last executing test programs:

20.501162141s ago: executing program 3 (id=22):
futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x1800000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
getpeername(r1, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0xffffffffffffffff, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/122, 0x0, 0x0, 0x20}, @fda={0x66646185, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0})

20.500890931s ago: executing program 3 (id=23):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000240)={0x80, 0x0, 0x5})
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

20.358970814s ago: executing program 3 (id=26):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700)
removexattr(&(0x7f0000000240)='./file5\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="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"])
mmap(&(0x7f0000148000/0x3000)=nil, 0x3000, 0x100000b, 0x10, 0xffffffffffffffff, 0xec775000)
statx(0xffffffffffffffff, &(0x7f0000000140)='./file5\x00', 0x2000, 0x400, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4000050}, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x2})
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
unshare(0x20040600)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xc1)
r6 = syz_usb_connect(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="85ff8b40d6b3062b1b0e27197094cddf1984a669365f2f84bea97223f598272cfd742ab4873e794958430c5fa9434910fc7cd1838bbdecc951bd811ced8573dffd413d9701850717f6d7", @ANYRES64=r1, @ANYRES32=r2, @ANYRESDEC, @ANYRES16=0x0, @ANYRESDEC=r0, @ANYRESDEC=r2, @ANYRES64=r0, @ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x8009)
syz_usb_control_io$rtl8150(r6, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io$sierra_net(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="dc2911f73d050b3e87df466052b31a806749ef3d8fa26d841ab119fb4740298c3d0c8ce23f69fafcaaf09051ac7b56983bdfeb3ca440fc30345cf0df407d4aeb4e67a46328e3939d3a101dee07cfb1d625e76d87a0153157bf5d591887ac042bac32861762610387425beeb1c4e1609c2ecc8ec2"], 0x0, 0x0})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="640f30f326670f205d0c04650f23cf2e0f00550dc4e1795aef660f38827653b805000000b961b553000f01d966ba210066b8070266eff20f21e6", 0x3a}], 0x1, 0x21, 0x0, 0x0)
r8 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
fchdir(r9)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r10, &(0x7f0000000280)=""/154, 0x9a)
lseek(r10, 0x8, 0x1)

17.742002245s ago: executing program 0 (id=52):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0)
fadvise64(r0, 0xa, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) (async)
mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40000, 0x10d)
write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
close(0x3)
close(0x4)
mknodat$null(r1, &(0x7f0000000280)='./file0\x00', 0x400, 0x103) (async)
mknodat$null(r1, &(0x7f0000000280)='./file0\x00', 0x400, 0x103)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) (async)
sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\a\x00'/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000802000000000000000002000f00001340e92e4bb73ca2573e830e1b32f9bc235c165d2eb941290899012fabd53549700800b168ad8adf954ac3df3f3d86d000f9860778250870a8b422fee609cfadf8621d65fd7531032fc251a8728133c8d145664e0aa8fd3c82b4fc3cb623be6224c3be"], 0x48}, 0x300}, 0x8040)
read$FUSE(r1, &(0x7f00000042c0)={0x2020}, 0x2020)

17.614865368s ago: executing program 0 (id=53):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone(0x2000000, &(0x7f0000000280), 0x0, 0x0, 0x0, &(0x7f00000003c0)="f8")
getresuid(&(0x7f0000000040), 0x0, 0x0) (async)
getresuid(&(0x7f0000000040), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r5 = fcntl$dupfd(r4, 0x406, r4)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x11, 0x0, 0x2000, 0x7995}, 0x8, 0x0, 0x8000000, 0x48000000, 0x0, 0x0, 0x0})
readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x9b}, {0x0}], 0x2) (async)
readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x9b}, {0x0}], 0x2)
r6 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x0, r6})
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

17.567541679s ago: executing program 0 (id=54):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e22, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x6e426000)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
splice(r3, 0x0, r2, 0x0, 0xfea8, 0xa)
syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

17.281018964s ago: executing program 3 (id=55):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
pipe2(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x1, 0x1, 0x0, 0x0, 0x2)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x21)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r4 = fcntl$dupfd(r2, 0x0, r2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4020)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0x2, 0x7, @multicast1}, 0x10, 0x0}}], 0x1, 0x44000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet6_tcp_int(r4, 0x6, 0xc, &(0x7f0000000000)=0x9, 0x4)
openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x11)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020)

17.223239565s ago: executing program 3 (id=56):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffff3)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
unshare(0x2c020400)
connect$bt_l2cap(r2, &(0x7f00000003c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x3}, 0xe)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x40010, r1, 0xd23d4000)
ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000ec0)='\x00\x00\xff\x02\x01\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')

17.151306487s ago: executing program 0 (id=57):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
timerfd_create(0x3, 0x800)
getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8)

17.105036328s ago: executing program 3 (id=58):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_connect$uac1(0x0, 0x91, &(0x7f0000000200)=ANY=[@ANYBLOB="00406b1d010140000102030109020012010100000a24010180040201020a240701000000d885700904010000010200000904010101010200000905010900021404cc0725010103020009040200000102000009040201a42e5c278701010200000724017c0e03000f24020200000500021e68ba70f70709058209080007960307250103f400"/144], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x64, &(0x7f0000001000)=ANY=[@ANYBLOB="12010000cb8be6406d05000000390102030109025200010000000009044000000e0100390a2405", @ANYBLOB="27c754300109f781ba0737ca"], 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/notes', 0x800, 0x88)
syz_genetlink_get_family_id$devlink(0x0, r2)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
sendto$inet(r1, 0x0, 0x0, 0x24000001, 0x0, 0x0)
write$binfmt_format(r1, &(0x7f00000026c0)='1\x00', 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

17.033270289s ago: executing program 32 (id=58):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_connect$uac1(0x0, 0x91, &(0x7f0000000200)=ANY=[@ANYBLOB="00406b1d010140000102030109020012010100000a24010180040201020a240701000000d885700904010000010200000904010101010200000905010900021404cc0725010103020009040200000102000009040201a42e5c278701010200000724017c0e03000f24020200000500021e68ba70f70709058209080007960307250103f400"/144], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x64, &(0x7f0000001000)=ANY=[@ANYBLOB="12010000cb8be6406d05000000390102030109025200010000000009044000000e0100390a2405", @ANYBLOB="27c754300109f781ba0737ca"], 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/notes', 0x800, 0x88)
syz_genetlink_get_family_id$devlink(0x0, r2)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
sendto$inet(r1, 0x0, 0x0, 0x24000001, 0x0, 0x0)
write$binfmt_format(r1, &(0x7f00000026c0)='1\x00', 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

17.028317569s ago: executing program 0 (id=60):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x90, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x26}, @flat=@weak_binder={0x77622a85, 0x1001, 0xffffffffffffffff}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x654e9316b2da8cd8, 0x1, 0xfffffffd}}, 0x10) (async)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"})

17.004281149s ago: executing program 0 (id=61):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
unshare(0x62040200)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}})
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, 0x0, 0x165342, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(r5)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
ioctl$KVM_NMI(r7, 0xae9a)
add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="9d", 0x1, 0xffffffffffffffff)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r8=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x40, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x100)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
fspick(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1)
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
lseek(r9, 0x0, 0x1)

7.623833322s ago: executing program 2 (id=145):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025361a3a2647571828000000180001801400020076657468305f746f5f687372"], 0x2c}}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)

7.546198283s ago: executing program 2 (id=147):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$tcp_congestion(r0, 0x0, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001c0021002dbd7000000000000700000005000000000002000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
setrlimit(0x4, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
socket$inet6(0x2d, 0x2, 0x0)
syz_io_uring_setup(0x420b, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
clock_gettime(0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000000)=0x32ab, 0x4)
r4 = syz_clone(0x10b06880, &(0x7f0000000180)="36d27cb6fdd6487e", 0x2, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000140)="c1c009003324f30500ef0601b49b8d4fd82ed6184e76973d385afdae8eadfd323d3914fdb30958c2003da92b8532")
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x5, &(0x7f0000000280)=""/195)
r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
r6 = socket$inet6(0xa, 0x5, 0x1)
getsockopt$bt_hci(r6, 0x0, 0x60, 0x0, &(0x7f0000d23000))
kcmp(r4, r4, 0x0, r5, r2)
unshare(0x20000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)

7.442823686s ago: executing program 2 (id=148):
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0)
ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x0, 0x5, 0x590f, 0x2})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

5.830814457s ago: executing program 1 (id=151):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0)
r1 = syz_clone(0x210080, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/118, 0x76}, {0x0}, {0x0}], 0x3, 0x9, 0xd, 0x2)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) (async)
syz_clone(0x210080, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ptrace(0x10, r1) (async)
ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) (async)
preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/118, 0x76}, {0x0}, {0x0}], 0x3, 0x9, 0xd, 0x2) (async)

5.813936887s ago: executing program 1 (id=152):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x5, 0x4, 0x66, @empty, @empty, 0x7, 0x7800, 0xfffffffe, 0x5}})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0})

5.803454137s ago: executing program 1 (id=153):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x802, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x900, 0x11c)
setpriority(0x1, 0x0, 0xb0)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x24001804)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x20010, r1, 0x7eea7000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000001b40)=[@clear_death={0x400c6313, 0x1}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x802, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x900, 0x11c) (async)
setpriority(0x1, 0x0, 0xb0) (async)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x24001804) (async)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x20010, r1, 0x7eea7000) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000001b40)=[@clear_death={0x400c6313, 0x1}], 0x0, 0x0, 0x0}) (async)

