30.082749][   T10] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0
[   30.090834][  T459] netlink: 64 bytes leftover after parsing attributes in process `syz.1.41'.
[   30.094335][   T10] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0
[   30.129586][  T462] 9pnet_fd: Insufficient options for proto=fd
[   30.176750][  T364] usbhid 4-1:0.0: can't add hid device: -71
[   30.182765][  T364] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   30.195154][  T364] usb 4-1: USB disconnect, device number 6
[   30.394493][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   30.524524][   T10] usb 2-1: device descriptor read/64, error -71
[   30.581321][  T483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   30.600708][  T483] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   30.614715][  T482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.39'.
[   30.726582][  T487] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.46'.
[   30.764584][   T10] usb 2-1: device descriptor read/64, error -71
[   31.004491][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   31.154491][   T10] usb 2-1: device descriptor read/64, error -71
[   31.274498][  T345] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   31.394473][   T10] usb 2-1: device descriptor read/64, error -71
[   31.425615][  T345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   31.436563][  T345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   31.447782][  T345] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   31.456901][  T345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.465701][  T345] usb 4-1: config 0 descriptor??
[   31.504580][   T10] usb usb2-port1: attempt power cycle
[   31.844480][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   31.876097][   T10] usb 2-1: device descriptor read/8, error -71
[   31.888944][  T345] savu 0003:1E7D:2D5A.0002: hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[   32.015650][   T10] usb 2-1: device descriptor read/8, error -71
[   32.087118][  T364] usb 4-1: USB disconnect, device number 7
[   32.145209][  T364] ==================================================================
[   32.153346][  T364] BUG: KASAN: slab-use-after-free in roccat_disconnect+0x236/0x240
[   32.161269][  T364] Read of size 4 at addr ffff88811a136808 by task kworker/0:5/364
[   32.169081][  T364] 
[   32.171428][  T364] CPU: 0 UID: 0 PID: 364 Comm: kworker/0:5 Not tainted syzkaller #0 1e1e3c2f05ad74614550ef0faab423d4afe8f9f4
[   32.171448][  T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   32.171457][  T364] Workqueue: usb_hub_wq hub_event
[   32.171484][  T364] Call Trace:
[   32.171488][  T364]  <TASK>
[   32.171494][  T364]  __dump_stack+0x21/0x30
[   32.171516][  T364]  dump_stack_lvl+0x140/0x1c0
[   32.171535][  T364]  ? __cfi_dump_stack_lvl+0x10/0x10
[   32.171556][  T364]  print_address_description+0x71/0x210
[   32.171578][  T364]  print_report+0x4a/0x70
[   32.171597][  T364]  kasan_report+0x162/0x1a0
[   32.171615][  T364]  ? roccat_disconnect+0x236/0x240
[   32.171632][  T364]  ? roccat_disconnect+0x236/0x240
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   32.171666][  T364]  __asan_report_load4_noabort+0x18/0x20
[   32.171682][  T364]  roccat_disconnect+0x236/0x240
[   32.171698][  T364]  savu_remove+0xf0/0x170
[   32.171718][  T364]  ? __cfi_savu_remove+0x10/0x10
[   32.171738][  T364]  hid_device_remove+0x293/0x400
[   32.171754][  T364]  ? __cfi_hid_device_remove+0x10/0x10
[   32.171770][  T364]  device_release_driver_internal+0x4aa/0x830
[   32.171786][  T364]  device_release_driver+0x1d/0x30
[   32.171799][  T364]  bus_remove_device+0x34f/0x370
[   32.171819][  T364]  device_del+0x583/0xcf0
[   32.171831][  T364]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   32.171846][  T364]  ? __pm_runtime_resume+0xa0/0xa0
[   32.171865][  T364]  ? __cfi_device_del+0x10/0x10
