last executing test programs:

24m35.650996264s ago: executing program 32 (id=322):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4048c0, 0x0) (async)
syz_usb_connect$uac1(0x50884af727a5ac96, 0x87, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x71, 0x80, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0xba, 0x1, 'T^X'}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x0, 0x449b, 0x8, 'KT'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xe1, 0x7, 0xec, {0x7, 0x25, 0x1, 0x0, 0x7f, 0xe76e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x0, 0x40, {0x7, 0x25, 0x1, 0x0, 0x5, 0xe9}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x8, 0x4, 0x0, 0x10, 0x40}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x8, 0x1, 0x81}]}, 0x3, [{0x2e, &(0x7f0000000280)=ANY=[@ANYBLOB="2e03081746e6a2662fbc64a84ea96b1a7ec24d34ac5e9e0d614bb75132d3cd04d2ea5b3de2fb9e795cbd3e23021c"]}, {0x5, &(0x7f00000002c0)=@string={0x5, 0x3, "d0bde0"}}, {0x1f, &(0x7f0000000400)=@string={0x1f, 0x3, "fd0638036d4ddf09006611f5a23c5886439916134c9e4ed535251f7f5d"}}]})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r3, 0x0) (async)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

24m33.099472534s ago: executing program 33 (id=514):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x151042, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) (async)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000006200)={0x2020, 0x0, <r3=>0x0}, 0xcde)
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x4)
r4 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="faffffbf132eaeb3899666bd990156c5460004"], 0x0)
syz_usb_control_io(r4, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000280)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x0, 0x4, 0x0, "687d91e3", "532baf1c"}}, 0x0}, 0x0)
llistxattr(0x0, 0x0, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000f1000040"]) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62)
syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f0000000280)='cpuset.sched_load_balance\x00', 0x2, 0x0)
pread64(r9, &(0x7f0000000780)=""/131, 0x83, 0x302a4edd)
syz_fuse_handle_req(r2, &(0x7f000000a200)="c1fd43b601662701272af37a7deda072caa09faa11b0a4ef2825e87f09fb6bc3dfd84ddd853b18203bbf08b1af6066c78b4714a789a8f3605f5920e7afc5b0a04271cebce72a797abd5b9e4a44fdcc150e6ef0e8c3d4360e74275818df26243f28cac3d84e264fd0c77d4bccbc466e7244b247d9dcee026df89aefc958d84a55d4d6922d96ce0349fe28efd6b83d15b7b08143a721c4a677b72362a49eeb15ec5b5f8569bad585e30a62ab149e7e4c7f49af9560fd52ea5730135dc3ea3f6a9a3ae6286e99e1520a43b8813ca6aad1adbb30b2459f90699e2ba3a6335ddcace3737ed8f5f21e027ac2b224389bf0c8c005ac8d8c3ae188679d34da0a2c20a910487d3c91b18770fa5ee483a3f09b882960f12e7d2eb9015895ce80b37f74a305a50deb146b1c3430f31d28e6f827b9c7070bc880d251ddb09e0e70a0512ed2600256332c43a5deaecb01f089333fc3b6721f6ed5b41f9971b7c63f57b5afa8042f5beb1ac1274676dc5406b5828247123bb7be795baee59d779bbde227c90d0a5d863936d434f2ce7a45f9b650600f32827b92e2d828915f0411f765ed82dd012561ed29b09950b96f8e490f1448dbd5e45bdc92a2a36aa67e5e9396b6376f82aa6915eac4144a102de786563e4482f0917698bc70776f8c7aad3346e18ee295af54f3c1658f9b124116a2fdac79353b095cf667dd941c3cba141b3ac8982eed42e7db649c9d49a59378216bf4323ff4c2f2992994d4144b74866a2426e19a2dc8dbf4643f97a214fc9c448512316d76c4116c3ae600dfb98cf85472da661745b638438dbf15d8dd87a8ba35205a65ba5bf79cf941454f8c788dc2eeccea412add734798c82e9c86122a91dff778edcd309c05fdca66176e9bc4d410b0ee4627eb889443b574ce205c7f4d6d428e909952712ec3dfc89552279b2da87b010051a451377a0c51a34ebba25c3b62ba98eb6f1549b0fee6a7c5e0c7a72835388803a0a8342bb9f2733224c92a50dd25a9b335f243f2d8c68142aa1db1de2f899a56c623a32f8a74c16db56983eb83f6469316f2fc14860c075236a3ba40e8c265909b8fc6b03c6378269f6629bab81418789cd748d8b786f47ab8f13b0caa5ecd79dbea61330be6de5804f5c211cef78f555e7b2093f4a836cdb8a2cfa261be14e0f59d075f58e97ba16cb130f062a2261df244c57d6f477d761262b2e755c96bad3898894e80b23fae71fc31b2895513a11b0cf07551ca87325592dd10549b7d92da1cb07119fe970b8cc3aacc386ab64d32b308679593256d2fcd1f9e9b15ee93ef859e7268be776053182460e83fb873711226ec9aa5c35b15fbfa12ea0abfc7465b300bd8445c831ae77d2aab7d4bc3ba5f218fda9e90eacde1ac5119eb30073a6f291727cb94fc87a3d3013f3ebb1cd259067c571bd3c57eacce716e61f86bf4041bacadd6c676e17fb3cf89c4984aec78216854a60af68533fcdff12897c3e1b2c10cec019722623f477a512c4e5eef74a6d1ab7a735905373ca3a0b18c3eaa523c86238fba77e45aa07c1b96fa1e3ceb04e5f4742536b687ebf989918f6805cda9611ab9ed10ee33cda71a95be2da0d2c21d2295fdb334dc2057942382dc7d0f70300df3df84cf9a18f042c11243a347569771f9b82404e13684324fb06d867641c87d6d70ad15e90240f901d04a8b8c7fdfb8b84aefee1606f14a2a6995e6b8aaee1b372cd586a6daf28ad7d8ef644c58fa72f0b2f847eef72e18f1a4374c4fa3d604a9bfec6a1a4fefdfaa848279693208dfbc1dbb97b44c4f034090606e0ad312cdfb6a8f68dae7312b064c68813eb41992559ca63d88a8e90711c838f220a4da5bc7d82ec0af83da059bdccdb524a59ad26e43413f131e7703eb82158293a331456ce728c28923bf9ae644a331a667c2932ae1f11a9f9b893f802796ad029c40496c9bc49cdf41a40da1092b404da660e80f33a6012a407805e70f9a180105cd0401ed01a9f6edef4e2479e1579ea365d843c197279e3c79ae56a107dfaba6af80ed9a24d535d19827596ca2b14bf4b110fae4820fc8d0570a64ae08e315da0091f766bceb1fc990465ecb84a2d72efcb9a269816863b72f8d0869b20c14bd72f909fc3ebbf2ba2f98ce3fd7eb54b738692916eeb98ab9ea04ce3e740817dc9ac6561c71d3bc15358ebbb3027294f66eb890577f8a63ecd23beacd93c3b1498d5eefd8b68ebab3536653d5839713b07f79ebb2a6106c009cc535a2173cde3ccc65676bcae513145db5bf08546e8810fb4d193266d491fb9121935138a74c52149959a0c270cd6e244dd7cb140fcf6bf0e7536220f798bf32cda564ebde025a92617f3195e549a491a45446ff0ebfd3b047775af339e59a8da0db6223339325c6f493baa5f2c71b5710a975def3e3919a24a52351acc12e5a2ab6c171705bad0e6afd0ad2b6dd6feaedc9924fdba533fc958fab9a980b775eb4c93a499413073cf09826381b8054f9f09f4a0dfa63ac2f6cb22d001ff277ec7f493bc54d2d1d34a6dad62cd7bccab2ecd419c90087f6945311460b87daad605ff8519aba1d8311a5e565dd26655577aa13da31e01cacbb7e10e720a486e9cc450b8a21d23aeab42838d81dc05f5be0474ab81b806fe71b888323037f3262179e451f765e419bddf7b7a99b40bcc226986efbd3765b66e56a3500de4b18b676361510bd35b3a9c6b8c08222cf7a73c4cda972190f839c2d01a4c171a803c0a77d2769c892b2f0191d2fa01d7d5ca53573e47e93ca9b56b8f0d684d5458d505ad8383f22e19024da06bf6abf30ed663cfb33e202be17bb951e9ea30cfcf65675d2fc64aa51e07237fe8391549185fac5822daa92e73778e080b1304dd757f9035092a729b9a0122d1c07d60336f18a9e46ebeced1041de2e2e8a5de6f4a814d5179bddfcdeda88888cb9ce322a516af3be2b7cf371e9193cb40e66cd41dd94e37f14c6e6469e8fa6c57a4fa3125fb6819b84e276768a7354dd3e2692a77a4a60af85bec0325d0aae72a5f4f7bf9468f1d35147910a55af546e4e3634fe2d8efe116606bf84c0e9c4d442ec8f99fe6c1cc90b99a8d1e53322b26b66928fd01738fa70c0aff84b4f02946c6fa684bd617667857cd751a3ad3d324f9574af78eec6c8c51c25e01cb0ef129199f5a3b3b29e32a34c4ef14c810c2e69e06158f02033e15f1ec00419a91c1450338956a188fac918fb73692491baaf5976ca392c139ba0e551de260dfd6c733b572215f2af0aacc5709b0d4a3b36d23f5882c5644bb455075c5c48bd50492b395d14c36393019fa9eab8a211d71d173754663ea2af1ebdf9751006792609d4db47824d95d68583c922c04af3cdfb58f37b6f958a4b35cbd74a30a393be192fb46bfe4e722c3634c94fbf4829f25dc0b8b07cd16cf4c7e924eb02ae8d675539d32b5d9a54a43811eb98e2db317c67d5bc62901582cbb128542d6be3bc9a5b5b8a8827f2eab15e82b28b411edf67d786b76feed9e7d5ffbc86fbdb19ed80a4f5dcebd631719f8734c398938047011a251370e40d5929e9b4426081029b1339ccb08bb0dbcbb4eedd53792e43a046abc1d5c1dc8c1749052233e18e25593daee94f77f327de61867f1e791b797cc5ee43f8109cb0654d8742ece8512c322442f63dff88702ba047e8370a1b7304536ee7cf465a0a19d965fd03543b991449d6a1a98be5ec3867314c688c5c487e59a6bb05291fda479827172bf3db615c20ea022ff7b16020299220b7c45a7181c1eda48c9a5fa7624843d112c52d99d0b27e168eeadbcd3c60b3f366175decc8c91c64a0a16d3a2e38244dd8d2de806ad741e2256075efcb0466360acaa3f65611789a821c30a13d4b60e44173be9e288dda7d7aae2f8341d9a85104170631c942eef22c10e903bf70b0ed36831d536a0cd65c11a209e37a76f3f54deb326735bec5a532431a81f303af5e9d03717a93a3da18317c459aee8db08b9f0b3331d29770fe7fc4266c15a4294c9c435a38296cd880dcedb34f63037f2a8e3ada9ead3e52abd69e5779905f82a607f70e351d2167bf1b599cfb9314a37df876bd5f2acff82f1773c512ffd308179e47b26946ebcce112273e12895145ec88c701269c93f32a5ab2bc16acd57e997d140d18c2cbed2601a05ec33a63e7edbcca673f71eecab66af5287d7d5a1dad68771ed612d29ef8ab23ef0211b4bbed6f981cd24d652f355d94f6003b01cf3d803a6e36b470402c05816aa2cd747f293300bbe891854d932df7809c7809c2cc3d06c693981e7bc21e89aa3ea8f8829c85185e4ecfd2e293bfa2b88cae2c9e4722b9cfee01911a502d59360532528661eadf2150e26a2992871f562d6fed4a36867b2521b1778c4ce955f5980b9dd9ede42fc4a1394491ebf1c1fb0d794cb8c28b103d76b2e70b0337877a222d7f3cd61f353baf7bc9e23d80f8e5b4459937d75f869c179dd9b948a70b9ba37386532790bac12f2f342fc4f2afd8a45f109331d5daf3344ade893029e322e8b7f3bdb5a49987116b31b2bd6d5bab789ca061ea42f7647c88488f734150e161e5aea78639c5bf9c2fb88da321cbfd379b38cbe6e14af979f238685e2c0ff51629cd228602dbaceff8a214cdc66528cdea114691ef619a8c9a0f9cdb7e08c5bcfc2bfd29e39af38f5db4821c648cc3d976cc455a6e6498c92511b407f3349284901562a912c5af25ff792b9c6c5dfb73519336c7d4a87e49debce7a441b7a29706173e4e4e8dacee63a06ab85dd359b508bc8a0f7002832fae10a0a38efaa475846c4205aebe777334788c3e4652086e26dcdddad991b0ce5256e113bac692d442f524d7e292b86eaf0dd8380ccd78b1489dd2ef6beaf2eb9b08b50bb2a5ff3ba8df3b226baf79a0739d8a60cf815cb347399ac4adb2cea533d3f0ce160a563f8d401e5a6100578e4c8178a7e70663e135edc645cdec2f0588fc99a0cb60dd8788e02554ade370960ce562c210e826a1eba767a09b10f46ebbe6c9166e24286331d2ff025c57a10c7b64c506d0a68642171ad965a001700561fcac2e3f548fd58d32bab5f38b36e62f5546129cea35ce856052e3e480fc639640a5301