5.607317001s ago: executing program 1 (id=155):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r0, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xd6b1, 0x54}}}}, [@NL80211_ATTR_IE={0x3d, 0x2a, [@supported_rates={0x1, 0x7, [{0xc}, {0x5}, {0x12}, {0x48}, {0x4}, {0x24, 0x1}, {0x36, 0x1}]}, @ht={0x2d, 0x1a, {0x300, 0x3, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x800, 0x9, 0xd}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_a, @broadcast}}]}, @NL80211_ATTR_IE={0x23, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x1000, 0x3, 0x1, 0x0, {0x8, 0x8, 0x0, 0x19b, 0x0, 0x1, 0x1, 0x1}, 0x408, 0x5, 0x40}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x440)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000005}, 0x40004)
r4 = signalfd(r2, &(0x7f00000003c0)={[0x5]}, 0x8)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r2)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6gre0\x00', <r6=>0x0, 0x2f, 0x4e, 0xf4, 0x6, 0x0, @rand_addr=' \x01\x00', @local, 0x20, 0x8000, 0xa44, 0xd3}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vxcan1\x00', <r7=>0x0})
sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x178, r5, 0x10, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x53}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x4810}, 0x1)
r8 = inotify_init1(0x180800)
r9 = accept$unix(r4, &(0x7f0000000780), &(0x7f0000000800)=0x6e)
close_range(r8, r9, 0x2)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000840), 0x4)
syz_usb_connect(0x3, 0x283, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x68, 0x50, 0x85, 0x10, 0x1266, 0x1004, 0xaae7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x271, 0x2, 0x2b, 0x4, 0x20, 0xc, [{{0x9, 0x4, 0x9d, 0x4, 0x5, 0xff, 0xa0, 0x67, 0x80, [], [{{0x9, 0x5, 0x9, 0x1, 0x40, 0x7f, 0x10, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x3}]}}, {{0x9, 0x5, 0x80, 0x3, 0x5f7, 0xb, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x1}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x2, 0xb3, 0x2}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x3, 0x99, 0x3}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x4, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xb2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xfff8}]}}]}}, {{0x9, 0x4, 0x5a, 0xe, 0x5, 0x9d, 0x87, 0x34, 0x7, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "bce1ea1932"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x1f6d, 0x2, 0x6}, [@obex={0x5, 0x24, 0x15, 0x7fff}, @dmm={0x7, 0x24, 0x14, 0x9, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x4343, 0x1, 0x54, 0x4, 0xff}, @acm={0x4, 0x24, 0x2, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x72}, @mdlm_detail={0xa6, 0x24, 0x13, 0x7, "1b7c1d4bd6acc3afe6d1dfc403b292803e72b02a550bfe5f2b1f1a555a683f7b166b7075854f7aa0072ba7fadeab858d17260ad79dbde0c8b8f25e528e6874f6725c298097f327d1a997a06f1f2712b956e5e438b1a051499efe5f2c83a88529dd155d64bbea29d0fdf7e8d207d54699c241caadd22d769c33b88ce7c705dd4dbeaec8fa73226ae09b8606f1690f1933fc437c42b76854d525b1bed027cd27579021"}]}], [{{0x9, 0x5, 0x0, 0x4, 0x8, 0x10, 0xd, 0x6, [@generic={0x71, 0x2, "036265d68186372d154bf9d2ef9cd567565c09316f1061d6dc56e1b64b74bac0bad59f89674463d2a9189ced1ca17e6a455cdf15ea4dc31da295eb6dc0c0635fdd3196568220f9f1b6487e360cf83424cf79aa6563e89c5f7e1847bd553a05335b6f0714d379fe8b97144dd9b313fc"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x70, 0x13, 0x1}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x4a, 0x0, 0x3}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x0, 0x7b, 0x5, [@generic={0x85, 0xa, "faf0b7f30d512059fbac9ccec1910d0bfa5bf177828265deeb39038744eedefb7f0d3f66c0d4ae2d26efee8542fde8b3f94b2fdafd04001914706da1276aca229b7432da1c179208616c8fd087ee990158dc840548b7e34aad6335cd37c79e4d6518a42d5a8c585e7659ab59011996f30ca9d9e7d0733071e82ab0959481d2094643f6"}, @uac_iso={0x7, 0x25, 0x1, 0x183, 0xb, 0x8}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x1, 0x4, 0xe1}}]}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x310, 0x47, 0x0, 0x2, 0xf7, 0x8}, 0x34, &(0x7f0000000b80)={0x5, 0xf, 0x34, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x1, 0xf0f, 0x0, [0xffc000]}, @generic={0xf, 0x10, 0xa, "76a05f97c343a7232c5742e6"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x1, 0xc, 0x2}]}, 0x4, [{0x6, &(0x7f0000000bc0)=@string={0x6, 0x3, "2d528d9f"}}, {0x7b, &(0x7f0000000c00)=@string={0x7b, 0x3, "ca1617eeeda887aed09c4442b931707ebd227c5c7e23feb70afcbfa998e437e0c7ca2d0341af0f74557a1d1315e1fa91fec8b6a35642cff972601d57194e9ea3ceb50056238f3c852c08e0fc2923181bf8fb930d13783b89e4898fc019e42b0693c21004e4b1cfbcad60d20c5953e14e0170d0b9a0a9c9ef1a"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x42b}}, {0x83, &(0x7f0000000cc0)=@string={0x83, 0x3, "54402e8ad0ecc6048e69fce4a79d299adf55ab3dbad902e3b38526629d6d075a1e5969ede5085dd12194516cefbc6ad92efe791e855ad7972f574181dabe19ece006ea3d8eeba48cbdebffa200ddb9f35134de39e07f80bde5a8aec7ad81e288fafd483e57cda40ecc7beac1cbf9929d2e7256bbe7e79674b3b79ab3c2f62c2ec3"}}]})
fchmod(r9, 0x51)
syz_genetlink_get_family_id$team(&(0x7f0000000e00), r4)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e80), r4)
sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x50, r10, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40)
gettid()
shutdown(r4, 0x1)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001000), r2)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x64, r11, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x18000}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xea}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x64}}, 0x2008040)
ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000001140))
ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000001200)=0x4)
bind$inet6(r4, &(0x7f0000001240)={0xa, 0x4e23, 0x2, @local, 0x7}, 0x1c)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000001280)={<r12=>0x0, 0xe58, 0x82})
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000001680)={r12, 0xe3, 0x0, [0xffffffffffff97da, 0x9, 0xfff, 0x800, 0x7], [0x6, 0x9, 0x100000000, 0xffff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7, 0x100000000, 0x7, 0xfff, 0x83a6, 0x1, 0x4, 0x3, 0x7ff, 0x7, 0x7, 0x0, 0x7, 0x5, 0xf, 0xfffffffffffffbb2, 0x0, 0x7, 0xf4, 0x0, 0x9, 0x3, 0x0, 0x3, 0x8, 0x6, 0x5, 0x8, 0x6, 0x3, 0x6, 0x6, 0x21, 0x0, 0x6, 0x19b, 0xffffffffffffffff, 0x8, 0x8, 0x2, 0x3, 0x2, 0x4, 0x2, 0x3, 0xfff, 0x9, 0x2, 0x400, 0x7, 0x9, 0x4, 0x9, 0x8000, 0x7, 0x34, 0x100000000, 0x2, 0x1, 0x5, 0x3, 0x9, 0x4, 0x2965, 0x2, 0x4, 0x80, 0x200, 0xfffffffffffffffc, 0x3, 0x747, 0xf, 0x7ff, 0x8001, 0x7, 0x1000, 0x5, 0x9, 0xd, 0x4, 0x1, 0x7, 0x200, 0x3, 0x401, 0x2, 0x800, 0x6, 0x4, 0xc, 0x1, 0x52a, 0x8, 0x5, 0x1, 0x2, 0x6, 0x40, 0x8000000000000001, 0x3, 0x5, 0x4d97, 0x9, 0xe1, 0x8, 0x5, 0x8, 0x2, 0x81, 0x0, 0x1, 0x2, 0x0, 0xffffffff]})
syz_usb_connect(0x6, 0x366, &(0x7f0000001ac0)={{0x12, 0x1, 0x110, 0xb1, 0xcd, 0x87, 0xff, 0x10c4, 0x8218, 0x13a1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x354, 0x2, 0xa, 0x4, 0x60, 0x28, [{{0x9, 0x4, 0x8c, 0xa, 0x9, 0xee, 0x88, 0xd5, 0x8, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "e4"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9b2, 0x0, 0x5}, {0x6, 0x24, 0x1a, 0xff, 0x28}}, @uac_as={[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x9, 0x9, 0x3, "60e56370c31e"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5, 0x3, 0x0, 0x80, "eb"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x1, 0x3, 0x81, "d322", "8958fe"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x1, 0x3}, @as_header={0x7, 0x24, 0x1, 0x3, 0x3, 0x1002}]}], [{{0x9, 0x5, 0x7, 0x3, 0x10, 0x5, 0x5, 0xa6}}, {{0x9, 0x5, 0xf, 0x17, 0x40, 0x7, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1}, @generic={0xd, 0x21, "73704d17df9ba994541c07"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x400, 0x8, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1}]}}, {{0x9, 0x5, 0x6, 0x8, 0x0, 0x8, 0x4e, 0x6}}, {{0x9, 0x5, 0x6, 0x2, 0x200, 0x1d, 0x8}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0xb, 0x7, 0x4c}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x4, 0x4, 0xf3, [@generic={0x10, 0x10, "4efda702d1ee1a74944f13892afc"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x8, 0x8, 0xff, [@generic={0xea, 0x21, "85e26feb84e5ab451bb5953759fc7af138f0b229cbfc98317d1a5c9fbee0e1cb59400c01667f364e39907d55773ddac7cd70ce993d7abfd78fc231a8fadd6fd58adebe43db3c50ab7a0a4c60a857c9dce040f34c118cdee5dce019859062b4eeb863180f7559d1d5d311b3bf18b08c040c77ed637c993cd844161ced54152352835ad7ef35da08a326e0241a1d07973ef8cff7e7814a8c616b132ca8caf9f5c62f3096559c8f44fec226fd0ce12f346f32e2f173bb004bfc62493c8d8da61c717a5edf7c4b10c735dc8e15786c23961082a85d41e7cdae860fbdb158899bcd8700a274cae4a2af50"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x1, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3}, @generic={0x47, 0x4, "d75fc12ddd61ce44fbb5ad6a113260c6a8508a8b2a4330b651dc40a2e49463674ab032273b8fac5f34254c5e2a4a20ec8723a7c9fb89887266774f39f3062456f5b42e50b6"}]}}]}}, {{0x9, 0x4, 0x26, 0x8, 0x4, 0x3f, 0x35, 0xe8, 0x22, [], [{{0x9, 0x5, 0xf, 0x0, 0x8, 0x9, 0x3, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x3a}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x9, 0x8, 0x5}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x81, 0x7, 0x77}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xa, 0xb, 0x9, [@generic={0x102, 0xd, "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"}]}}]}}]}}]}}, &(0x7f0000002040)={0xa, &(0x7f0000001e40)={0xa, 0x6, 0x201, 0xc1, 0x7, 0xb, 0x8, 0x4}, 0xf, &(0x7f0000001e80)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1f, 0xd0, 0x32, 0x81}]}, 0x4, [{0x4, &(0x7f0000001ec0)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000001f00)=@lang_id={0x4, 0x3, 0x1809}}, {0x8b, &(0x7f0000001f40)=@string={0x8b, 0x3, "9eccb8c9e91c75673ed1d45cf084247248fa9f22cf4d61323a7a579ebb544281b3e19143b3468d69c050b4fa3f00b05f3e69cc16e1d66f0203e1d2a7fb089068b60252fc418ccfdbec2659e4aa7f5a8ef4487a68b44a77631f359d1b08c1ab6cf93115d36d4906a4a229370576b328ea1e14c1b1344ae6d515836abe2d92d4ee757d3c8bf2adb5c376"}}, {0x4, &(0x7f0000002000)=@lang_id={0x4, 0x3, 0x3401}}]})