[   32.171877][  T364]  ? __kasan_check_write+0x18/0x20
[   32.171892][  T364]  ? _raw_spin_lock_irq+0x93/0x120
[   32.171906][  T364]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   32.171920][  T364]  hid_destroy_device+0x6e/0x110
[   32.171936][  T364]  usbhid_disconnect+0xa3/0xc0
[   32.171949][  T364]  usb_unbind_interface+0x2ad/0xa40
[   32.171973][  T364]  ? __cfi_usb_unbind_interface+0x10/0x10
[   32.171995][  T364]  device_release_driver_internal+0x522/0x830
[   32.172010][  T364]  device_release_driver+0x1d/0x30
[   32.172024][  T364]  bus_remove_device+0x34f/0x370
[   32.172043][  T364]  device_del+0x583/0xcf0
[   32.172055][  T364]  ? kfree_const+0x3d/0x50
[   32.172068][  T364]  ? __cfi_device_release+0x10/0x10
[   32.172085][  T364]  ? __cfi_device_del+0x10/0x10
[   32.172097][  T364]  ? kobject_put+0x238/0x2a0
[   32.172111][  T364]  ? device_unregister+0x2b/0x40
[   32.172124][  T364]  usb_disable_device+0x3af/0x770
[   32.172153][  T364]  usb_disconnect+0x331/0x950
[   32.172173][  T364]  hub_event+0x1ad5/0x4360
[   32.172194][  T364]  ? hub_event+0x11d0/0x4360
[   32.172222][  T364]  ? __cfi_hub_event+0x10/0x10
[   32.172244][  T364]  ? kick_pool+0xb9/0x540
[   32.172263][  T364]  process_scheduled_works+0x7f4/0x1060
[   32.172282][  T364]  worker_thread+0xc99/0x13f0
[   32.172298][  T364]  ? __cfi_set_cpus_allowed_ptr+0x10/0x10
[   32.172315][  T364]  ? __kasan_check_read+0x15/0x20
[   32.172330][  T364]  kthread+0x2c4/0x360
[   32.172347][  T364]  ? __cfi_worker_thread+0x10/0x10
[   32.172363][  T364]  ? __cfi_kthread+0x10/0x10
[   32.172379][  T364]  ret_from_fork+0x64/0xa0
[   32.172426][  T364]  ? __cfi_kthread+0x10/0x10
[   32.172451][  T364]  ret_from_fork_asm+0x1a/0x30
[   32.172474][  T364]  </TASK>
[   32.172482][  T364] 
[   32.472666][  T364] Allocated by task 345:
[   32.476900][  T364]  kasan_save_track+0x3e/0x80
[   32.481585][  T364]  kasan_save_alloc_info+0x3a/0x50
[   32.486701][  T364]  __kasan_kmalloc+0x96/0xb0
[   32.491297][  T364]  __kmalloc_cache_noprof+0x23c/0x470
[   32.496663][  T364]  roccat_connect+0x6a/0x540
[   32.501252][  T364]  savu_probe+0x1a7/0x3f0
[   32.505615][  T364]  hid_device_probe+0x2d1/0x5f0
[   32.510480][  T364]  really_probe+0x2e4/0x8b0
[   32.514975][  T364]  __driver_probe_device+0x193/0x280
[   32.520253][  T364]  driver_probe_device+0x54/0x3f0
[   32.525273][  T364]  __device_attach_driver+0x2f1/0x4b0
[   32.530638][  T364]  bus_for_each_drv+0x267/0x300
[   32.535482][  T364]  __device_attach+0x2c4/0x3c0
[   32.540236][  T364]  device_initial_probe+0x1e/0x30
[   32.545254][  T364]  bus_probe_device+0x18b/0x270
[   32.550105][  T364]  device_add+0x7fd/0xbf0
[   32.554442][  T364]  hid_add_device+0x3c4/0x5a0
[   32.559125][  T364]  usbhid_probe+0xdca/0x1310
[   32.563720][  T364]  usb_probe_interface+0x6ab/0xbf0
[   32.568823][  T364]  really_probe+0x2e4/0x8b0
[   32.573315][  T364]  __driver_probe_device+0x193/0x280
[   32.578592][  T364]  driver_probe_device+0x54/0x3f0
[   32.583621][  T364]  __device_attach_driver+0x2f1/0x4b0
[   32.589025][  T364]  bus_for_each_drv+0x267/0x300
[   32.593889][  T364]  __device_attach+0x2c4/0x3c0
[   32.598648][  T364]  device_initial_probe+0x1e/0x30
[   32.603670][  T364]  bus_probe_device+0x18b/0x270
[   32.608527][  T364]  device_add+0x7fd/0xbf0
[   32.612866][  T364]  usb_set_configuration+0x1aad/0x2080
[   32.618327][  T364]  usb_generic_driver_probe+0x95/0x160
[   32.623818][  T364]  usb_probe_device+0x1ef/0x3b0
[   32.628662][  T364]  really_probe+0x2e4/0x8b0
[   32.633155][  T364]  __driver_probe_device+0x193/0x280
[   32.638468][  T364]  driver_probe_device+0x54/0x3f0
[   32.643494][  T364]  __device_attach_driver+0x2f1/0x4b0
[   32.648862][  T364]  bus_for_each_drv+0x267/0x300
[   32.653716][  T364]  __device_attach+0x2c4/0x3c0
[   32.658470][  T364]  device_initial_probe+0x1e/0x30