dd700c8e8d0bd6ac790910fcf2b4f159cc1531aa1c9e37b541520450dde638942081201ae8a580f28cf50530190a45f45468753a122b364be7dad79044ec8b9977d583bc0ac3ec7b9fae192397ce8693310f301c18c2cab5208b369e63c5ac18d0266834e218bb71f308c2c2f2df4a6ccadb3788860a2c733a9252b877ea1c1e849a38a328310bafae9614a6e161170c6fcbe9bd8c4177de1fd18f56805c91fb382aad767891556ff8e1b5f3ab8c18b4fa3053c981c12fa2ea017bb7596158ca533d0dd95a95d0b392222609f6ea336711a9dc50393bc41fac0d429540ad70757f2086bf1bea0132a609ea0bdeea0cef93d8b2a0d59189bffec05281e97b4722291005e9ca7e755be9070f405ab0d6c9546a5ebda2e62adcc621c2b1f6b07cd1e617d50469ef2c71647a47ef98ffbc71505e188cef3e5c774c0987664b6989794d7ca186804ccc6296da3adf22feb351792f1a9cff77413703744bf4f21212920d6a8fa1800da7a38fef7160a50f5b895e7b76f3fd830fcb9a25f3b3ccfd082a1712237e4ca665085aa1c5aa413bce813f1b7ca66105de94babb7b4a05029cc3759d00191fd9bfa0f996cc703403dd6ed2b33f2743a788041f279b767efc373314edfae1bd33f7eaaa7418a59fff7e40d02e618172f6e0abe08c855348f3cba40c8592a0521ed1e41524f20abccb2bf0ebb933e59b7036eff5a66279d578e6b2fd6c4140b33adc67f7083110d815ac55b4833ec0504488265b3ff2bdacec17c91bea9d6bdd931bf056d6e9790e472d874a5a3946b200493c9874d057aa6be3a1ca4da6fbb88a9d853aaa7c8ccabc83582caa65078bbe7b04625d139ed9860080d185bd9798d613ca3014713eb9e36bdeb73f14ac3fc7b2f8f594404f56dd937c0a7e865fa98e858cb0af661cbe12f15c928c4c45a982e24cd322320a96ccd54656b2c7876a5d717e42d3df13189b95ddc2b5a928dbda9ee02c30352045d02cbd854af821300f198b1ce1ea8e45c969020e5c7670fbd9b7227cfd3c809fac1df2eb18c199b27e969f32052376b450003b7ff6332ee1d9fce1b5947b72575ec6541b992fbc76f0e03fc1bb9a0df5ee3de0f34125c311d2ddb67962cf9a8230efff82c25c896621082a587139e997e0532962e84ad697a1a2b80d997c2a268ecca8b7d1095530b332ef368270bf31a75b777a7cfe8c8d324a8c558d3c65f801deac6822842f85f10a641b71ad7e5fb05f64eb3033507dc3a2e9ec02d667ef36c551f69c438e8b6c3927733d83e94f035ef3da230b759df5f5d1964815b176478c4ed94402dc8265e589171df165094a2e4e75614fc6febb8484f28ec8c1252b2d933852573926837e1edf9da0da3f91697b290c3ee5a44fcab3b10095b78b5df3701431cab31750e211d442a77dbc5e2d4d0e67bf329f9103414abd4f3879511375c8800f52f8a17ae6887214bf8634bd99075ab073540f04ff675d32190a3d1152ceee32e30719cd883a82185f89f071c02df443cf7046dce8a6ddc472ed63945faef588acf57985c7ecffa438f5427fb851ebc6a4c577a33895a8fc4628286a48d3bbcda1b769aa3194869e148ba457932fa6f2e4640e2755940e2f5a6a67796b5f88ac10f389b409c0c57bd4bf0cbe0fac2fd2f58ec498d19c43952e4522b51931712eb4002b7b208c02c4e06df99fa8e93e4b9e8b0d7a57e63aacdafb19db0fd422f8e89d1275b49963bd82b490f9e4d24cfe9700e98c73b31fdcf7b7d30d73e9bf6bd86439dc8b63171d53ca7caa860c60777436099db544164d4e4a81a483ffd5ef2980110f461529c057c40f2ee63b71a8eb2d87919726bda25a8fa2f242d3ff7bf0726d8a11d141eb87d2733f1faf456f2eccbe4c3a856702a80ba7e36cd8ef8e064e16e61eedda4478d2edaf0445e2247a76e25b4b5c68720b87bba69b4171983d95a5a764f42fa6f23466096d9a097edf84952023a4541110456b93ea558c2059156c287fc6cde7c74abd90ec539a5f43c2a641b1a34cffa2538ba565d0b57513b8c1b3df541d02d6d5a0aa2f96200dbbf64ab7c0adb868cce23ca607db6d6dd18f956185c983a90c8b4a7ec630178376ac400c61c77fcbacb979e2e07115db8a034a00ffb136f91c0b16c6d796f524f9ce6a0b72c378c8939b56bb83ca0f3d09da2b82b4d3457b568878d019f54f9cddd514a601d4edfae582f1a2674892bacf6eaba66124c797e1ebf91e1b5f12e520404d213b12770966d5c5f3435169f8867faed0107d2cd4cf0638e4f1c488122da7516820cc3d12cdc9f663778455352d2be1d8d3cd611808304554bde601e4ec4c9aa50ec22648b12f45c8d84bdcfc85f95ba0afe254df5d8b40d53adf1d4fe1dc3744bd486e3eb14775f4f4c333f751975a4a8b5bfa497850633aff3ff98deb53d1b515a08c4c474bcce46149dfd5bece51d1dfb6eaf593f8ee037404a5ce5edc2887006059cd3743448ab977899f10540b5a5eac1b9d4346654e4eb0200858b5b92525399a87859859269d3b0fa4c2159dc807548368ff701076606378b44cee2839f05ad94f659270af868cd674b44729bbb8eb2f697101bf4fb4f96d07dabaeb5b6a1cc884423fcac3d3805bffb3c8de3e801d641436ca6b1f50aabce4c7b3b1a24eb6977d5a8c84d6cce8ec9ee93d3062a4bd78ff916fbba7ab228838bd61f25759c6ac8650adbe2b346e65681dbafbb934358ca2b1b854bf42f42404a15caf99b785f132b9a20413b2d9d353220656ae271883ca9733430db09b5e8578e9d4fff032b0ee792f429791089d93876a30100a35c420a0686c125005242551df27673e0826a1c38bc028c104e0f958ae1ffb2d5221fd1a36e598065eed6a449567b41c027b6faa461d3aeee8dfb6285661af7fdcfa484fee654b633342eb122fe72d5d68ea4cfc988cabb0df39b8cbd064d489fcbc90bf313f3a29797d479a8fc12cf5b9ead0907a2dca568bc0f40d0fa4a9c3758f9bfd1ac3662a9f04260ef0d2b86a02d23759b210f38830c4a224649186b6e4b87c6b457217c86f502521940caf1e5b2eadb72951a790c94dd74b929232947b01cefd5a1483e127b1b6d216317b581455f9cf96876af837e5f88cc38a46eb2fb6cd7fcc6fce1a264167b86723829ffffc413bb0000000000000032dd6219a95418314b1e071dd59d0e96083e02cb8778069ed54137ce98bd702dead8fc74992d7743d1450faf7de44c2d59ff2dd339b80d3449e9bda5b3a564f01aeefe300165bf3b00d811c7ae866cb1a0a1b87400c2941841cd2d6953308f1a963f1c6d4486e7e45daabf0b066ad8884f4577534d3c9f3d3f3bbe8a1a3088d9b95da1fc901573e26f5b86c7a868429b9b634c9e35dfd0534563160912a43c64bacc8ea1ced7bc1b77a28716700e501905c9e81e190241e0edbf4f894aee4047c5b5fb58a3db4afaf76790690fdc1289236fbfc5f6cff540eb82de8044d17658fb054b198cc288cc43aa5d805a51cadac3e75c8fd82ad015a04932cb6f6b53aa4e8d9d84018ff8db0f756d6b5db4e06a689b52fe8471b9230c2dd14d042c1fea45c3d2452351a4222421366610d80785f7e47474d4ad58116313813d4db3176d93c4e29e5c7562806879ddc75b9cfcf38d6aed015c0f4d52302a51215187bfe254d6065bd142cc9b9e03f32ebc9686ad0d0cb3fcf0afa320a15f37cf591600636a4ef84c756c0d42ab98bc2479f0d5d230359f622447101844430a7555a4cbc702b55a4a6ed964cf399a1a493e40555f622da1643073a786a3425d95090b9b0e20521187e9e20d35f4e061e6201e67e844d88457f751e5519dd30df9251f1ce2836e0bf61eef8fc6ed22e4887186316566278bec46af3823ed53e3e18ca5741124dc53cadb5ff0846cc1c6b9c072be6dea187e8336eb6b6b7029ef79ff3b2999938cc59aafa1618fc4556ce3c81f99414d5d79538a83ee9d8a9ad0b9e57060d4be9c53266f418455d760f423a1642e9edfccede29d21891d7421ad0f1cefe472d0ef84965575419871374727bf5f1dc72057a18ed4d7e0a2ddd6d105eb2cc3718609814c2968f27465b00fb4b4a64359629722320583a05644693e6fcadde0efc12e66a0c8e48311f0550ab8fbc1556b69bb2a5a0c03f1a59d67046d7acd5beb9f7f9ae6eb18580431624d63ffe294ea5497a65ec3891f4c70b26b7b17a9f82145e5d5156d6b3355ad249bb66168bbb745d00c40d6ef42d52a032cf62caeeaec31f4c85ac403cbb0c6756953f0ddbf79da0cfa6ccc1c40de43bc4a10a700b98322e671225e80e663d30192ff5611c44c095351bb69a4e14c11a3d5b0b53e78954699760516134f3148e71a2b0bb04b24bb1a2c2b503f56249e0a2c638ff40e7c2c7d50ef7196fc9893e18c0ac3fc5a4c0d23ee08080f984dc643854b54df4a638af29dc5df79f905c4133ce263f3b2bb55fa7d56fa82795687e6ee5c68cc13d71e44367ea8670409cf2231990cc6d06e5aae2fc3af1537b33b42775b40bba3aa417016fb9dd89f90a89196c104017a68f7527b8b958e38f9646832a7790045fe394ce41bcbd1cbcbe52cd7e56cec7b2856e448fa5d7e837798b899f05a2c2fbe6d9f1a7b193bbf7c70444d6a37810d4d19d359f9cd6b8a6ef2230b735f8bebe0ccec94e44ed95234bfa4a36a2f0ee9fd5ca73d697344d28436e0fab81e73f447bb144a70aaf96acf6ff52c4737e7a4debcd285bdb54e363d842bc9a7d180c16f010fe4078b41c4c3e565c3edd64e61f995ab0086dbdc026dc1825b8c45ed96edd8d2bd9daa699e5da333274d6bee2097c004462848cd16849f95cd2252c4c87058a821ed977ed751b77b0a8fc0966bf3a30c26d49f3185782a7d314e89f039a15ede458538f1ada8eb836a36bb5d82c402e3feebd37e7b7c667a1c82edc8720072789fa5f388039daa731ce74dbd5aa8965b7ee99f6c271035239ca1c34cdc3c57bd8510dee08f74cda37095b1b098997998fa267e0be15de474b2c737936cacccb4ba44112570bbd13f870b55f3763f77724b586d6e26c3e72b20bb13272f2ee331bcabd4a79980a8d2965c20da2a3918c855215fecce95d29bec58f522d3d6d2852c4ac080fffcb3ee7fb98591f99b7cfb7bb124cc20078030756aee8fd284df06cd5f07c13fd56e5381b19e0a3a9f412a8d27428cb6af0078e4dc8ce4836630360a5c3b98ff5e6cbac1d9d29de9838a84d4722ceea3765be3df9984cf139770f3fb986b9cc9185ab787f54be33d46c54de74d94d13f74ec70cfbe1605c00db79fa8de64cd834090a35c80759f83c8fbefcf9a276dde8a8498d084b4619578eccdda2651a475f73367bda96894bb36eb868035251694cbb745feb150555ada09909497ff1d9c8aee7a35b7c8b2fc64ff483f4fd3491ed52304e6010b9bf2af8c5b8e162a383a0bf0bf108ca78f5086132b2b1a29581f323841c2f189509898d932436e5c1e693ed91f0524da026fecaa2b7efab54aeef120be61de457171c58811e0ca8a7600e0ac249aa579d78d2e2b1d6f41a3da4676b6690ca0249251f5b48b9a3820ac5b25a52cc01bc331c24039b6f4bfab72d5838a35629259930dea936f8c60b4f1b189db1fd1b5e7e6c8a842707ad6756d098a9ab543cde3e1d1161983ea91b7322ee2a713be3bad369d8112fdc7f1ac7b5122d55dc5ae443e10db711ddd6619ffbf96068e28911b1f54388413a17958d61ca07465b54699a1351915300cb826d3bf7f4f217bba0ed3195cbd077b67167b9a03040afc237f3bb36edd9fed33d7d6e7c9493fec34be6543880b0b442d8351496f2e8d60d4d984cca743983c0afab9cdedd5a9d774a121e91230d359c27a3d7b4db38ce73db747af3ca06470901f2605c031a7c9b7d1bbb1e838d36a4d39b039e80bcddfaecca906705fe8c844e93d5aee494dc62c7b4fcb6abe09acf925ef422dc09185b53e960795c56500b43faa6e89720aeee724532f89e60e20b12cd4f832b95189bf45b96aa7af10cf8298b44278de1c67e2d71d811240a7aa2d1d6de22e5b8cef4a1f309de3b81c5a028aabdabddc9637974c2dc19b60458f0954bc751b7ae628ac602eb7c52c7fac0c1621ee7757fc5b002ad7e8fb66fc7da0896547abf01ee091c0cfe1d0fc66e6e03599bb2aa7608a72c30203af5eac3915a0b6616b6119c4a09654de2f56e53296d1f8487cd7ec36c86894bab72ec3ce61208f848432d45a27cafcfbf2a2c56b58e017c76ac7e943aff0b4acaf84dfb343d93efb29c518a9d552c36a3e44c6ea948673bc2aa71c5a873d1d301a9c8b02f19c086f922f0b3e4f7d14e8a59c017809188e2e1b4dc6b55fb8ad82b1c04460b5ff2e9b8f47d3e833599519b79ac6d9ab282db4a55654f60396d2e72bf8e2ebbc8c742913359edadfcbda00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x1, {0x3, 0x0, 0x1000003, 0x105, 0x3fe, 0x80, {0x6, 0x3, 0x40000, 0xfe2b25d, 0x0, 0x0, 0x80003, 0x4, 0x0, 0x4000, 0x7, 0x0, 0x0, 0x8, 0xdffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x10000, 0x1, 0x4, 0x3, 0x1}) (async)
sendfile(r1, r0, 0x0, 0xfff)