4.675621969s ago: executing program 2 (id=159):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
request_key(&(0x7f0000000040)='.request_key_auth\x00', 0x0, 0x0, 0xfffffffffffffffb)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33)
mkdir(0x0, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000008c0)={"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"})
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100bbcb515eea0000000020ac054c0200000000000109022400010000000009040000c4030001000922810e090581030000000000"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0)
connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r3, &(0x7f00000001c0)="2faea58f", 0x4, 0x8000, 0x0, 0x0)
sendto(r3, &(0x7f0000000400)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38", 0x6b, 0x4008044, 0x0, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700ab65e1c3e4ff", 0xf}], 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000080)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1)
sendto$inet(r3, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2b)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000001f0001c0"])
syz_usb_control_io$hid(r1, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES64=r6], 0x0}, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)

4.248448768s ago: executing program 1 (id=160):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000771000/0x2000)=nil, 0x2000}, 0x1})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000004c0)={0x20, 0x17, 0x4, "2686b454"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000680)={'\x00', 0x3, 0x8, 0x8, 0x6, 0x6, <r5=>0x0}) (rerun: 64)
sendmsg$nl_generic(r3, &(0x7f0000001d00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001cc0)={&(0x7f0000000700)={0x15b0, 0x35, 0x1, 0x70bd28, 0x25dfdbfb, {0x1c}, [@nested={0x101c, 0x16, 0x0, 0x1, [@nested={0x4, 0x120}, @nested={0x4, 0x13d}, @typed={0x1004, 0x9c, 0x0, 0x0, @binary="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"}, @typed={0x4, 0x17}, @typed={0x8, 0x116, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @nested={0x174, 0x54, 0x0, 0x1, [@nested={0x4, 0x41}, @generic="0790e59549c453bd14e8e89e64a69c533d0bbc7a5674de2fa4bfa75e78435161ae8cf268032916a081377ad0f30a11d8b34f4ca8c69823e998071094b8845561f06ed5a009f5cf0bfbd32bdcf4fa543d4296b434d5a58151f631296f55167becf58a00de46f6db1c856f41b32bade5fdc2011827e35ad24e293d7bf8e959fbf6d6a1e058b4d3b106e005bd64d4710d31fbd32921240db4f6", @typed={0x8, 0x10, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x27, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="96e32aed7dbc5302743eded134eb4cbbe660538e63775016f9b58aa0e3a497846feb37123a606f75cb7ab5a38e8f18eefb07ac42eedd7c8614ca4ad1e5082d9261c6f1c5aa5086597f1fd0f2c841fefa4be6099fa042ed12e4125814397da633c8f372126f9f4e7e4c61fdeb990b9eb9f48d6637610eca102c984da5ecbc6013e1212ed6095991dfd5c266cefbe5a579ebcd620d50522453d09c42f0b294a9878cb93fd6f89fa22bb0f3c454c15fffd49d83838edcb0ae9ede42523d"]}, @nested={0x17e, 0xbf, 0x0, 0x1, [@nested={0x4, 0x14c}, @typed={0x8, 0x32, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="a7f3e11095138f68024d1895a60a2df60a43a050249a2dc77a3df1fe801b78cda125ba5bebd18508dd93ed57289774cf11ef41b442366bed5cd09b795bc75a08dd4072c5bb589ea4bda3d44a81c7047f5abed7d75767d3a62cdf4761acec6ce3d51d045ef7e8a58aaa2619034a9c8710a88443e6d060960a6407f296cab096a287fc98abccf01c58ba1a345ca2a0e5738ce774389dfa9833c41f0d5b56a03ad4567cb934dd985914dd5d8843c6de9a3f2629991624e2e3cd43dd9169b54a5c0f9fa9447b7294723b0800", @generic="8485920b2ed90964d5f9dad0c7a7945b422bfc576577663cd5159ede974e41e04f953f8dd659e68331bb8257595601671c5adb0acee3b9b1ad7991b1a656c2a6057c3ca8edeabd2d1b82d01c2efbfd93680b461dee9e739f4ed7a9c06497edf457bd582556f96c61ccd7436cb205fb89236a9df036fdf6aadcf22878025dc817037d335c44ddecbbec2e440542f64c68bf430cc4e69ab74b981c2209ffa189e2", @nested={0x4, 0x42}]}, @nested={0x1bc, 0x13d, 0x0, 0x1, [@nested={0x4, 0x117}, @generic="7088a0c7a6514797020f5a3f079c18c62c13862fcccb504a331cc1e820c68b19e6c5eb75a44e4eee1665f3be45f98cde65e1de192ae73009f8386ef3b10159b4ef3ba603fb72e17a40d203de6c2bc4a27073b2cf5e2edef6690c3b29efb21c52f935287f00c5244b39e075154f3d28e269d6356e24bc6452b940adaba711d46c4556011d6be52cba45a8a8ec9bb2", @nested={0x4, 0xc5}, @typed={0x8, 0xa, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x12d}, @generic="a55bc4eb1fda10ffa220ff8af50ee5799df4d60179c79ba64a86a809228c3eb64854", @typed={0xc, 0x83, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0xb6}, @typed={0xe2, 0x1b, 0x0, 0x0, @binary="ec7fbe74be7170118ea798ea75270d78012ccaed747046e60bc0b1e1a09bbf6b8c5dcd49d148f6c03858158160b35feb53a5c9bf3ba337d1dcb9857f313d63b8e32490b5ac0d128508448c03e578079faf65620ac6361a12ff8e71afaec9e057f0228368df815f01ec7686b140d8b3d6c6a516137767eb1e15340dcc05406e0f9cc67db096ca774ec1eec346aa9fd06217235260113b9e96f61b42fa1a8b0431bee34860b7a3d0eac0806372378f771311fb828d821b71608d1b6c0562dcd23cefd8d60d2a2221fbf7e8f27963b3e942184772cb7a646b3cfa096e9c0891"}]}, @typed={0xce, 0x4, 0x0, 0x0, @binary="fabd2ec0711b883ae8599252a84651b3ce2a8c9cbcdd3f07ff106d86b037a7f1bd1ab4212091fe629527a0dafeadf4db1647859ac6610b418bbaf3e14d37fcf2c5eb3ed271109c127ff01791bbf266876c6cf6d3c2d2039c2d04b99cf226847e6e3d777b9883b6d45732a368d9374d993b44c7eca44f45fa30976ae71dbc925949d773a385845b74cef1c68444b620028b4886872a36494df42b76d840695ec2b81976e5be4a7714e63afd2720b420a03f06bb3746a9c3525b6dfc3bc836ab43924f8db7b9c13bcfed3b"}]}, 0x15b0}, 0x1, 0x0, 0x0, 0x40090}, 0x8c5)
syz_usb_control_io$printer(r4, &(0x7f0000000280)={0x14, &(0x7f0000000240)={0x40, 0x22, 0x32, {0x32, 0x11, "1223c32a4d48c4f52e3f830a08976164eda994280ebd13934725580c294251d69109b611344690ee53cab7abfa5ad53d"}}, &(0x7f0000000340)={0x0, 0x3, 0xb5, @string={0xb5, 0x3, "e7761aec1e119d7d3bf494c52446560271254006d3936fad981f5a92b7ce8a95c5342b74a3291429c8eeb5f7d718918bc00274acd912e0d880df277077870aabd8d6e7d72dc2e6a55ad56c1a40b543e459390a665d6d8c34a3afe2e78366e3c8bdfc866ba21fc7f377457a059e03a8aec6aab97bca9f6c891bbdc56a25fe28fe565456f7b991e7b51dea8db6772e2bfc4f87a24a1059a091f4ce3d89c97b5cdb3ab826d28b2d81d17086ca7fd26304e4e19038"}}}, &(0x7f0000000600)={0x34, &(0x7f0000000400)={0x0, 0x16, 0x59, "d170af409233282960c7b11719ad7d1437c51750a74cb8193c4c2c5ea49d20bcd0eb88e3e87552c88ac234c8d945b3bb566238f40994c6cd148f1bf51d52d778f826b44035e6a094ed9746308770cbbde257407796ef484238"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x0, 0xb1, {0xaf, "7db0ace76029f90044cb39d2512da559237bf06448a0ad746acb4acec3f977c72bf289f1ca16e9ffc43887872c7de0975d01d8220fe83e1ea553bcb07d17288c0fe17c0fbf5a75152fcbc95c51087703117cc4de4f9d997d7e9829beb6386bf8bc4c674d44861b3771d6ba2207cb60e8db8127169c85fafece59fbb3d247ed2962a2cf33122a19869cf7f3fac6a2a80f1a129714a10fb71d9952fc8afc60876378dc23afc631fe561c206b39436014"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x1}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x8}})
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="300000004a00010000000000000000000a0080"], 0x30}}, 0x20040854) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r6, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}], 0x18}}], 0x2, 0x0)
preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x1, 0x0, 0x4)