[   32.663490][  T364]  bus_probe_device+0x18b/0x270
[   32.668335][  T364]  device_add+0x7fd/0xbf0
[   32.672673][  T364]  usb_new_device+0x98d/0x1500
[   32.677443][  T364]  hub_event+0x2dbd/0x4360
[   32.681863][  T364]  process_scheduled_works+0x7f4/0x1060
[   32.687400][  T364]  worker_thread+0xc99/0x13f0
[   32.692072][  T364]  kthread+0x2c4/0x360
[   32.696141][  T364]  ret_from_fork+0x64/0xa0
[   32.700557][  T364]  ret_from_fork_asm+0x1a/0x30
[   32.705319][  T364] 
[   32.707632][  T364] Freed by task 502:
[   32.711527][  T364]  kasan_save_track+0x3e/0x80
[   32.716196][  T364]  kasan_save_free_info+0x44/0x50
[   32.721244][  T364]  __kasan_slab_free+0x5f/0x80
[   32.726006][  T364]  kfree+0x158/0x440
[   32.729907][  T364]  roccat_release+0x2c3/0x390
[   32.734596][  T364]  __fput+0x20b/0xa30
[   32.738578][  T364]  ____fput+0x20/0x30
[   32.742561][  T364]  task_work_run+0x1e5/0x260
[   32.747160][  T364]  resume_user_mode_work+0x35/0x50
[   32.752272][  T364]  syscall_exit_to_user_mode+0x63/0xb0
[   32.757736][  T364]  do_syscall_64+0x63/0xf0
[   32.762228][  T364]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   32.768132][  T364] 
[   32.770449][  T364] The buggy address belongs to the object at ffff88811a136800
[   32.770449][  T364]  which belongs to the cache kmalloc-512 of size 512
[   32.784576][  T364] The buggy address is located 8 bytes inside of
[   32.784576][  T364]  freed 512-byte region [ffff88811a136800, ffff88811a136a00)
[   32.798186][  T364] 
[   32.800500][  T364] The buggy address belongs to the physical page:
[   32.806911][  T364] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a134
[   32.815869][  T364] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   32.824370][  T364] anon flags: 0x4000000000000040(head|zone=1)
[   32.830443][  T364] page_type: f5(slab)
[   32.834418][  T364] raw: 4000000000000040 ffff888100041c80 0000000000000000 0000000000000001
[   32.843017][  T364] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000
[   32.851604][  T364] head: 4000000000000040 ffff888100041c80 0000000000000000 0000000000000001
[   32.860265][  T364] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000
[   32.868925][  T364] head: 4000000000000002 ffffea0004684d01 ffffffffffffffff 0000000000000000
[   32.877598][  T364] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000
[   32.886253][  T364] page dumped because: kasan: bad access detected
[   32.892663][  T364] page_owner tracks the page as allocated
[   32.898389][  T364] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 122, tgid 122 (udevd), ts 6386067100, free_ts 0
[   32.918002][  T364]  post_alloc_hook+0x37d/0x3b0
[   32.922771][  T364]  prep_new_page+0x2d/0x180
[   32.927270][  T364]  get_page_from_freelist+0x4aea/0x4ba0
[   32.932820][  T364]  __alloc_pages_noprof+0x35a/0x7e0
[   32.938025][  T364]  alloc_slab_page+0x6b/0x1e0
[   32.942705][  T364]  allocate_slab+0x69/0x430
[   32.947214][  T364]  ___slab_alloc+0x591/0x8c0
[   32.951807][  T364]  __kmalloc_node_track_caller_noprof+0x2e3/0x4f0
[   32.958218][  T364]  kmalloc_reserve+0x144/0x4f0
[   32.963004][  T364]  __alloc_skb+0x13f/0x360
[   32.967419][  T364]  alloc_skb_with_frags+0xd0/0x8b0
[   32.972525][  T364]  sock_alloc_send_pskb+0x883/0x9a0
[   32.977725][  T364]  unix_dgram_sendmsg+0x63a/0x1a90
[   32.982837][  T364]  sock_write_iter+0x445/0x490
[   32.987607][  T364]  vfs_write+0x75f/0xfd0
[   32.991895][  T364]  ksys_write+0x145/0x260
[   32.996227][  T364] page_owner free stack trace missing
[   33.001599][  T364] 
[   33.004026][  T364] Memory state around the buggy address:
[   33.009649][  T364]  ffff88811a136700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   33.017717][  T364]  ffff88811a136780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   33.025765][  T364] >ffff88811a136800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   33.033811][  T364]                       ^