23m5.40936237s ago: executing program 34 (id=1858):
r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',noxattr,access=', @ANYBLOB="03"]) (async)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',noxattr,access=', @ANYBLOB="03"])
pipe(&(0x7f0000000180)) (async)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090)
r4 = socket(0x2, 0x3, 0xff)
connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
dup3(r4, r3, 0x80000)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[], 0x138) (async)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[], 0x138)
write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xffffffff, 0x3a, '/^', 0x3a, ']$@K-^{', 0x3a, './file0'}, 0x30)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@weak_binder={0x77622a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
r6 = open(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x16b442, 0xa9)
write$binfmt_format(r6, &(0x7f0000000080)='-1\x00', 0x3)
syz_clone(0x12130100, &(0x7f0000000280)="2039eaf40d895316280052739f8754369b8625ae42e96477ff7fd958d0b35921f9c118925f7939be789491660161ac954ae0605b5a644f07b36ef31c29e577d2bcf6f32149f91740c8441eb3b4a42bafc17cbc62f834b7f501f7a2cd2ebbff086dc365e51a20b8e8fbf2d6c74394da0dd5bcfb4cbdef34680b74a2c90648ae7b53a351cad0b2ca9b75dddc423e", 0x8d, &(0x7f0000000100), &(0x7f0000000340), &(0x7f0000000380)="76e2e981200969fd8ea1c3ead0509271bfc394dcfbeca72f647cbf8b547c6d020cf70a892863eb392b35a13666947690527a0a6a8688d01ee97435a6002bccec177d84bd18d149991c317e51a9886757fdbf00b87f8cca39fd1cc9b04200d290ff9eafc6ce4fd20a51370099a2223fdd5c509e221557eb88dd5c387ce455b2a0c01957f8d4c9994af3666de750a6005fb0b91982be404c9f90c4eade6f892f97cb6626c14eb665df7f4038a04d9a66491ae6ca704ffcae876244f7ca54877638d1c897cefc6119444e909ae80663351787d1")
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(r7, 0x7709, 0x0) (async)
ioctl$ASHMEM_GET_PIN_STATUS(r7, 0x7709, 0x0)

22m24.369731733s ago: executing program 35 (id=2853):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000300)=0x80, 0x4)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = socket(0x11, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000003e000100fcff07000400000001000000040000008c0001808800108009000880a831985351cb3d4a57729361f10318be72cb433d11a9b4781da90ad1a200b17485433caa6c97072c59b89aaa3987b4bfce08fe13e090413b9606330beb137e"], 0xb0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000280)='id:\x00\x00\x00\x00')
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62)
recvmmsg(r3, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/102, 0x66}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/158, 0x9e}, 0xffffff01}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000fc0)=ANY=[@ANYBLOB="050100008ddfb240490b4f06fdd4010203010902120001f38d00000904"], 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r6=>0x0})
bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141444e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f00000007c0)="0b0312002e9b97cf5db4d0d010f6a12f", 0x10, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$packet(r2, &(0x7f0000000440)="ef52f6019d37546204236a881b7ceb051b5f54c3b600fc399c8665b0b5f12361dada2904667dcb6af3b09b98bd9174c74e262d8cb965d654bcfdfe6f9583a64bbb34f85b903dea1bcaadfbb48f8f9c619fd859f4653002b197ad707045ae89ea95a585665f7f142b67b70f7b2bd940b3a653368bd8c1ccc1", 0x78, 0x0, &(0x7f00000000c0)={0x11, 0xf5, r8, 0x1, 0x7}, 0x14)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0xffffffffffffffaa, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