2.894642184s ago: executing program 4 (id=162):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x5d1002, 0x0)
readv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2)

2.882283154s ago: executing program 4 (id=163):
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4620, 0x7, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c)
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c)
writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="50e42bdbcf1c4137d570700013a661c79dfcf2690df88b330eacdb6ca94fe49c6a52708a4dc1b078ede943998155b87ad5bdc3a4b1d4ea11fb250700188197975d3cc66e4eb5921427a8f635b785397f7a6afe3d105f8103f38a38192839bfe51c88c0070ac0fa9a8d3ecc52e3e8a69c398fff54fa19f335d9282e28541a2d7daee10274256e4acf3f9e6f3088e8359e232f2cddae2e25fbf3ed2634e6309a7c93eaff7847bab086d42bfadc359fa18d1285b8bc5337b04001cd2f046d"}], 0x1)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r1, 0x0, 0x0)
r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
setreuid(0x0, 0xee01)
syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101b00, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x1c)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_IOCTL(r6, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x7ff, 0x0, 0x3}}, 0x20)
close_range(r4, 0xffffffffffffffff, 0x0)

2.821199055s ago: executing program 4 (id=164):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x24, 0x1, 0x2, 0x7cbbda779fe004e1, 0x0, 0x0, {0x7}, [@CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000054}, 0x4000840)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)

2.819372935s ago: executing program 4 (id=165):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
io_setup(0x2adf, &(0x7f0000000180)=<r1=>0x0) (async)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/nf_conntrack_expect\x00')
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2a)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
mkdir(&(0x7f0000002200)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2145c89, 0x0) (async, rerun: 32)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async, rerun: 32)
mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x31a1802, 0x0) (async, rerun: 64)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80000, 0x0) (async, rerun: 64)
pivot_root(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='./file0/../file0\x00') (async)
fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d, 0x0, r4}, {0x7, 0x3, 0x5, 0x95d, 0xfffffffffffffffb, 0x800002, 0x40, 0x6}, {0xe, 0x5, 0xb1b}, 0x401, 0x6e6bbb, 0x0, 0x0, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@loopback, 0x3501, 0x3, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0018"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
r7 = eventfd2(0x96, 0x80800) (rerun: 64)
write$eventfd(r7, &(0x7f0000000140)=0xffffffffffffffff, 0x8) (async)
ptrace(0x8, r6)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r6, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) (async)
ptrace$getregset(0x4204, r6, 0x2, &(0x7f0000000740)={0x0}) (async, rerun: 32)
io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x7fff, r2, 0x0}]) (async, rerun: 32)
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x1) (async, rerun: 64)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (rerun: 64)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='eY=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async)
readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97) (async, rerun: 64)
syz_fuse_handle_req(r8, &(0x7f0000009680)="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", 0x2000, &(0x7f0000002540)={&(0x7f0000004200)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0x40802140, 0xe, 0x6, 0x7, 0xcdd, 0x0, 0x0, 0x80, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64)

2.786453306s ago: executing program 4 (id=166):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x2}, 0x0)
r0 = getpid()
sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="7000000019000100000000000a000080080037000000000000000000", @ANYRES32=0x0, @ANYBLOB="428184a477201acb0f24d8c531680464ff1e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3da0000000c000d"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x804)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))

2.772842196s ago: executing program 4 (id=167):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = signalfd(r0, &(0x7f0000000040)={[0x7]}, 0x8)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
r4 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0xff04, 0x0)
ioctl$TCFLSH(r3, 0x400455c8, 0x20000000008)
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x40)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000002c0)={0x0, 0x0, 0x4, "1e90d83d"}, 0x0, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}})
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = inotify_init1(0x80800)
inotify_add_watch(r8, &(0x7f0000000140)='./file0\x00', 0x2000200)
r9 = open$dir(&(0x7f0000000280)='./file0\x00', 0x480, 0x42)
close_range(r9, r1, 0x2)
rt_sigsuspend(&(0x7f0000000100)={[0x5]}, 0x8)
r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"])
close_range(r2, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4000c0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', <r11=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r11, 0x2, 0x6, 0xba, 0x80, 0x4, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x8000, 0x743, 0x10000}})

1.763193636s ago: executing program 33 (id=61):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
unshare(0x62040200)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}})
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, 0x0, 0x165342, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(r5)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
ioctl$KVM_NMI(r7, 0xae9a)
add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="9d", 0x1, 0xffffffffffffffff)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r8=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x40, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x100)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
fspick(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1)
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
lseek(r9, 0x0, 0x1)

1.654852308s ago: executing program 2 (id=169):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d80)={0x0, 0x16, 0x4, '}G\x00\x00'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x1, 0x80, 0x10, "5ef0cbbd", "37d4d92c"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0xb, 0x9, 0x7, 0x9, 0x1}}}, &(0x7f0000001800)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, &(0x7f0000001500)={0x20, 0x0, 0x4, {0xc0, 0x2}}, &(0x7f0000001540)={0x40, 0x7, 0x2, 0xff00}, &(0x7f0000001580)={0x40, 0x9, 0x1, 0xd}, &(0x7f00000015c0)={0x40, 0xb, 0x2, "a8fb"}, &(0x7f0000001600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000001640)={0x40, 0x13, 0x6, @local}, &(0x7f0000001680)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000016c0)={0x40, 0x19, 0x2, "e467"}, &(0x7f0000001700)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000001740)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000001780)={0x40, 0x1e, 0x1, 0xd7}, &(0x7f00000017c0)={0x40, 0x21, 0x1, 0x7}})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000001940)={0x3, 0x0, 0x3})
connect$unix(0xffffffffffffffff, 0x0, 0x0)

1.204150857s ago: executing program 1 (id=172):
mmap(&(0x7f00009b2000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00')
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="b882008ee8f3cf66b80500000066b9f10000000f01c10fc7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100eddfdfbaa10066b80098000066ef", 0x43}], 0x1, 0x5c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x0, 0x4ce, 0x3, 0x9dff, 0xf, "000300eb00cbe600"})
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, {0x327, 0x9, 0x0, 0x4, 0xfff, 0x0, 0x1}, {}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_crypt={0x4b, 0x2, {{'ecb(cipher_null)\x00'}, 0x18, "356eaa"}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0xffffffff, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f700000080"})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0)
r5 = syz_open_pts(r3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x4c, &(0x7f0000002900)=0x659c, 0x4)
r7 = dup3(r5, r3, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0xa)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

397.593122ms ago: executing program 5 (id=173):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x111) (async)
open(0x0, 0x108843, 0x98) (async)
umount2(&(0x7f0000000040)='./file0\x00', 0x2) (async)
r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) (async)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000140)={0x0, &(0x7f0000000200)=""/75, 0x4b})
open$dir(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x20) (async)
write(r0, &(0x7f0000000400), 0x0)

362.226343ms ago: executing program 5 (id=174):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000040)=0x8)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x100000000)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x20000023896)
close_range(r0, 0xffffffffffffffff, 0x0)

269.244405ms ago: executing program 5 (id=175):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x1, 0x0, 0xc}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
chdir(&(0x7f0000001180)='./bus\x00')
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = fsopen(&(0x7f0000000040)='fuse\x00', 0x1)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='\\:.&&#\x00', &(0x7f0000000140)='./file1\x00', 0xffffffffffffff9c)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)

265.771755ms ago: executing program 5 (id=176):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
timer_create(0x3, &(0x7f0000000140)={0x0, 0x3f, 0x2b8c46217dfebc6b}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x4, 0x1}, 0xc)
getsockname$packet(r2, 0x0, &(0x7f00000006c0))
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c)
ioctl$sock_proto_private(r1, 0x89eb, &(0x7f0000000000)="f56b1d97070f3d7ca69ac13e0c1de3c78c09a8d46731cbc31805db7ef589b9fae05acdb204c61e19e128d8183e8966577255c070f823da935233a17729119fc99972576c86be41ffcf1fa689cf318ab4f2ce57db9f91588101f0a36a2b6cc819408ff3e35d7ca50b43544fb69029dff208914f3e9e7e5f")
socket$packet(0x11, 0x2, 0x300)
r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r2, 0x0, 0xf7)
r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='cgroup.max.depth\x00', 0x2, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000004c0)=@req3={0xfffffffb, 0x100000001, 0x210000, 0x1, 0x10000a}, 0x1c)
sendfile(r6, r6, 0x0, 0x10000a006)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

236.818905ms ago: executing program 5 (id=177):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r0, &(0x7f0000000080), 0x8) (async)
ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080))
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]})