[   33.038124][  T364]  ffff88811a136880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   33.046193][  T364]  ffff88811a136900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   33.054246][  T364] ==================================================================
[   33.084487][   T36] kauditd_printk_skb: 46 callbacks suppressed
[   33.084502][   T36] audit: type=1400 audit(1790074022.810:211): avc:  denied  { read } for  pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   33.144807][  T364] Disabling lock debugging due to kernel taint
[   33.155186][   T36] audit: type=1400 audit(1790074022.810:212): avc:  denied  { search } for  pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   33.176641][   T36] audit: type=1400 audit(1790074022.810:213): avc:  denied  { write } for  pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   33.186739][    T9] usb 5-1: USB disconnect, device number 2
[   33.213911][  T345] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   33.221466][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   33.256806][   T36] audit: type=1400 audit(1790074022.810:214): avc:  denied  { add_name } for  pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   33.278214][   T36] audit: type=1400 audit(1790074022.810:215): avc:  denied  { create } for  pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   33.301348][  T327] bridge_slave_1: left allmulticast mode
[   33.308342][   T10] usb 2-1: device descriptor read/8, error -71
[   33.318684][  T327] bridge_slave_1: left promiscuous mode
[   33.324324][  T327] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.331540][   T36] audit: type=1400 audit(1790074022.810:216): avc:  denied  { append open } for  pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   33.354881][  T327] bridge_slave_0: left allmulticast mode
[   33.355210][   T36] audit: type=1400 audit(1790074022.810:217): avc:  denied  { getattr } for  pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   33.360659][  T327] bridge_slave_0: left promiscuous mode
[   33.388939][  T327] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.445100][   T10] usb 2-1: device descriptor read/8, error -71
[   33.516339][  T327] veth1_macvtap: left promiscuous mode
[   33.521861][  T327] veth0_vlan: left promiscuous mode
[   33.554833][   T10] usb usb2-port1: unable to enumerate USB device
[   33.736943][  T327] bridge_slave_1: left allmulticast mode
[   33.742620][  T327] bridge_slave_1: left promiscuous mode
[   33.748385][  T327] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.755864][  T327] bridge_slave_0: left allmulticast mode
[   33.761515][  T327] bridge_slave_0: left promiscuous mode
[   33.767263][  T327] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.775017][  T327] bridge_slave_1: left allmulticast mode
[   33.780661][  T327] bridge_slave_1: left promiscuous mode
[   33.786326][  T327] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.793778][  T327] bridge_slave_0: left allmulticast mode
[   33.799573][  T327] bridge_slave_0: left promiscuous mode
[   33.805216][  T327] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.812870][  T327] bridge_slave_1: left allmulticast mode
[   33.818627][  T327] bridge_slave_1: left promiscuous mode
[   33.824250][  T327] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.831645][  T327] bridge_slave_0: left allmulticast mode
[   33.837293][  T327] bridge_slave_0: left promiscuous mode
[   33.842872][  T327] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.047457][  T327] tipc: Disabling bearer <eth:dummy0>
[   34.053033][  T327] tipc: Left network mode
[   34.059307][  T327] veth1_macvtap: left promiscuous mode
[   34.064850][  T327] veth0_vlan: left promiscuous mode
[   34.070359][  T327] veth1_macvtap: left promiscuous mode
[   34.076094][  T327] veth0_vlan: left promiscuous mode