21m46.669546822s ago: executing program 36 (id=3544):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x82)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id='])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x11)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b"], 0x0)
syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xdf, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xe0, 0xf, [{{0x9, 0x4, 0x0, 0x97, 0x1, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xd, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x93, 0x6}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x6, 0x1, 0x5, 0x10, 0x9}, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}})
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
pipe2(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r4, 0x407, 0x5)
write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50)
vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r6)
sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0100000140000021000054"], 0x14}}, 0x4004800)
close(0x3)
dup2(r3, r4)
close_range(r1, 0xffffffffffffffff, 0x0)

20m23.396351751s ago: executing program 37 (id=4655):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x4, 0x0)
r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x1f54220a580ca10)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c002d7379c8e7d310ff447284f508001ff0"])
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000340)={r3, 0x2, r0, 0x1})
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, 0x700})
setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000100)=0x1000, 0x4)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x4, 0x0) (async)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
fsmount(0xffffffffffffffff, 0x0, 0x1f54220a580ca10) (async)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c002d7379c8e7d310ff447284f508001ff0"]) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000340)={r3, 0x2, r0, 0x1}) (async)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, 0x700}) (async)
setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000100)=0x1000, 0x4) (async)

18m34.865698961s ago: executing program 38 (id=6858):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x1800, 0x0)
keyctl$chown(0x4, 0x0, 0xee00, 0x0)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)=')\x00')
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)='/dev/uhid\x00')
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x15)
r3 = syz_io_uring_setup(0x62c7, &(0x7f0000000180)={0x0, 0xf838, 0x80, 0xc3, 0x144, 0x0, r2}, &(0x7f0000000200), &(0x7f0000000240))
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000280)={r0, 0x1, 0x9, 0xffffffff80000001})
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000000000001000000020000000700000000000000aa0e0000000000001d14e867b18d7c178f53f100040000000000006428177e1eccd5a6d1b0b448cc777ab3d00efe26f2c83f1f0674287841ea445fbcb1ea43d9bfdb11b71f47bbb65789480ee76116f9bb88fd8dce9259bf394a8250cc9740094f7cf30d000000a9d358586770d18c5397"])
close_range(r0, 0xffffffffffffffff, 0x0)

18m0.567825145s ago: executing program 39 (id=7442):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008)
pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040))
timer_settime(0x0, 0x5, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x10005, &(0x7f0000000280)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "3d6fb448c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
setsockopt$sock_int(r5, 0x1, 0xa, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000200)="05", 0x1}])
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x8000000)
r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = syz_pidfd_open(r8, 0x0)
r10 = accept$inet6(r5, &(0x7f00000001c0), &(0x7f0000001200)=0x1c)
ioctl$sock_inet6_udp_SIOCINQ(r10, 0x541b, &(0x7f0000001240))
setns(r9, 0x24020000)

15m28.472660106s ago: executing program 40 (id=9854):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x101301)
r1 = socket$tipc(0x1e, 0x5, 0x0)
recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000300)=""/201, 0xc9}], 0x1}, 0x9}, {{&(0x7f0000000040)=@in6, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001c00)=""/4103, 0x1007}, {&(0x7f0000000140)=""/31, 0x1f}, {&(0x7f0000000180)=""/156, 0x9c}, {&(0x7f0000000440)=""/233, 0xe9}, {&(0x7f0000000540)=""/213, 0xd5}, {&(0x7f0000000640)=""/102, 0x66}], 0x6, &(0x7f0000000740)=""/112, 0x70}, 0xfff}, {{&(0x7f00000007c0)=@hci, 0x80, &(0x7f0000000980)=[{&(0x7f0000000840)=""/216, 0xd8}, {&(0x7f0000000280)=""/37, 0x25}, {&(0x7f0000000940)=""/16, 0x10}], 0x3}, 0x8a01}], 0x3, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r2, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0x40047705, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x101301) (async)
socket$tipc(0x1e, 0x5, 0x0) (async)
recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000300)=""/201, 0xc9}], 0x1}, 0x9}, {{&(0x7f0000000040)=@in6, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001c00)=""/4103, 0x1007}, {&(0x7f0000000140)=""/31, 0x1f}, {&(0x7f0000000180)=""/156, 0x9c}, {&(0x7f0000000440)=""/233, 0xe9}, {&(0x7f0000000540)=""/213, 0xd5}, {&(0x7f0000000640)=""/102, 0x66}], 0x6, &(0x7f0000000740)=""/112, 0x70}, 0xfff}, {{&(0x7f00000007c0)=@hci, 0x80, &(0x7f0000000980)=[{&(0x7f0000000840)=""/216, 0xd8}, {&(0x7f0000000280)=""/37, 0x25}, {&(0x7f0000000940)=""/16, 0x10}], 0x3}, 0x8a01}], 0x3, 0x0, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) (async)
close_range(r2, 0xffffffffffffffff, 0x0) (async)
memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0x40047705, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) (async)

14m12.114417323s ago: executing program 41 (id=11135):
r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_access(r0, &(0x7f0000000040)={'system_u:object_r:tzdata_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x3}, 0x56)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x108)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0)
keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_LK(r2, &(0x7f0000000340)={0x28, 0x0, 0x0, {{0x10001, 0x2}}}, 0x28)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000740)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b900000f01f7ae41d90100b9800000c00b320908400f30d6d60826f30fc7b2050000000f325e5e835ac2c66691835ac2c6669198030ff5619803980f320f3566b857000f00d0", 0xfffffffffffffef1}], 0x1, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101602, 0x90)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000)
prctl$PR_SET_THP_DISABLE(0x41, 0x3)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max'])

13m5.824222167s ago: executing program 42 (id=12046):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_io_uring_setup(0x766f, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x20000003}, 0x0, 0x0) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002400010200000000ddf958b00eb62f83060003"], 0x1c}}, 0x8004)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc6\x04\xbb\x0642\x9c\x1a\xd1\xcb{GW\\\x0e\x05\x00\x00\x00\x00\xfe\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2<Z l\xdfDh\xa1\x99Bj<\r\x87\xa3\xd1?$\x8b\x02\x00\x00\x00h\x1b\x01\x00\x00\x00\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xabq\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xe5\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xba\x0f\xa4)y\xa0s<\x92k\v6TRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x81\x8f\x92\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\xfc\a\xc1\xf2\xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8z\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v<H\x8cmD\x8e\x9e\x18\xf7\xac\xa5\x17\x89\xc6\x88\x86\xe9\x15\x87WV\xfbF\xb1\x1fo\x85t\xf1\r\x8a\x9c\xe8\xac^\x19cp\xcceJ\xa6\x0e_\aE\bZ\x9f\xfa\xdf$\xad\xf0\xa5E\xeb\xd6\x80\xb7 \rd\xcc\x92\b\x01\x1bG\xb4su\x90\xcfs\x18LQ\x81^\x17\x80\xca\xdc\xe2\xb3\x01\x87G\xb8\x92\xdaJt\xa2g\xb7Azy+\x8f\xee\xb9\xa9\xa6\x04\xd1a\xca1~\x03\xbc\x87\xd1\xbaY\xf3\x8ai\xff[\xde\xde\xc6\xb1\xb9T{\xe2>\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!U}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf9\xcac\b\x90\xd8\xbe\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\xd5\xa58\x19\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\xe0\x1a8\xe1\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00wL\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95eN$\xdb\xcc\x15X\x80E\xcd9N\x16\xac\x15(Z\x9af\x16u\xf8\x90\x8c{\xd60\xf6\x8c\xe1\xfbs\xd8\x84T>\xddaX$\xe2\xee\xd2\r\xealP\xed\xd8b\xc7M=\aEi\\\xf4\x1d\xe8\x89\x00\xf9\x87\x1a\xf3\xa9\xdf_<8o\x87\xc9[r\xa9\xf9\xd5\xabX\xde\xe6\x1c\r1r\x8a9\x94PD\xc8\x7fW\xd0\x00yH\x9bf\x8f\x11\xb3s)}3\xcc\xa4\xc6.\xbd\xb6=g>\x85\xd1\xa0lk\xf3\xbf\x16\xa3\xfd\xa0zi\xaa\xa9\xdd\xc0\b')
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ec0)='\x00\x00\x100\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x1, 0x100000000, 0x9})

12m6.4362016s ago: executing program 43 (id=12494):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2, 0x14)
write(r0, &(0x7f00000003c0)="614b9167416d3ee9e71cf53bd957def94312e684054401c2dfabed7d4a810cc3a6eee51f36df328144b9709fc9f30391298ac1c397d793a3dde01b", 0x3b)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x81280, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffff3)
mmap(&(0x7f0000700000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x3e0b000)
r2 = syz_open_procfs(0x0, &(0x7f0000001580)='setgroups\x00')
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0)
timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x0, 0x800, 0x4, 0x4, 0xffffffffffff72df}, {0x6, 0x8, 0x2, 0x9, 0xfff, 0x3}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r5 = getpid()
timer_create(0x3, &(0x7f0000000400)={0x0, 0xa, 0x1, @tid=r5}, &(0x7f0000000440))
close_range(r2, r2, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2<Z l\xdfDh\xa1\x99Bj<\r\x87\xa3\xd1?$\x8b\x02\x00\x00\x00h\x1b\x01\x00\x00\x00\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[<Y4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v<H\x8cmD\x8e\x9e\x18\xf7\xac\xa5\x17\x89\xc6\x88\x86\xe9\x15\x87WV\xfbF\xb1\x1fo\x85t\xf1\r\x8a\x9c\xe8\xac^\x19cp\xcceJ\xa6\x0e_\aE\bZ\x9f\xfa\xdf$\xad\xf0\xa5E\xeb\xd6\x80\xb7 \rd\xcc\x92\b\x01\x1bG\xb4su\x90\xcfs\x18LQ\x81^\x17\x80\xca\xdc\xe2\xb3\x01\x85\xa4r\x87G\xb8\x92\xdaJt\xa2g\xb7Azy+\x8f\xee\xb9\xa9\xa6\x04\xd1a\xca1~\x03\xbc\x87\xd1\xbaY\xf3\x8ai\xff[\xde\xde\xc6\xb1\xb9T{\xe2>\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9')
ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00')
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010100000700000000000400000a08000100"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010)
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005a00"], 0x1c}], 0x1, 0x0, 0x0, 0x800}, 0x0)
inotify_rm_watch(r2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
connect$pppl2tp(r6, &(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x1, 0x4, 0x3, {0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x1ce24a2c}}}, 0x3a)