218.272945ms ago: executing program 5 (id=178):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom0\x00', 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x10000000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000140)={'xfrm0\x00', @random="0131214011ff"})
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x18, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xe2e6217cea6a1c17, 0x3)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="7a01aa26a335a297f815839f25e5500b000000000000000000"])
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="27ccd4"], 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x20, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0})
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000814, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
r7 = socket(0x10, 0x803, 0x0)
sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000040)=""/190, 0xb8}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/101, 0x31}, {&(0x7f0000002580)=""/4096, 0x1000}], 0x5}, 0x5e}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffff22cb}], 0x4, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 2 (id=179):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f00000012c0)={0x7, {{0xa, 0x4e20, 0x1, @mcast1, 0x7}}, {{0xa, 0x4e24, 0x14, @rand_addr=' \x01\x00', 0x7}}}, 0x108)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) (async)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000080)=0xfffffffe, 0x4) (async)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) (async)
nanosleep(&(0x7f0000000140)={0x10000008, 0x4000000000000002}, 0x0)
write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x603f) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x94, 0x0, &(0x7f0000000140)=[@exit_looper, @increfs_done={0x40046305, 0x3}, @increfs_done={0x40106308, 0x2}, @free_buffer, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x1}, @fd}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @exit_looper], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts.
[   24.866698][   T36] audit: type=1400 audit(1757022209.930:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   24.868134][  T281] cgroup: Unknown subsys name 'net'
[   24.889454][   T36] audit: type=1400 audit(1757022209.930:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   24.916789][   T36] audit: type=1400 audit(1757022209.960:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   24.916990][  T281] cgroup: Unknown subsys name 'devices'
[   25.025052][  T281] cgroup: Unknown subsys name 'hugetlb'
[   25.030692][  T281] cgroup: Unknown subsys name 'rlimit'
[   25.186593][   T36] audit: type=1400 audit(1757022210.250:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   25.209848][   T36] audit: type=1400 audit(1757022210.250:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   25.234676][   T36] audit: type=1400 audit(1757022210.250:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   25.281176][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   25.290154][   T36] audit: type=1400 audit(1757022210.360:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[   25.315680][   T36] audit: type=1400 audit(1757022210.360:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.351401][   T36] audit: type=1400 audit(1757022210.410:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.377039][   T36] audit: type=1400 audit(1757022210.410:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.377095][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   26.708228][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.722667][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.729893][  T288] bridge_slave_0: entered allmulticast mode
[   26.739942][  T288] bridge_slave_0: entered promiscuous mode
[   26.754145][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.761216][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.768387][  T288] bridge_slave_1: entered allmulticast mode
[   26.774717][  T288] bridge_slave_1: entered promiscuous mode
[   26.909454][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.916533][  T295] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.923671][  T295] bridge_slave_0: entered allmulticast mode
[   26.929934][  T295] bridge_slave_0: entered promiscuous mode
[   26.937432][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.944580][  T295] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.951692][  T295] bridge_slave_1: entered allmulticast mode
[   26.958115][  T295] bridge_slave_1: entered promiscuous mode
[   26.977318][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.984477][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.991765][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.998863][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.033157][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.040231][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.047431][  T293] bridge_slave_0: entered allmulticast mode
[   27.054130][  T293] bridge_slave_0: entered promiscuous mode
[   27.060711][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.067845][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.075030][  T293] bridge_slave_1: entered allmulticast mode
[   27.081364][  T293] bridge_slave_1: entered promiscuous mode
[   27.092047][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.099198][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.106413][  T294] bridge_slave_0: entered allmulticast mode
[   27.113148][  T294] bridge_slave_0: entered promiscuous mode
[   27.128469][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.135614][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.142810][  T294] bridge_slave_1: entered allmulticast mode
[   27.149125][  T294] bridge_slave_1: entered promiscuous mode
[   27.285078][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.306021][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.313127][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.366633][  T288] veth0_vlan: entered promiscuous mode
[   27.386691][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.393794][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.405737][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.412920][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.420579][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.427694][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.437415][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.444493][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.468342][  T288] veth1_macvtap: entered promiscuous mode
[   27.505755][  T294] veth0_vlan: entered promiscuous mode
[   27.515328][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.522391][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.538410][  T294] veth1_macvtap: entered promiscuous mode
[   27.545625][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.552704][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.582887][  T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   27.619908][  T293] veth0_vlan: entered promiscuous mode
[   27.637009][  T295] veth0_vlan: entered promiscuous mode
[   27.663347][  T295] veth1_macvtap: entered promiscuous mode
[   27.672476][  T293] veth1_macvtap: entered promiscuous mode
[   27.690572][  T340] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   27.742568][   T31] rust_binder: 332: removing orphan mapping 0:4120
[   27.795246][  T346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   27.826452][  T354] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   27.840640][  T354] process 'syz.2.8' launched './file1' with NULL argv: empty string added
[   27.917478][  T370] rust_binder: 14: no such ref 0
[   27.997882][  T380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   27.997946][  T380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:13
[   28.050136][  T388] =======================================================
[   28.050136][  T388] WARNING: The mand mount option has been deprecated and
[   28.050136][  T388]          and is ignored by this kernel. Remove the mand
[   28.050136][  T388]          option from the mount to silence this warning.
[   28.050136][  T388] =======================================================
[   28.092814][  T329] usb 1-1: new low-speed USB device number 2 using dummy_hcd
[   28.164458][  T401] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   28.164485][  T401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26
[   28.253871][  T329] usb 1-1: config 1 interface 0 has no altsetting 0
[   28.275038][  T329] usb 1-1: string descriptor 0 read error: -22
[   28.286259][  T329] usb 1-1: New USB device found, idVendor=0458, idProduct=0004, bcdDevice= 0.40
[   28.286525][  T408] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   28.295515][  T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.345977][  T410] netlink: 64 bytes leftover after parsing attributes in process `syz.3.26'.
[   28.452691][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   28.461539][  T415] rust_binder: Write failure EFAULT in pid:15
[   28.519117][  T417] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   28.535074][  T417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'.
[   28.602690][  T406] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   28.602767][    T9] usb 3-1: Using ep0 maxpacket: 16
[   28.616947][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   28.628123][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   28.641095][    T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   28.650379][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   28.659322][    T9] usb 3-1: config 0 descriptor??
[   28.666349][  T424] 9pnet_fd: p9_fd_create_tcp (424): problem connecting socket to 127.0.0.1
[   28.742675][  T406] usb 4-1: device descriptor read/64, error -71
[   28.872237][    T9] usbhid 3-1:0.0: can't add hid device: -71
[   28.879954][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   28.889001][    T9] usb 3-1: USB disconnect, device number 2
[   28.899274][  T434] tmpfs: Bad value for 'nr_inodes'
[   28.982697][  T406] usb 4-1: device descriptor read/64, error -71
[   28.982698][   T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   29.002310][  T446] mmap: syz.2.36 (446) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   29.016472][  T446] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37
[   29.016492][  T446] rust_binder: Error while translating object.
[   29.025386][  T446] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   29.031613][  T446] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42
[   29.069683][  T448] 9pnet_fd: Insufficient options for proto=fd
[   29.132667][   T45] usb 2-1: Using ep0 maxpacket: 16
[   29.143824][   T45] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[   29.154202][   T45] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   29.165365][   T45] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   29.175170][   T45] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   29.188093][   T45] usb 2-1: config 7 interface 0 has no altsetting 0
[   29.194928][   T45] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[   29.204480][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.235197][  T406] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   29.372687][  T406] usb 4-1: device descriptor read/64, error -71
[   29.385948][  T466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:62
[   29.612715][  T406] usb 4-1: device descriptor read/64, error -71
[   29.621668][   T45] hid (null): global environment stack underflow
[   29.635011][   T45] hid (null): report_id 1954328033 is invalid
[   29.641157][   T45] hid (null): invalid report_count 63865
[   29.653225][   T45] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.0001/input/input4
[   29.667400][   T45] kye 0003:0458:5010.0001: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0
[   29.723111][  T406] usb usb4-port1: attempt power cycle
[   29.819941][    T9] usb 2-1: USB disconnect, device number 2
[   30.062704][  T406] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   30.083876][  T406] usb 4-1: device descriptor read/8, error -71
[   30.213985][  T406] usb 4-1: device descriptor read/8, error -71
[   30.235353][  T471] rust_binder: Error while translating object.
[   30.235389][  T471] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   30.241649][  T471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65
[   30.288625][   T36] kauditd_printk_skb: 100 callbacks suppressed
[   30.288645][   T36] audit: type=1400 audit(1757022215.350:174): avc:  denied  { mounton } for  pid=480 comm="syz.2.47" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   30.345315][   T36] audit: type=1400 audit(1757022215.410:175): avc:  denied  { ioctl } for  pid=485 comm="syz.1.49" path="socket:[4012]" dev="sockfs" ino=4012 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   30.462690][  T406] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   30.483689][  T406] usb 4-1: device descriptor read/8, error -71
[   30.572791][   T45] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   30.613740][  T406] usb 4-1: device descriptor read/8, error -71
[   30.722796][  T406] usb usb4-port1: unable to enumerate USB device
[   30.723828][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   30.740219][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   30.750019][   T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   30.759171][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.768516][   T45] usb 3-1: config 0 descriptor??
[   30.774713][   T45] hub 3-1:0.0: USB hub found
[   30.792556][  T329] usbhid 1-1:1.0: can't add hid device: -71
[   30.798675][  T329] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[   30.815019][  T329] usb 1-1: USB disconnect, device number 2
[   30.824744][   T36] audit: type=1400 audit(1757022215.890:176): avc:  denied  { map } for  pid=489 comm="syz.0.50" path="socket:[4020]" dev="sockfs" ino=4020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   30.917427][  T494] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   30.919080][   T36] audit: type=1400 audit(1757022215.980:177): avc:  denied  { unlink } for  pid=493 comm="syz.0.52" name="#1" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   30.931670][  T494] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   30.969542][   T36] audit: type=1400 audit(1757022215.980:178): avc:  denied  { mount } for  pid=493 comm="syz.0.52" name="/" dev="overlay" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   30.975016][  T494] syzkaller0: create flow: hash 3075826379 index 2
[   30.997786][   T45] hub 3-1:0.0: 1 port detected
[   30.998345][   T36] audit: type=1400 audit(1757022216.060:179): avc:  denied  { connect } for  pid=493 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   31.023115][  T493] syzkaller0: delete flow: hash 3075826379 index 2
[   31.097773][   T36] audit: type=1400 audit(1757022216.160:180): avc:  denied  { append } for  pid=497 comm="syz.0.53" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   31.142673][   T36] audit: type=1400 audit(1757022216.200:181): avc:  denied  { map } for  pid=501 comm="syz.0.54" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   31.166422][  T406] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   31.174239][   T36] audit: type=1400 audit(1757022216.200:182): avc:  denied  { execute } for  pid=501 comm="syz.0.54" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   31.215457][   T45] hub 3-1:0.0: hub_hub_status failed (err = -71)
[   31.218578][   T36] audit: type=1400 audit(1757022216.280:183): avc:  denied  { view } for  pid=483 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   31.221877][   T45] hub 3-1:0.0: config failed, can't get hub status (err -71)
[   31.225028][  T484] overlay: Unknown parameter 'appraise'
[   31.254900][   T45] usbhid 3-1:0.0: can't add hid device: -71
[   31.260899][   T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   31.283140][   T45] usb 3-1: USB disconnect, device number 3
[   31.343698][  T406] usb 2-1: config 1 interface 0 has no altsetting 0
[   31.354020][  T406] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   31.375900][  T406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.389079][  T406] usb 2-1: Product: syz
[   31.393663][  T406] usb 2-1: Manufacturer: syz
[   31.400295][  T406] usb 2-1: SerialNumber: syz
[   31.538789][  T330] bridge_slave_1: left allmulticast mode
[   31.545909][  T330] bridge_slave_1: left promiscuous mode
[   31.551597][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.559637][  T330] bridge_slave_0: left allmulticast mode
[   31.569030][  T330] bridge_slave_0: left promiscuous mode
[   31.583810][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.714189][  T330] veth1_macvtap: left promiscuous mode
[   31.719807][  T330] veth0_vlan: left promiscuous mode
[   31.947505][  T516] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.954873][  T516] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.962107][  T516] bridge_slave_0: entered allmulticast mode
[   31.979255][  T516] bridge_slave_0: entered promiscuous mode
[   31.989607][  T516] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.000910][  T521] kvm: emulating exchange as write
[   32.002660][  T516] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.022719][  T516] bridge_slave_1: entered allmulticast mode
[   32.037113][  T516] bridge_slave_1: entered promiscuous mode
[   32.163924][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.171018][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.180784][  T330] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.187885][  T330] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.223038][  T516] veth0_vlan: entered promiscuous mode
[   32.235817][  T516] veth1_macvtap: entered promiscuous mode
[   32.322678][   T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   32.417759][  T542] rust_binder: 4: no such ref 0
[   32.474611][   T45] usb 3-1: config 7 has an invalid interface number: 43 but max is 0
[   32.482881][   T45] usb 3-1: config 7 has no interface number 0
[   32.489058][   T45] usb 3-1: config 7 interface 43 has no altsetting 0
[   32.497693][   T45] usb 3-1: New USB device found, idVendor=8e38, idProduct=74d6, bcdDevice=d6.6c
[   32.506903][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.515465][   T45] usb 3-1: Product: syz
[   32.519694][   T45] usb 3-1: Manufacturer: syz
[   32.524493][   T45] usb 3-1: SerialNumber: syz
[   32.733461][  T530] __vm_enough_memory: pid: 530, comm: syz.2.63, bytes: 18014402804453376 not enough memory for the allocation
[   32.748883][   T45] usb-storage 3-1:7.43: USB Mass Storage device detected
[   32.794590][   T45] usb 3-1: USB disconnect, device number 4
[   33.262376][  T550] binder: Bad value for 'defcontext'
[   33.502660][  T329] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   33.642689][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   33.653902][  T329] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 64
[   33.663900][  T329] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0
[   33.673672][  T329] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 0
[   33.683511][  T329] usb 3-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   33.696549][  T329] usb 3-1: config 1 interface 0 has no altsetting 0
[   33.704695][  T329] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   33.713981][  T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.722093][  T329] usb 3-1: Product: syz
[   33.726419][  T329] usb 3-1: Manufacturer: syz
[   33.731115][  T329] usb 3-1: SerialNumber: syz
[   33.737060][  T551] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   33.793924][   T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   33.805605][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 47, changing to 9
[   33.816720][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 58219, setting to 1024
[   33.827963][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   33.840910][   T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   33.850035][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.858926][   T10] usb 5-1: config 0 descriptor??
[   33.895578][  T406] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[   33.918069][  T406] usb 2-1: USB disconnect, device number 3
[   33.925113][  T406] usblp0: removed
[   33.946793][  T329] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[   33.956777][  T329] usb 3-1: USB disconnect, device number 5
[   34.212755][  T406] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   34.266476][   T10] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max
[   34.276732][   T10] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[   34.286023][   T10] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   34.362690][  T406] usb 2-1: Using ep0 maxpacket: 8
[   34.369084][  T406] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[   34.378170][  T406] usb 2-1: config 0 has no interface number 0
[   34.384306][  T406] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   34.395150][  T406] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   34.406764][  T406] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   34.417790][  T406] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   34.430951][  T406] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   34.440047][  T406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.449087][  T406] usb 2-1: config 0 descriptor??
[   34.660936][  T406] usb 2-1: USB disconnect, device number 4
[   35.295509][   T36] kauditd_printk_skb: 27 callbacks suppressed
[   35.295528][   T36] audit: type=1400 audit(1757022220.360:211): avc:  denied  { write } for  pid=601 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   35.322741][   T36] audit: type=1400 audit(1757022220.360:212): avc:  denied  { nlmsg_write } for  pid=601 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   36.080323][  T620] netlink: 104 bytes leftover after parsing attributes in process `syz.4.94'.
[   36.080345][   T36] audit: type=1400 audit(1757022221.140:213): avc:  denied  { nlmsg_read } for  pid=619 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   36.262728][  T329] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   36.282099][   T36] audit: type=1400 audit(1757022221.340:214): avc:  denied  { connect } for  pid=633 comm="syz.1.100" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   36.423703][  T329] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   36.433564][  T329] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   36.443517][  T329] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   36.484433][  T329] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   36.493689][  T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   36.519293][  T329] usb 3-1: Product: syz
[   36.526193][  T329] usb 3-1: Manufacturer: syz
[   36.530836][  T329] usb 3-1: SerialNumber: syz
[   36.602662][   T45] usb 5-1: reset high-speed USB device number 2 using dummy_hcd
[   36.753084][   T45] usb 5-1: device firmware changed
[   36.756148][  T329] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   36.758589][  T468] usb 5-1: USB disconnect, device number 2
[   36.902718][  T468] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   36.957660][   T36] audit: type=1400 audit(1757022222.020:215): avc:  denied  { read write } for  pid=616 comm="syz.2.93" name="lp0" dev="devtmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   36.982178][   T45] usb 3-1: USB disconnect, device number 6
[   36.990357][   T45] usblp0: removed
[   36.996872][   T36] audit: type=1400 audit(1757022222.020:216): avc:  denied  { open } for  pid=616 comm="syz.2.93" path="/dev/usb/lp0" dev="devtmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   37.063861][  T468] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[   37.075538][  T468] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   37.086823][  T468] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   37.101387][  T468] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   37.110741][  T468] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.123811][  T468] usb 5-1: invalid MIDI out EP 0