11m39.085225612s ago: executing program 0 (id=13033):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x9beaf63d71c033ba)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x28)
ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000080)={{r1}, "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"})
ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f0000001080)={'pim6reg0\x00', 0x200})
readahead(r1, 0x1, 0x63)
fsetxattr$security_evm(r1, &(0x7f00000010c0), &(0x7f0000001100)=@ng={0x4, 0xa, "d6c146c1acd2428efa9580a14b499c3c"}, 0x12, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001140), 0xc2000, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f00000011c0)={0x2, 0x9, 0x3d, &(0x7f0000001180)=""/61})
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000001200)={0x1, 0x2, 0x6, 0x1, 0x6, 0x2})
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000001240)={0x3af, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r4 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000006ec0)={0x0, 0x1, 0x11, 0xb, 0x1b6, &(0x7f0000006ac0)="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"})
getsockopt$inet6_mreq(r1, 0x29, 0x8, &(0x7f0000006f00)={@dev, <r5=>0x0}, &(0x7f0000006f40)=0x14)
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000006f80)={@local, 0x6e, r5})
ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000007000)={0x7, 0x20, '\x00', 0x1, &(0x7f0000006fc0)=[0x0, 0x0, 0x0, 0x0]})
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000007080), r1)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000007380)={&(0x7f0000007040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000007340)={&(0x7f00000070c0)={0x274, r6, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NODE={0x114, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "bccb9fdff2a24fb4fc0fbd9aa538024077116066d7f8c00a8a88720fffb188a200df0b0e"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb9a8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8000}, @TIPC_NLA_NODE_ID={0xa3, 0x3, "344d6e1bb668e9c1ddc60024bdd8fc7ba38f56721c0517293b2edd711add2724af13216eb995a6aea81bf7d060bbba067e4eec118736046fd6643de3cbe7af7c2769716c344b545cebb06890509f0a44d719a2eb16f8d38c7d73796628ce47e112d8dfccf47efeeefe4c7073c2599762ccd750e4b303aef47af19a4ced662fd06474e6fd8615c47b1f765fae8b59a1316fbcbd100957f9fc95ec7fe7b19eef"}]}, @TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc3e}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "4a5acd8a4620a20e3dffcecbe5069e0e61a2c46662264a46411b594640ae597b314ec5af"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x101}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "0d2d48516773b09f630facbbab6d82e916816c4b73"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf83d}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x817}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1688}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000073c0)='#.\xfd\x00', 0x0, r4)
ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000007400)=0xfff)
ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000007480)={{r0}, 0x3, &(0x7f0000007440)=[0x6, 0x4, 0xfff], 0x3, 0x2, 0x1})
r7 = fcntl$getown(r0, 0x9)
getresgid(&(0x7f0000007740), &(0x7f0000007780), &(0x7f00000077c0)=<r8=>0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000007bc0)={0x0, <r9=>0x0})
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000007c00)='/proc/schedstat\x00', 0x0, 0x0)
r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000007fc0)='ns/uts\x00')
r12 = fsopen(&(0x7f0000008000)='erofs\x00', 0x0)
sendmmsg$unix(r1, &(0x7f00000080c0)=[{{&(0x7f0000007500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000007700)=[{&(0x7f0000007580)="ad3452cef6f318a11f2f79da0ca06aa575682a333fd9e8652a17b1dae04abf9e6a61657fb2e3d4eb63b12d086b15f61c5ebeddfc8c95fc76486db1c29fc41790b3f4b02bdb41ae303bd49bbfb1c06c60c9637c0c06cac363cf239ca0e5866283b58f5398a805", 0x66}, {&(0x7f0000007600)="4448bc28b418fab55405f8b62685c4f567e6146fe1b23b49aa8c192f303f244062d4aeeb4965bcc698803b1949a3536ef0cf494069319092d45650e037ffb284b430cf94402a9498cdc5e2b80615717d6464ec49abe7e6058f497eb8551e6d73bcd49feaeb3a8cbb352d1db620fd8483d6883f18049507b8b23bba0c4d5f82f4bfce1c1d6e3381409cc104452745df58343773a406a59a523434e241665293c15b63af312c3b3ecf3799b5e7b4d15f8322953bbec7872317ff231f0e8c1264450bac973abf01e533788faed01957858bc6c1d9c41782790575404a4700123adc60d92aa50a9c95916a52aafc30d12b0c703e", 0xf2}], 0x2, &(0x7f0000007800)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee01, r8}}}], 0x20, 0x4000}}, {{&(0x7f0000007840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007b80)=[{&(0x7f00000078c0)="5a8c89fba4beb60e2efd51232123950bac92a4bb7969fb5b8f70452037851ae43e2d026d4f6774168f56cc49a2d98f9d2f88d993e547511481cf19875bade68db1cd3e73b3a4130d65e5a6c77e114d2291663e089bd2fa49e9de04676103fd01c10a5bcb57795a321f4fa933b9a46354a4d9e6", 0x73}, {&(0x7f0000007940)="ee5fdc765a0d5bf7652a702d76a1fcf41c32a150c9dfafbae5a052a14ab4daf80c5f1c13148cca55264a4023d9e6f7cb050caeb9bd5028bdd62d8f1f69b2d1b1a7dead8e348d8af4e05875a995599bdfbc2c7049cae339499d15d2f15a864b4a2fad02758f2f2342f98f62033c5e9b23535a22366775b77776b1295a2afaecf3397c83007bd886", 0x87}, {&(0x7f0000007a00)="814aa891d2f6c72899773ae2e55b9028a4966025bb557e236ff861cd2f27ed586e7bb6405c5ef05ede45ff98b8e08afd8a30714b2a771b8d1045abd14258ff156224efbfa75428034fca7aa5a08bdd26b1f13013219fed79ca2b7d2602985bf07600570d52dc3b2cda7cb35bb8423bfdb345be8c9becb984c6b71c6e1572aa78c5223e4b04d633d546e206a48b144d8497e4e94b41e7e057be5d85f6fd66dae324d678d3f4f3fda166d4c65046d7a385cc35e3a7021439388eee567e556de41c0de754a02676b84d78ffc36970cc5b32ec3604f808cd0cf86b4080639920fd", 0xdf}, {&(0x7f0000007b00)="13f0c10911b6d11975b24e31cf0cf3a70fe8f5d6e3554056aef7248891ce36b420ecd4b00abbf58975bb23cd4994195eaa82bb770063be2ae18c8de28b6153b1069fb4feb37e4a74e864edd724c67d1a3cf94af6e1", 0x55}], 0x4, &(0x7f0000007c40)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r3, r1, r2, r1, r10, r3, r4]}}, @rights={{0x30, 0x1, 0x1, [r3, r3, r0, r1, 0xffffffffffffffff, r3, r1, r0]}}], 0x80, 0x80}}, {{&(0x7f0000007cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007f80)=[{&(0x7f0000007d40)="f3ffe12814d594c4d30c1e61d6f6cc6063d801ed25ffad49351f301d7ec05010bf0aeee9cd692ecae5a53f07747c102fcc8d06b4fae3910efda7d6b4fab520ee9f67f29d7b8eb84a2a1700b00326be3daeb7466178a471ac880d1ad52bf75d52ae3752e9e3abb6f4d9a30ba7e76687caba79d71c9d5004f2cc64343ca34647dca152ffeca72b62bdc5e455b13f03e54bf8d3073e89e1f66384636a558543a3ce1460a82b50fa1d14d8e87ec737f013833a5a182e67ac160f9cb855cb6acfb1a99c01dd850f9d138e8664431847b972fef05f5d79ba5a3a7f200509ed2e9853f082ea783cdccfbe70b98b279d633aff6da17031f0e11b", 0xf6}, {&(0x7f0000007e40)="c6f46b8f418caa4fb49c27dae00d11a4a73681cd3187ac343f03b75bea1b77ca779832ae5a8eb04aaf1ae8cd7cbe0bcf2b1d96", 0x33}, {&(0x7f0000007e80)="268892fee1e66fcf039136ec17abfa48461374901bee32717f647cfc449917c20742408e6855c806b70d9487cc0c3613f542a7c0136e7110b22deba73bd39a6cb3669ff95bfb9a7dd0698bf23c76f35a2edaa36eadfff3905aa1c389bccd717dfbfd8d26b0f66321eb32810723fad31c43f57a8f7f3feca0214510f04de1e69655d5b315a7decf4591fc3dd655ecfe6e2ebf33a50e102310058d61e5eae9ec4609bd956f8d64cce61f5def22677c4809b533372116d6a7a3bb041afa24ec674c8ede57bc50eaf845dabe59d5bf426abe192971e77f28abb837ff1ea6c692086c415e5da7ac", 0xe5}], 0x3, &(0x7f0000008080)=[@rights={{0x18, 0x1, 0x1, [r11, r2]}}, @rights={{0x20, 0x1, 0x1, [r12, 0xffffffffffffffff, r0, r3]}}], 0x38, 0x20000000}}], 0x3, 0x2000c800)

11m38.995537394s ago: executing program 0 (id=13034):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000004a00)={0x2020}, 0x2020)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2100, 0x0)
inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x404)

11m38.975381654s ago: executing program 0 (id=13035):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f00000000c0))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10001)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000))
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x11, r1, 0xcf82b000)
read(r1, 0x0, 0x0)

11m38.931025135s ago: executing program 0 (id=13036):
r0 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4)
ioctl$int_in(r0, 0x5421, &(0x7f0000000340)=0xfff)
connect$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000001c0)={'pimreg\x00'})
connect$unix(r0, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@weak_binder={0x77622a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @aes128, 0x4, @desc3})
getgroups(0x0, &(0x7f0000001080))
syz_usb_connect$uac1(0x3, 0x93, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x2, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfc, 0x48}, [@processing_unit={0xb, 0x24, 0x7, 0x3, 0x4, 0xb4, "c897d1e1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3, 0x2, 0xfa, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xb8, 0x6, 0x0, {0x7, 0x25, 0x1, 0x3, 0x1, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x7, 0x1002}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xe1, 0x5, 0x10, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3d, 0xa, 0xfa, {0x7, 0x25, 0x1, 0x0, 0x2, 0x5}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000440)={0x1, 0x7fffffffffffffff, 0x4, 0x401, 0x7, 0x0, [{0x5, 0x5, 0x8, '\x00', 0x200}, {0x4, 0xffffffff80000001, 0x0, '\x00', 0x1005}, {0x6, 0x401, 0x0, '\x00', 0x2405}, {0x9, 0xa, 0x4, '\x00', 0x8}, {0x9, 0x2, 0x5, '\x00', 0x400}, {0xb, 0x1, 0x5, '\x00', 0x2000}, {0x1, 0x9818, 0x8, '\x00', 0x80}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
r3 = socket(0x10, 0x803, 0x0)
recvmsg(r3, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, 0x0, 0x0, &(0x7f0000000340)=""/54, 0x36}, 0x142)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8})
ioctl$VHOST_VDPA_GET_VQS_COUNT(r2, 0x8004af80, &(0x7f0000000100))

11m38.392910515s ago: executing program 0 (id=13039):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d03001f000000000000130000001c000980070002"], 0x30}}, 0x0)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="12010003000000106d04870109026d0001010300080904000301030100080921ff078101221a0902058103100096ff060905020300044ed49337cb93f68f686314d92bc83337804f5055c23bcda9c5f6cd9a2dcfed2eb83fef90d21ebdcc24915783407e535d6292b2e2eac8e66ead2cae9c8819adbb1104b41139d974c68338bc16aee7226f5e482915ed"], 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
creat(&(0x7f0000000300)='./file0\x00', 0x20)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x58, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x240040c0}, 0x20000000)
close_range(r0, 0xffffffffffffffff, 0x0)

11m37.696373238s ago: executing program 0 (id=13043):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00')
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0)

11m37.58772529s ago: executing program 44 (id=13043):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00')
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0)

8m23.520513222s ago: executing program 7 (id=16082):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x80000006}, {0x6, 0xfa, 0x0, 0x4}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x80000006}, {0x6, 0xfa, 0x0, 0x4}]}, 0x10)
write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xfdef)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

8m23.377036235s ago: executing program 7 (id=16083):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x8, r4, 0x11})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x4000000000005)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f0000000080)={0x7c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_ep_write(r7, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") (async)
ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x16)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x8, r4, 0x1}) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e23, @broadcast}, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd303, 0xff, 0xda}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', <r9=>0x0})
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000540)=0x8000) (async)
setsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f0000000500)={@private=0xa010100, @local, r9}, 0xc) (async)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = syz_clone(0x2980c000, &(0x7f0000000180)="b59367ce9fbb617a85cd138e58381479cbeedf9fecb3309a6a40c34c4b1fcb6019eb54a01c880530dfdf327e2ecb3988987a8604e3e9ea72d6206d7af30298ac35399fa0399bd2553cf787ca73887dc8a102b8e72bc4455ba2abe1f3840d8ece4b91121e6cd29c440399c83d6dae0384a3606cd50b49f49df12d84ca79070151e4be3fc0cb05f4540167d5425a80137ece97fa1a15a1a31e085e0ba404ff875046", 0xa1, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000340)="a9273a20fd970a11c82657ed7e8a464031fa72e772bfb18abc113583fec1a39649f659021658fb7d9324c33043b671fb6b7bc5aeb442ef226d53443f443e5522ad02958e8325b3f6bed220a082810a3d4bd0c2d8a13848d7739524449f5d25a0785d3d72121d86e39960333485d4982967b178daf7214431e5c80000000054da53cced975a453de40f104b003a08366bdb0f49895a9d76a686296e4850ea28d90b27e996175edd83e3ac9ddc2d1b243f692a2f7ec6c09c4b9c616c7ca36506a54a3bebc212555ebacf827706a0eb10a6d6f0daec8842c0ea3b0000b305831417a435706fefec3ef2b711")
prlimit64(r11, 0xa, &(0x7f00000002c0)={0x9}, &(0x7f0000000580))
setsockopt$inet6_int(r10, 0x29, 0x2, &(0x7f0000002240)=0x7fd, 0x4)
setsockopt$inet6_tcp_int(r10, 0x6, 0x22, &(0x7f0000000080)=0x4, 0x4) (async)
bind$inet6(r10, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) (async)
sendmmsg$inet6(r10, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) (async)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

8m20.336802643s ago: executing program 7 (id=16122):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x3c}, 0x12})
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000008537010200000000000000000a000003c0179a28700000002bebaedbd34f9433f20f6368aff902d7db6dd0f805352a09de24a1d04c061d3187d32cb627d54c850000000000000000000000000000d626adac6084688422324b6d0a48217c3e117641c28901d76c773888ebedf0fb5fd6c771cb2a161b87a72d4a05814cec04e0e391638678d2ca5097a5640a6c832039663f62280cfbe440c33e6c0f111476bd80a85c340a8bbc0071661b0b00d69aa50f8ee3d6d0337f2046fd4eb7850015ca53364d"], 0x1c}}, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = inotify_init1(0x800)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'veth1_vlan\x00', @local})
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x30)
mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='exfat\x00', 0x200824, 0x0)

8m20.229105425s ago: executing program 7 (id=16123):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x9a5})
fcntl$lock(r2, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd})
r3 = pidfd_getfd(r2, r1, 0x0)
setns(r3, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001)
move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x121491, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0/../file0\x00', 0x1)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
umount2(&(0x7f0000000040)='.\x00', 0x2)

8m20.207294166s ago: executing program 7 (id=16124):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0xd, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e000000200"/88], 0x290)
write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x0)
syz_usb_connect(0x1, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

8m20.163415646s ago: executing program 7 (id=16125):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x8002)
ioctl$USBDEVFS_RESET(r0, 0x5514)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380), 0x16e, 0x0, &(0x7f0000000200)="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"})
socket$inet6_udp(0xa, 0x2, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x98200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x3, 0xa, 0x0, 0x0, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x8, 0x0, 0x2, 0x2, 0xa0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010101}}]}, 0x50}}, 0x0)
sendto(r1, &(0x7f0000000180)="7d37c4c3420ad5e0659f09d30da34caf14d34c9bd440feb46a3ee6f56a6cfa281ac1185eded3d7d68f313798182672396d823da7e8a70554641104ac42abfde9b81e98da02913b8f01604ce3aa5f698eead348e96b60fef816a147cfef896da0", 0x60, 0x800, 0x0, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0xffffffffffffffff, 0x9, 0x7, 0x0, 0x1, 0x0, 0x3, 0xfffffffffffff801, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x3, 0x1, 0x1, 0x9], 0xeeef0000, 0x49340})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

8m20.101276217s ago: executing program 45 (id=16125):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x8002)
ioctl$USBDEVFS_RESET(r0, 0x5514)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380), 0x16e, 0x0, &(0x7f0000000200)="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"})
socket$inet6_udp(0xa, 0x2, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x98200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x3, 0xa, 0x0, 0x0, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x8, 0x0, 0x2, 0x2, 0xa0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010101}}]}, 0x50}}, 0x0)
sendto(r1, &(0x7f0000000180)="7d37c4c3420ad5e0659f09d30da34caf14d34c9bd440feb46a3ee6f56a6cfa281ac1185eded3d7d68f313798182672396d823da7e8a70554641104ac42abfde9b81e98da02913b8f01604ce3aa5f698eead348e96b60fef816a147cfef896da0", 0x60, 0x800, 0x0, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0xffffffffffffffff, 0x9, 0x7, 0x0, 0x1, 0x0, 0x3, 0xfffffffffffff801, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x3, 0x1, 0x1, 0x9], 0xeeef0000, 0x49340})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

5m42.627524793s ago: executing program 1 (id=18485):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00')
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d0c26009, 0x4000010, r0, 0x98b2f000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x3, &(0x7f0000000040)=0x2)

5m42.546001195s ago: executing program 1 (id=18486):
prctl$PR_SET_MM_EXE_FILE(0x37, 0xd, 0xffffffffffffffff)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000))
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xb3d)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) (async)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x2, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xa}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x58}, 0x1, 0x7}, 0x0) (async)
sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x2, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xa}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x58}, 0x1, 0x7}, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x2) (async)
ioctl$TCXONC(r2, 0x540a, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

5m42.389023718s ago: executing program 1 (id=18488):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) (async)
r1 = gettid()
r2 = getpid()
rt_tgsigqueueinfo(r2, r1, 0x7, &(0x7f0000000000)={0x202b, 0x0, 0x4}) (async)
read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async)
socket$netlink(0x10, 0x3, 0xa)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3) (async)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x38, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r4}, @clear_death={0x400c630f, 0x2}, @request_death, @dead_binder_done], 0x0, 0x0, 0x0})

5m42.388700098s ago: executing program 1 (id=18489):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc71e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x0, 0xff}}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00daedd9836ea309790000"], 0x0}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2})
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'vlan1\x00', {0x7fffffff}, 0x9})
sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020d00071000000000000000000000000300050000000000080012000000000008f0000600000008010000000000000000000000000000000000000000ffffac141411e0000002000000000000000000000000030006000020000002000000e00000010000000000000000168b3fabffc8db52e10ecef17d3614046375020aee4ee75b4ec4e48eb803904e70000000000000000000002000"/161], 0x80}}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

5m41.78094392s ago: executing program 1 (id=18502):
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8c0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x17, 0x1}, 0x4a, [0x7ff, 0x3, 0x7, 0x40, 0xfffffffe, 0x4, 0x200000, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x5, 0x681c1eb5, 0x11e, 0x0, 0x4, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x200, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x9, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x5, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x3, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0x89, 0x2, 0x10001, 0x0, 0x0, 0x7, 0xfffefffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x80000, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9, 0x1], [0x0, 0x8001, 0x3, 0x9f5, 0x0, 0xb, 0x1c75, 0xf51, 0x4, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xd59, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xfffffffd, 0x5, 0x200, 0xffffffff, 0x563, 0x6, 0x8, 0x0, 0xffffffff, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x1, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x1, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x6, 0x45d, 0x4, 0x54, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c)
pipe2$9p(0x0, 0x80000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000740), 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f00000007c0)="25d7fe", 0x3, 0x24008c15, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, r0, 0x2)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000080)={{0x1, 0x3, 0x200, 0x2}})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000480)={0x7, {{0x2, 0x4e24, @private=0xa010102}}, {{0x2, 0x4e22, @loopback}}}, 0x108)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000280)=[0x5, 0x8026, 0x2, 0x8, 0x6, 0x8, 0xa4, 0x2])
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)