[   37.133130][  T468] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[   37.151877][  T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   38.410712][   T36] audit: type=1400 audit(1757022223.470:217): avc:  denied  { unmount } for  pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   38.670938][   T36] audit: type=1400 audit(1757022223.730:218): avc:  denied  { map } for  pid=679 comm="syz.2.119" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   38.732701][   T36] audit: type=1400 audit(1757022223.760:219): avc:  denied  { read write } for  pid=679 comm="syz.2.119" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   38.792660][   T36] audit: type=1400 audit(1757022223.760:220): avc:  denied  { write } for  pid=679 comm="syz.2.119" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   39.010436][  T692] loop2: detected capacity change from 0 to 7
[   39.214604][   T45] usb 5-1: USB disconnect, device number 3
[   39.318559][  T329] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   39.482635][  T329] usb 3-1: Using ep0 maxpacket: 32
[   39.498871][  T329] usb 3-1: config 0 has no interfaces?
[   39.513978][  T329] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[   39.532632][  T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.550721][  T329] usb 3-1: Product: syz
[   39.562644][  T329] usb 3-1: Manufacturer: syz
[   39.572655][  T329] usb 3-1: SerialNumber: syz
[   39.583282][  T329] usb 3-1: config 0 descriptor??
[   39.800238][   T45] usb 3-1: USB disconnect, device number 7
[   40.457745][   T36] kauditd_printk_skb: 4 callbacks suppressed
[   40.457763][   T36] audit: type=1400 audit(1757022225.520:225): avc:  denied  { read write } for  pid=726 comm="syz.2.139" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   40.513868][  T329] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   40.549433][  T329] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   40.569141][   T36] audit: type=1400 audit(1757022225.520:226): avc:  denied  { open } for  pid=726 comm="syz.2.139" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   40.982854][  T737] binder: Unknown parameter 'st!ts'global'
[   41.037439][   T36] audit: type=1400 audit(1757022226.100:227): avc:  denied  { setopt } for  pid=738 comm="syz.2.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   41.077286][   T36] audit: type=1400 audit(1757022226.100:228): avc:  denied  { bind } for  pid=738 comm="syz.2.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   41.113710][  T745] netlink: 84 bytes leftover after parsing attributes in process `syz.4.146'.
[   41.123280][  T743] /dev/rnullb0: Can't open blockdev
[   41.132650][   T36] audit: type=1400 audit(1757022226.100:229): avc:  denied  { listen } for  pid=738 comm="syz.2.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   41.171259][  T747] /dev/rnullb0: Can't open blockdev
[   41.177230][  T747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'.
[   41.186397][  T747] erspan0: entered promiscuous mode
[   41.194279][   T36] audit: type=1400 audit(1757022226.260:230): avc:  denied  { create } for  pid=746 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   41.223956][  T747] rust_binder: Error while translating object.
[   41.223993][  T747] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   41.230224][  T747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:176
[   41.362673][   T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   41.502669][  T468] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   41.522652][   T45] usb 5-1: Using ep0 maxpacket: 8
[   41.529254][   T45] usb 5-1: unable to get BOS descriptor or descriptor too short
[   41.537964][   T45] usb 5-1: config 0 has an invalid interface number: 88 but max is 0
[   41.546105][   T45] usb 5-1: config 0 has no interface number 0
[   41.552338][   T45] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   41.563733][   T45] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[   41.574058][   T45] usb 5-1: config 0 interface 88 has no altsetting 0
[   41.583162][   T45] usb 5-1: string descriptor 0 read error: -22
[   41.589480][   T45] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   41.598701][   T45] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   41.611643][   T45] usb 5-1: config 0 descriptor??
[   41.622838][   T45] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input5
[   41.651705][  T336] udevd[336]: Error opening device "/dev/input/event3": Input/output error
[   41.660503][  T336] udevd[336]: Unable to EVIOCGABS device "/dev/input/event3"
[   41.668434][  T336] udevd[336]: Unable to EVIOCGABS device "/dev/input/event3"
[   41.676436][  T468] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   41.688280][  T468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   41.703108][  T468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   41.713115][  T468] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   41.726215][  T468] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   41.735436][  T468] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.748250][  T468] usb 3-1: config 0 descriptor??
[   41.819781][   T36] audit: type=1400 audit(1757022226.880:231): avc:  denied  { read } for  pid=744 comm="syz.4.146" name="event3" dev="devtmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   41.845844][   T45] usb 5-1: USB disconnect, device number 4
[   42.159655][  T468] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max
[   42.170681][  T468] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[   42.183304][  T468] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   42.426064][  T752] 2N: renamed from vcan0 (while UP)
[   42.440394][   T36] audit: type=1400 audit(1757022227.500:232): avc:  denied  { ioctl } for  pid=751 comm="syz.4.149" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   42.787339][   T36] audit: type=1400 audit(1757022227.850:233): avc:  denied  { read write } for  pid=755 comm="syz.1.150" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   42.810358][   T36] audit: type=1400 audit(1757022227.850:234): avc:  denied  { open } for  pid=755 comm="syz.1.150" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   42.885204][  T762] rust_binder: inc_ref_done called when no active inc_refs
[   43.332678][  T329] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   43.502702][  T329] usb 2-1: Using ep0 maxpacket: 16
[   43.516620][  T329] usb 2-1: config 43 has an invalid interface number: 157 but max is 1
[   43.525447][  T329] usb 2-1: config 43 has an invalid interface number: 90 but max is 1
[   43.534004][  T329] usb 2-1: config 43 contains an unexpected descriptor of type 0x2, skipping
[   43.543209][  T329] usb 2-1: config 43 has no interface number 0
[   43.549411][  T329] usb 2-1: config 43 has no interface number 1
[   43.555887][  T329] usb 2-1: config 43 interface 157 altsetting 4 endpoint 0x9 has an invalid bInterval 127, changing to 7
[   43.567249][  T329] usb 2-1: config 43 interface 157 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[   43.578365][  T329] usb 2-1: config 43 interface 157 altsetting 4 endpoint 0xC has invalid maxpacket 1024, setting to 64
[   43.589581][  T329] usb 2-1: config 43 interface 90 altsetting 14 has an invalid descriptor for endpoint zero, skipping
[   43.600746][  T329] usb 2-1: config 43 interface 90 altsetting 14 has a duplicate endpoint with address 0x7, skipping
[   43.611770][  T329] usb 2-1: config 43 interface 90 altsetting 14 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[   43.623045][  T329] usb 2-1: config 43 interface 90 altsetting 14 has a duplicate endpoint with address 0x7, skipping
[   43.634014][  T329] usb 2-1: config 43 interface 157 has no altsetting 0
[   43.640918][  T329] usb 2-1: config 43 interface 90 has no altsetting 0
[   43.649676][  T329] usb 2-1: New USB device found, idVendor=1266, idProduct=1004, bcdDevice=aa.e7
[   43.658920][  T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.667140][  T329] usb 2-1: Product: Ы
[   43.671337][  T329] usb 2-1: Manufacturer: ᛊ꣭꺇鳐䉄ㆹ繰⊽屼⍾럾ﰊꦿ쫇̭꽁琏穕ጝ釺죾ꎶ䉖紐恲圝丙ꎞ뗎嘀輣蔼ࠬﳠ〈ᬘﯸඓ砓褻觤삏ث슓А뇤볏悭೒卙仡瀁말ꦠ
[   43.691268][  T329] usb 2-1: SerialNumber: 䁔訮ӆ榎鶧騩嗟㶫薳戦涝娇夞ࣥ텝鐡汑볯︮ṹ媅韗圯腁뻚۠㷪貤ꋿ㑑㧞翠부꣥잮膭裢ﷺ㹈쵗຤篌쇪溜鶒爮뭖璖랳뎚⸬
[   43.719773][  T770] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   44.122686][   T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   44.274054][   T45] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   44.283271][   T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.292171][   T45] usb 5-1: config 0 descriptor??
[   44.342674][  T468] usb 3-1: reset high-speed USB device number 8 using dummy_hcd
[   44.446462][  T329] usb 2-1: USB disconnect, device number 5
[   44.482670][  T468] usb 3-1: device descriptor read/64, error -71
[   44.501078][   T45] usb 5-1: Cannot read MAC address
[   44.506449][   T45] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   44.518881][   T45] usb 5-1: USB disconnect, device number 5
[   44.722785][  T468] usb 3-1: device descriptor read/64, error -71
[   44.742674][  T329] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   44.872728][  T329] usb 2-1: device descriptor read/64, error -71
[   44.892697][   T45] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   44.962732][  T468] usb 3-1: reset high-speed USB device number 8 using dummy_hcd
[   45.042659][   T45] usb 5-1: Using ep0 maxpacket: 16
[   45.050312][   T45] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[   45.059495][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.067540][   T45] usb 5-1: Product: syz
[   45.071711][   T45] usb 5-1: Manufacturer: syz
[   45.077041][   T45] usb 5-1: SerialNumber: syz
[   45.082884][   T45] usb 5-1: config 0 descriptor??
[   45.088940][   T45] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[   45.096935][   T45] usb 5-1: Detected FT232H
[   45.101433][  T468] usb 3-1: device descriptor read/64, error -71
[   45.112707][  T329] usb 2-1: device descriptor read/64, error -71
[   45.289043][   T45] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   45.296082][   T45] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   45.303219][   T45] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[   45.310659][   T45] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   45.320314][   T45] usb 5-1: USB disconnect, device number 6
[   45.330589][   T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   45.340393][   T45] ftdi_sio 5-1:0.0: device disconnected
[   45.346009][  T468] usb 3-1: device descriptor read/64, error -71
[   45.352661][  T329] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   45.482665][  T329] usb 2-1: device descriptor read/64, error -71
[   45.582730][  T468] usb 3-1: reset high-speed USB device number 8 using dummy_hcd
[   45.603768][  T468] usb 3-1: device descriptor read/8, error -71
[   45.722681][  T329] usb 2-1: device descriptor read/64, error -71
[   45.734019][  T468] usb 3-1: device descriptor read/8, error -71
[   45.832804][  T329] usb usb2-port1: attempt power cycle
[   45.840650][  T812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=812 comm=syz.4.164
[   45.992728][  T468] usb 3-1: reset high-speed USB device number 8 using dummy_hcd
[   46.013861][  T468] usb 3-1: device descriptor read/8, error -71
[   46.143821][  T468] usb 3-1: device descriptor read/8, error -71
[   46.172719][   T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   46.172720][  T329] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   46.203859][  T329] usb 2-1: device descriptor read/8, error -71
[   46.252913][   T10] usb 3-1: USB disconnect, device number 8
[   46.332676][   T45] usb 5-1: Using ep0 maxpacket: 32
[   46.333835][  T329] usb 2-1: device descriptor read/8, error -71
[   46.338964][   T45] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[   46.352210][   T45] usb 5-1: config 0 has no interface number 0
[   46.358694][   T45] usb 5-1: config 0 interface 184 has no altsetting 0
[   46.367125][   T45] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   46.376243][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.382709][   T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   46.384361][   T45] usb 5-1: Product: syz
[   46.396108][   T45] usb 5-1: Manufacturer: syz
[   46.400707][   T45] usb 5-1: SerialNumber: syz
[   46.407140][   T45] usb 5-1: config 0 descriptor??
[   46.413475][   T45] smsc75xx v1.0.0
[   46.522731][   T10] usb 3-1: device descriptor read/64, error -71
[   46.582737][  T329] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   46.603750][  T329] usb 2-1: device descriptor read/8, error -71
[   46.733894][  T329] usb 2-1: device descriptor read/8, error -71
[   46.762667][   T10] usb 3-1: device descriptor read/64, error -71
[   46.842817][  T329] usb usb2-port1: unable to enumerate USB device
[   47.002700][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   47.047301][  T824] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.054462][  T824] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.061629][  T824] bridge_slave_0: entered allmulticast mode
[   47.068110][  T824] bridge_slave_0: entered promiscuous mode
[   47.074681][  T824] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.081755][  T824] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.088856][  T824] bridge_slave_1: entered allmulticast mode
[   47.095189][  T824] bridge_slave_1: entered promiscuous mode
[   47.151230][  T824] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.158311][  T824] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.165637][  T824] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.172714][  T824] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.197433][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.205041][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.215438][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.222508][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.232234][  T330] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.239322][  T330] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.271050][  T824] veth0_vlan: entered promiscuous mode
[   47.283784][  T824] veth1_macvtap: entered promiscuous mode
[   47.305343][   T36] kauditd_printk_skb: 22 callbacks suppressed
[   47.305361][   T36] audit: type=1400 audit(1757022232.370:257): avc:  denied  { mounton } for  pid=824 comm="syz-executor" path="/root/syzkaller.VGwVbO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   47.342788][   T10] usb usb3-port1: attempt power cycle
[   47.416141][   T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[   47.435690][  T842] fuse: Unknown parameter 'fl'
[   47.456356][  T845] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[   47.470389][  T845] rust_binder: Write failure EINVAL in pid:10
[   47.692813][   T10] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[   47.724262][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   47.735389][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   47.745683][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   47.754853][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.763725][   T10] usb 3-1: config 0 descriptor??
[   47.769724][   T10] hub 3-1:0.0: USB hub found
[   47.872969][  T429] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   47.970571][   T10] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[   48.022656][  T429] usb 2-1: Using ep0 maxpacket: 16
[   48.029110][  T429] usb 2-1: config 0 has no interfaces?
[   48.034713][  T429] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   48.043866][  T429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.053018][  T429] usb 2-1: config 0 descriptor??
[   48.306708][   T36] audit: type=1400 audit(1757022233.370:258): avc:  denied  { write } for  pid=855 comm="syz.5.173" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   48.344704][   T10] usbhid 3-1:0.0: can't add hid device: -71
[   48.350933][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   48.376248][   T10] usb 3-1: USB disconnect, device number 11
[   48.405474][   T36] audit: type=1400 audit(1757022233.470:259): avc:  denied  { bind } for  pid=864 comm="syz.5.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   48.426560][   T36] audit: type=1400 audit(1757022233.490:260): avc:  denied  { ioctl } for  pid=864 comm="syz.5.176" path="socket:[7309]" dev="sockfs" ino=7309 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   48.482682][  T870] !@�: renamed from xfrm0 (while UP)
[   48.707607][   T36] audit: type=1400 audit(1757022233.770:261): avc:  denied  { load_policy } for  pid=871 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   48.707888][  T872] ------------[ cut here ]------------
[   48.733065][  T873] rust_binder: 187: no such ref 3
[   48.733341][  T872] WARNING: CPU: 0 PID: 872 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0
[   48.738458][  T873] rust_binder: Write failure EINVAL in pid:187
[   48.747658][  T872] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   48.747693][  T872] CPU: 0 UID: 0 PID: 872 Comm: syz.2.179 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1
[   48.762681][   T36] audit: type=1400 audit(1757022233.820:262): avc:  denied  { write } for  pid=281 comm="syz-executor" path="pipe:[1313]" dev="pipefs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   48.769306][  T872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   48.769335][  T872] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0
[   48.808798][  T872] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 59 41 ee 05 00 0f 85 be 00 00 00 c6 05 4c 41 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24
[   48.828501][  T872] RSP: 0018:ffffc9000b937580 EFLAGS: 00010246
[   48.834914][  T872] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000
[   48.842969][  T872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000b937638
[   48.850971][  T872] RBP: ffffc9000b9376c0 R08: ffffc9000b937637 R09: 0000000000000000
[   48.859021][  T872] R10: ffffc9000b937620 R11: fffff52001726ec7 R12: ffffc9000b9375c0
[   48.867128][  T872] R13: dffffc0000000000 R14: 1ffff92001726eb4 R15: 0000000000000000
[   48.875381][  T872] FS:  00007fec5a7566c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   48.884479][  T872] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   48.891098][  T872] CR2: 0000200000006000 CR3: 0000000113aba000 CR4: 00000000003526b0
[   48.899142][  T872] Call Trace:
[   48.902441][  T872]  <TASK>
[   48.905430][  T872]  ? vfs_write+0x3c0/0xe80
[   48.909870][  T872]  ? ksys_write+0x141/0x250
[   48.914483][  T872]  ? x64_sys_call+0x271c/0x2ee0
[   48.919370][  T872]  ? __cfi___alloc_pages_noprof+0x10/0x10
[   48.925142][  T872]  ? hashtab_init+0xdb/0x1f0
[   48.929753][  T872]  ___kmalloc_large_node+0xb5/0x250
[   48.935025][  T872]  ? hashtab_init+0xdb/0x1f0
[   48.939640][  T872]  __kmalloc_large_node_noprof+0x1e/0xe0
[   48.945353][  T872]  ? hashtab_init+0xdb/0x1f0
[   48.949970][  T872]  __kmalloc_noprof+0x26d/0x450
[   48.954867][  T872]  hashtab_init+0xdb/0x1f0
[   48.959304][  T872]  ? common_read+0x16d/0x480
[   48.963955][  T872]  symtab_init+0x44/0x70
[   48.968224][  T872]  common_read+0x1de/0x480
[   48.972689][  T872]  ? __cfi_common_read+0x10/0x10
[   48.977655][  T872]  ? hashtab_init+0x105/0x1f0
[   48.982345][  T872]  policydb_read+0xaab/0x28c0
[   48.987191][  T872]  ? kasan_save_alloc_info+0x40/0x50
[   48.992500][  T872]  ? __cfi_policydb_read+0x10/0x10
[   48.997697][  T872]  ? security_load_policy+0x128/0x12f0
[   49.003230][  T872]  security_load_policy+0x162/0x12f0
[   49.008544][  T872]  ? irqentry_exit+0x4a/0x60
[   49.013205][  T872]  ? exc_page_fault+0x66/0xc0
[   49.017926][  T872]  ? asm_exc_page_fault+0x2b/0x30
[   49.023014][  T872]  ? __cfi_security_load_policy+0x10/0x10
[   49.028770][  T872]  ? rep_movs_alternative+0x4a/0xa0
[   49.034047][  T872]  sel_write_load+0x298/0x5e0
[   49.038767][  T872]  ? futex_wait+0x29a/0x7a0
[   49.043338][  T872]  ? __cfi_sel_write_load+0x10/0x10
[   49.048570][  T872]  ? __cfi_futex_wait+0x10/0x10
[   49.053496][  T872]  ? bpf_lsm_file_permission+0xd/0x20
[   49.058936][  T872]  ? __cfi_sel_write_load+0x10/0x10
[   49.064205][  T872]  vfs_write+0x3c0/0xe80
[   49.068479][  T872]  ? __cfi_vfs_write+0x10/0x10
[   49.073347][  T872]  ? __kasan_check_write+0x18/0x20
[   49.078501][  T872]  ? mutex_lock+0x92/0x1c0
[   49.082974][  T872]  ? __cfi_mutex_lock+0x10/0x10
[   49.087863][  T872]  ? __fget_files+0x2c5/0x340
[   49.092551][  T872]  ksys_write+0x141/0x250
[   49.096950][  T872]  ? xfd_validate_state+0x68/0x150
[   49.102136][  T872]  ? __cfi_ksys_write+0x10/0x10
[   49.107062][  T872]  ? __kasan_check_write+0x18/0x20
[   49.112208][  T872]  ? fpregs_restore_userregs+0x11d/0x260
[   49.117941][  T872]  __x64_sys_write+0x7f/0x90
[   49.122553][  T872]  x64_sys_call+0x271c/0x2ee0
[   49.127327][  T872]  do_syscall_64+0x58/0xf0
[   49.131777][  T872]  ? clear_bhb_loop+0x50/0xa0
[   49.136509][  T872]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   49.142425][  T872] RIP: 0033:0x7fec5998ebe9
[   49.146934][  T872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   49.166644][  T872] RSP: 002b:00007fec5a756038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   49.175121][  T872] RAX: ffffffffffffffda RBX: 00007fec59bc5fa0 RCX: 00007fec5998ebe9
[   49.183151][  T872] RDX: 000000000000603f RSI: 0000200000000000 RDI: 0000000000000005
[   49.191148][  T872] RBP: 00007fec59a11e19 R08: 0000000000000000 R09: 0000000000000000
[   49.199153][  T872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   49.207192][  T872] R13: 00007fec59bc6038 R14: 00007fec59bc5fa0 R15: 00007ffff896af88
[   49.215224][  T872]  </TASK>
[   49.218263][  T872] ---[ end trace 0000000000000000 ]---
[   49.223920][  T872] SELinux: failed to load policy
[   49.288002][  T330] bridge_slave_1: left allmulticast mode
[   49.312643][  T330] bridge_slave_1: left promiscuous mode
[   49.318408][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.328406][  T330] bridge_slave_0: left allmulticast mode
[   49.334577][  T330] bridge_slave_0: left promiscuous mode
[   49.340242][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.534633][  T330] veth1_macvtap: left promiscuous mode
[   49.540179][  T330] veth0_vlan: left promiscuous mode
[   49.575635][   T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   49.575834][  T429] usb 2-1: USB disconnect, device number 10
[   49.603175][   T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   49.615600][   T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   49.625956][   T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   49.635575][   T45] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[   49.651501][   T45] usb 5-1: USB disconnect, device number 7
[   49.834318][  T330] bridge_slave_1: left allmulticast mode
[   49.839990][  T330] bridge_slave_1: left promiscuous mode
[   49.845706][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.853529][  T330] bridge_slave_0: left allmulticast mode
[   49.859181][  T330] bridge_slave_0: left promiscuous mode
[   49.864942][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.872581][  T330] bridge_slave_1: left allmulticast mode
[   49.878330][  T330] bridge_slave_1: left promiscuous mode
[   49.884065][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.891542][  T330] bridge_slave_0: left allmulticast mode
[   49.897315][  T330] bridge_slave_0: left promiscuous mode
[   49.902949][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.910579][  T330] bridge_slave_1: left allmulticast mode
[   49.916296][  T330] bridge_slave_1: left promiscuous mode
[   49.921902][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.929530][  T330] bridge_slave_0: left allmulticast mode
[   49.935214][  T330] bridge_slave_0: left promiscuous mode
[   49.940826][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.138825][  T330] veth1_macvtap: left promiscuous mode
[   50.144433][  T330] veth0_vlan: left promiscuous mode
[   50.150007][  T330] veth1_macvtap: left promiscuous mode
[   50.155608][  T330] veth0_vlan: left promiscuous mode
[   50.161197][  T330] veth1_macvtap: left promiscuous mode
[   50.166753][  T330] veth0_vlan: left promiscuous mode