5m41.612912473s ago: executing program 1 (id=18506):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008)
pipe2$9p(&(0x7f0000000580)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000000000), 0x2002)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000001b40)=ANY=[@ANYRESDEC=r1], 0xb0)
r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0)
keyctl$setperm(0x5, 0x0, 0x6203000)
ioctl$BTRFS_IOC_DEFRAG(r3, 0x80041284, 0x3)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000001ac0)={0x2, {0x9, 0x1, 0xfff, 0x4, 0x7, 0x1}})
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}]}})
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008)
pipe2$9p(&(0x7f0000000580)={<r5=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r1, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7, 0x8, '9P2000.L'}, 0x15)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc2002, 0x1)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f00000000c0)=0xf, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r8=>0x0})
bind$can_raw(r7, &(0x7f0000000100)={0x1d, r8}, 0x10)
bind$can_raw(r7, &(0x7f0000000140), 0x10)
r9 = dup(r6)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000001200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r9])
pread64(r4, &(0x7f0000000200)=""/4087, 0xff7, 0x8)
r10 = syz_usb_connect(0x1, 0x40e, &(0x7f0000001280)={{0x12, 0x1, 0x200, 0x4b, 0xb2, 0x7c, 0x8, 0x1199, 0x6809, 0x702c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3fc, 0x1, 0xe4, 0xa, 0x70, 0x7, [{{0x9, 0x4, 0xc8, 0x9, 0x9, 0xe5, 0x21, 0x79, 0x7f, [@hid_hid={0x9, 0x21, 0x3, 0x4, 0x1, {0x22, 0x858}}], [{{0x9, 0x5, 0x2, 0x10, 0x400, 0x5, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x400}]}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x7, 0xf2, 0x8, [@generic={0xee, 0xc, "5d9fdd9fa2cc671becc67eae2a8360408a4743667089b8b9265005742085e1e06ce14faacc28d2ad3b65c9dd72b9d9c1b3e003bd045bce63f495c552d8e6033e818a68f5bd3abd9422ba68d53b28240ffc7f1e1659083efa7c686c59e3a471d24a74dbb680d51f4a98c30b46502ba1f47c3bd3cbf30270e8859fd78abce01ee621279514cfb93a1f88cdb3f2ac957c84ea1ecff047c153b171a24645f41fcdc88060e51907d8495f101cbeb65fd0e687da5decac6fabd464279ce2fe18557d82c04f445c12f4ea38f8f57bd455079ea4fca51259f9163cf6546dc3d3efae8a5e281f9ba95a5e99864a5ca6c3"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x6, 0xc0, 0x4, [@generic={0x37, 0x4, "79e19f2ae2444bece3efddcc7b0fc8d9df2c4d48b72ed38f6e4d9a4d40a3aecac8df8dd7e0edd48a978414f57d76767fb602d639c4"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x3ff, 0x40, 0x22, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x400}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x4, 0x6d, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x6, 0xff}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x6, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81}]}}, {{0x9, 0x5, 0xb29a7f0e64043f32, 0x4, 0x20, 0x4, 0x4, 0x80, [@generic={0x9e, 0x23, "35b8e3621469293d10c608d0084b9c6a9468da02d1c93b51752299b69c1fad45965ed275663394d1f74cdbc74f3e44c3e89eefb5025d349270cc27ef1ac23c24d848b69d6daa542278784b5660dfa1e2066bf5061384d5018b98d44c63805a9484e88bc6ee0aef90524513e8d3ea1351dddcc0eb5146745c4fe2d034243f8d865fc1744e6def82d2e7b2815dcdb9deebf2ea2b7f5ff4b5416e125d67"}, @generic={0xa4, 0x3, "3356cccc6be70179b69bb1ffa02ec3358422a437884efd3e97b2f841f3285fd269d0a5e95392dca97454ab1d936dd0cf042062a3593c9f4b87efd16ebb3e7d46bddee9bd3a610981c07c31696ebb7ad2157b0f69cefec8ab440fe1534d2bbc34b013d1f06a664672ef39280d097a14f656ffa121328b9b5ed7a6f09810a6c1d3190ebf8fbf39f68865277dd66531072cd4ffbadf2d9e0fd855954bd19bb2e882d8c1"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x40, 0x81, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x2}]}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0x7f, 0xfd, 0x6, [@generic={0xff, 0x7, "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"}]}}]}}]}}]}}, &(0x7f0000001800)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x0, 0x2, 0x69, 0xff, 0x4}, 0xef, &(0x7f00000016c0)={0x5, 0xf, 0xef, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xb, "bfeb741ad6aba87c70005ba0fb7edea1"}, @ssp_cap={0x10, 0x10, 0xa, 0x60, 0x1, 0x64b, 0x0, 0x81, [0x0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x68, 0x7, 0x16f4, 0x9}, @generic={0xa6, 0x10, 0xb, "fbec98fe1c1e20006ed1e208396d99daca1a9c14e5676e1d04fd7cc9ff9da355602af423e03b5cce9a2223b8a30fb10382b4ec967ff8b92557471322d3b59d96693bc292f967e5034701edd4f1fb43ad8cc54133972cd1fedd323e68cf4b1aeaf7c45f6f4e16326e943f5faedac3d05ba82ea58836587a18ff98eb9880c53e7135697905f154397742c263fb1167fcea650cb3e95f6129daa854c6ce7102bd0e018134"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0xab, 0xf2, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x1, 0xfe, 0x2, 0x7}]}, 0x2, [{0x27, &(0x7f00000001c0)=@string={0x27, 0x3, "072e9c3044f687383c43f245818170f6c3654f8b090a6f5594aa8f16125b80046dbe5e42f7"}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x42d}}]})
syz_usb_control_io$cdc_ecm(r10, &(0x7f0000001980)={0x14, &(0x7f0000001840)={0x20, 0x23, 0xf6, {0xf6, 0xd, "6b74bb426496cfc0ec06396e6e0b5988b1ae902e10cba72ec67a2d3036f53fb63b6394d5600d4a0bff47b9887d034ed55061623a33a7ed9dfcc13de6fd516c0269aadfa938769d8edeee67f55d6a3ac39af0d760e375b2e40b310a38d5df9e78af6bb24ace1f757ae17d6562d7f879a583ac003b09aae42ac89dc28a7771541ffe67b52978136b2887e074aee2101162a9ebfce1defb8d0d22c66e2705327738d4350880670e31ccd9796875d28b3a008affaf674b37f3e6a1ebd4052a1850477b9be52552d0946e44618b931addf8dc09b06806499dc214b68ce982e76bed44c49e8a64b6aeda6a62b4b2ecc595063011913a22"}}, &(0x7f0000001940)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001a80)={0x1c, &(0x7f00000019c0)={0x0, 0xa}, &(0x7f0000001a00)={0x0, 0xa, 0x1, 0x7d}, &(0x7f0000001a40)={0x0, 0x8, 0x1, 0x54}})

5m26.601222419s ago: executing program 46 (id=18506):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008)
pipe2$9p(&(0x7f0000000580)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000000000), 0x2002)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000001b40)=ANY=[@ANYRESDEC=r1], 0xb0)
r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0)
keyctl$setperm(0x5, 0x0, 0x6203000)
ioctl$BTRFS_IOC_DEFRAG(r3, 0x80041284, 0x3)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000001ac0)={0x2, {0x9, 0x1, 0xfff, 0x4, 0x7, 0x1}})
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}]}})
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008)
pipe2$9p(&(0x7f0000000580)={<r5=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r1, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7, 0x8, '9P2000.L'}, 0x15)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc2002, 0x1)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f00000000c0)=0xf, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r8=>0x0})
bind$can_raw(r7, &(0x7f0000000100)={0x1d, r8}, 0x10)
bind$can_raw(r7, &(0x7f0000000140), 0x10)
r9 = dup(r6)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000001200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r9])
pread64(r4, &(0x7f0000000200)=""/4087, 0xff7, 0x8)
r10 = syz_usb_connect(0x1, 0x40e, &(0x7f0000001280)={{0x12, 0x1, 0x200, 0x4b, 0xb2, 0x7c, 0x8, 0x1199, 0x6809, 0x702c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3fc, 0x1, 0xe4, 0xa, 0x70, 0x7, [{{0x9, 0x4, 0xc8, 0x9, 0x9, 0xe5, 0x21, 0x79, 0x7f, [@hid_hid={0x9, 0x21, 0x3, 0x4, 0x1, {0x22, 0x858}}], [{{0x9, 0x5, 0x2, 0x10, 0x400, 0x5, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x400}]}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x7, 0xf2, 0x8, [@generic={0xee, 0xc, "5d9fdd9fa2cc671becc67eae2a8360408a4743667089b8b9265005742085e1e06ce14faacc28d2ad3b65c9dd72b9d9c1b3e003bd045bce63f495c552d8e6033e818a68f5bd3abd9422ba68d53b28240ffc7f1e1659083efa7c686c59e3a471d24a74dbb680d51f4a98c30b46502ba1f47c3bd3cbf30270e8859fd78abce01ee621279514cfb93a1f88cdb3f2ac957c84ea1ecff047c153b171a24645f41fcdc88060e51907d8495f101cbeb65fd0e687da5decac6fabd464279ce2fe18557d82c04f445c12f4ea38f8f57bd455079ea4fca51259f9163cf6546dc3d3efae8a5e281f9ba95a5e99864a5ca6c3"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x6, 0xc0, 0x4, [@generic={0x37, 0x4, "79e19f2ae2444bece3efddcc7b0fc8d9df2c4d48b72ed38f6e4d9a4d40a3aecac8df8dd7e0edd48a978414f57d76767fb602d639c4"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x3ff, 0x40, 0x22, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x400}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x4, 0x6d, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x6, 0xff}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x6, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81}]}}, {{0x9, 0x5, 0xb29a7f0e64043f32, 0x4, 0x20, 0x4, 0x4, 0x80, [@generic={0x9e, 0x23, "35b8e3621469293d10c608d0084b9c6a9468da02d1c93b51752299b69c1fad45965ed275663394d1f74cdbc74f3e44c3e89eefb5025d349270cc27ef1ac23c24d848b69d6daa542278784b5660dfa1e2066bf5061384d5018b98d44c63805a9484e88bc6ee0aef90524513e8d3ea1351dddcc0eb5146745c4fe2d034243f8d865fc1744e6def82d2e7b2815dcdb9deebf2ea2b7f5ff4b5416e125d67"}, @generic={0xa4, 0x3, "3356cccc6be70179b69bb1ffa02ec3358422a437884efd3e97b2f841f3285fd269d0a5e95392dca97454ab1d936dd0cf042062a3593c9f4b87efd16ebb3e7d46bddee9bd3a610981c07c31696ebb7ad2157b0f69cefec8ab440fe1534d2bbc34b013d1f06a664672ef39280d097a14f656ffa121328b9b5ed7a6f09810a6c1d3190ebf8fbf39f68865277dd66531072cd4ffbadf2d9e0fd855954bd19bb2e882d8c1"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x40, 0x81, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x2}]}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0x7f, 0xfd, 0x6, [@generic={0xff, 0x7, "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"}]}}]}}]}}]}}, &(0x7f0000001800)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x0, 0x2, 0x69, 0xff, 0x4}, 0xef, &(0x7f00000016c0)={0x5, 0xf, 0xef, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xb, "bfeb741ad6aba87c70005ba0fb7edea1"}, @ssp_cap={0x10, 0x10, 0xa, 0x60, 0x1, 0x64b, 0x0, 0x81, [0x0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x68, 0x7, 0x16f4, 0x9}, @generic={0xa6, 0x10, 0xb, "fbec98fe1c1e20006ed1e208396d99daca1a9c14e5676e1d04fd7cc9ff9da355602af423e03b5cce9a2223b8a30fb10382b4ec967ff8b92557471322d3b59d96693bc292f967e5034701edd4f1fb43ad8cc54133972cd1fedd323e68cf4b1aeaf7c45f6f4e16326e943f5faedac3d05ba82ea58836587a18ff98eb9880c53e7135697905f154397742c263fb1167fcea650cb3e95f6129daa854c6ce7102bd0e018134"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0xab, 0xf2, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x1, 0xfe, 0x2, 0x7}]}, 0x2, [{0x27, &(0x7f00000001c0)=@string={0x27, 0x3, "072e9c3044f687383c43f245818170f6c3654f8b090a6f5594aa8f16125b80046dbe5e42f7"}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x42d}}]})
syz_usb_control_io$cdc_ecm(r10, &(0x7f0000001980)={0x14, &(0x7f0000001840)={0x20, 0x23, 0xf6, {0xf6, 0xd, "6b74bb426496cfc0ec06396e6e0b5988b1ae902e10cba72ec67a2d3036f53fb63b6394d5600d4a0bff47b9887d034ed55061623a33a7ed9dfcc13de6fd516c0269aadfa938769d8edeee67f55d6a3ac39af0d760e375b2e40b310a38d5df9e78af6bb24ace1f757ae17d6562d7f879a583ac003b09aae42ac89dc28a7771541ffe67b52978136b2887e074aee2101162a9ebfce1defb8d0d22c66e2705327738d4350880670e31ccd9796875d28b3a008affaf674b37f3e6a1ebd4052a1850477b9be52552d0946e44618b931addf8dc09b06806499dc214b68ce982e76bed44c49e8a64b6aeda6a62b4b2ecc595063011913a22"}}, &(0x7f0000001940)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001a80)={0x1c, &(0x7f00000019c0)={0x0, 0xa}, &(0x7f0000001a00)={0x0, 0xa, 0x1, 0x7d}, &(0x7f0000001a40)={0x0, 0x8, 0x1, 0x54}})

4m46.8290811s ago: executing program 4 (id=19184):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000000000008404"])
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) (async, rerun: 64)
futex(&(0x7f00000040c0), 0x86, 0x0, 0x0, 0x0, 0x40) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x8c, 0x0, &(0x7f0000000040)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b4dd5cd5a1aff55022ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e6456a070522b7984c056dc37f2ddf7b51121341da98e6a81b8e5b39e41544913c55d8084288577f0948e2b00000000f72d3a61bd64ab4b43dabdb28767339800"}) (async)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd})
unshare(0x2040400) (async)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
r8 = fcntl$dupfd(r7, 0x406, r7)
setns(r8, 0x2000000) (async)
ioctl$ASHMEM_PURGE_ALL_CACHES(r5, 0x770a, 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

4m46.704764792s ago: executing program 4 (id=19189):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
r0 = syz_clone(0x40004000, &(0x7f0000000000)="36f1c5adaf3b5f295de7d84086f4c5c4e5dd29ae08f5096c39ea93fc6297cfa95b2bf7837586c62145ef10e0d6183233160b9617c5f1087bbd7c8d69ded2cb9ccfb36c3309213ab0a75fab4107790a42cdf05e22f320e2f6624cd103ed009f1f0637c03fc2e0600c595157a7bbabc2799750bedf7bdb8e5daa4687091c5d087328d5a1b4cde2e264", 0x88, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="ba369292bbb8c82862e863680738b2cf38e67ef9212df1e47156c85f8729e4292588d07eebfb5594e956f53ab4654b467b15d580a0ad24b6b0eeedea65b69d00e04ee1c3df5e301a7fb62bef32bb0511006c321070ace0998a16ed8ef534b8494d1c5f10ce2bd0047edf1538d7354f7c93217b0ad41a26376c963d33eb0d3107a61e5436f7860841efa214ba126b39a6321b7d5a3e61019429470de8651633a14329d4ba034238c1")
sched_getattr(r0, &(0x7f0000000280)={0x38}, 0x38, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004100)='/proc/tty/ldiscs\x00', 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000052000100000000000000000002000000090001"], 0x20}}, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000020c0)={0x0, 0x14, '\x00', [@hao={0xc9, 0x10, @remote}, @generic={0xc, 0x90, "fbd4a8ecbc761c2f58f8b8a6e8abcdffdd1c07c0387c18d32f0a414ba875c838936509ea1bcd00e2a4342ef12e288b229d304add981e490f2ca3d24fd6569b641a014023daa2f352c1fbf928854cde7b81f5a2b0cbe2f756dbe382884b87f696c864dbdfb9bf3605d83db792e68ba068bcefc912a86e5d1b22011ad61628376ff993db26cbaeed037e6eef5433fc61f4"}]}, 0xb0)
read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x3a)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)

4m46.142610193s ago: executing program 4 (id=19201):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, 0xfffffffffffffffe)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f00000000c0)="1c0000001c005f0214fffffffffffff8070000000d00000000005200", 0x1c) (async)
write(r2, &(0x7f00000000c0)="1c0000001c005f0214fffffffffffff8070000000d00000000005200", 0x1c)
accept4(r2, &(0x7f0000000280)=@rc={0x1f, @none}, &(0x7f0000000080)=0x80, 0x80000)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') (async)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00')
read$FUSE(r3, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34)
epoll_create(0x3) (async)
r4 = epoll_create(0x3)
ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x40088a01, 0x0) (async)
ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x40088a01, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@weak_binder={0x77622a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

4m45.633023762s ago: executing program 4 (id=19207):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'caif0\x00', 0x1})
r2 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x1c8, 0x1e, 0x400, 0x70bd28, 0x0, {0xa}, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="b42f0a21c4cbec71fa6ce1623944789806c42e26966bd65f15e83739d800147eabc7040c00558e4a449c3b57760e6e94c64f9178ef6103e79440abec1ba9cc8d12001e1b246529f851a4f5372d72226855f5121a533382e97785425fbee07c420a7bb800ddfb57bcd7fb6dc5e4c4de9ff535ab623632ca06d258ade59ced45d43ca785b91c8e251872a2e96924574c909c597f3f484e534539e6f8c893a050010012d2", @generic="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"]}, 0x1c8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = fcntl$dupfd(r0, 0x406, r1)
mkdirat(r4, &(0x7f00000001c0)='./file0\x00', 0x1c0)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x40002022)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
sendmsg$inet(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x8810)
r8 = socket(0x10, 0x2, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="240000001e000503"], 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0)
socket$unix(0x1, 0x1, 0x0)
connect$unix(r5, &(0x7f00000002c0)=@file={0x1, './file0/../file0\x00'}, 0x6e)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000540)=@v3={0x3000000, [{0x8, 0xd}, {0xb, 0x4}]}, 0x18, 0x3)
r9 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(0xffffffffffffffff, &(0x7f0000000640)={0xa, 0x4e23, 0x80, @loopback, 0xb}, 0x1c)
r10 = dup(r9)
bind$inet6(r10, &(0x7f0000000240)={0xa, 0x2, 0x10000, @empty}, 0x1c)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)

4m44.68045121s ago: executing program 4 (id=19219):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="126d0413c5000000000001090224ec000000a00609040000810300030009210000280122070009058103000249081100000000000000"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002207670000851f82c65f3878"], 0x0}, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40082104, &(0x7f0000000240)={0x0, 0x1, r0, 0x6}) (async)
syz_clone(0x890800, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000001080)={0x28, 0x0, 0x0, @local}, 0x10) (async)
connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) (async)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee0000, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x1000, 0x2, 0x3, 0x9, 0xa, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0x80}, {0xeeee0000, 0xdddd0000, 0xb, 0x0, 0xb0, 0x3, 0x4, 0x1, 0xc, 0x0, 0x2, 0x5}, {0x7f778000, 0x2000, 0x8, 0x7c, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x9, 0x4b}, {0x80a0000, 0xd000, 0x0, 0x48, 0x4, 0xfd, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0xeeee8000, 0xd000, 0x9, 0x9d, 0x3, 0x6, 0xc, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x85, 0x3, 0x3, 0x2, 0x9, 0x54, 0xf, 0x2, 0x7}, {0xeeef0000, 0x1}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0x3, 0x401, 0x10000000007, 0xc5]}) (async)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106d04870a40000102030109022d000101030008090400030103010032761e990b99289204080921ff078101221a0909058103100100ff06"], 0x0) (async)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x1) (async)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) (async)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r4, 0x0) (async)
ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0xd1560)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0xfffffffc, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"})
r6 = syz_open_pts(r4, 0x123003)
r7 = dup3(r6, r4, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000003c0)={<r8=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={r8, 0x2})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={r8, 0x1, r3, 0x6, 0x80000}) (async)
fcntl$getown(0xffffffffffffffff, 0x9) (async)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

4m44.356591017s ago: executing program 4 (id=19228):
getgroups(0x3, &(0x7f0000000000)=[0xee01, 0x0, <r0=>0xffffffffffffffff])
setregid(0xffffffffffffffff, r0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300) (async)
ftruncate(r1, 0x1) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0xfffffffb, 0x4}, 0x1c) (async, rerun: 64)
close_range(r1, 0xffffffffffffffff, 0x0) (rerun: 64)

4m44.287891208s ago: executing program 47 (id=19228):
getgroups(0x3, &(0x7f0000000000)=[0xee01, 0x0, <r0=>0xffffffffffffffff])
setregid(0xffffffffffffffff, r0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300) (async)
ftruncate(r1, 0x1) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0xfffffffb, 0x4}, 0x1c) (async, rerun: 64)
close_range(r1, 0xffffffffffffffff, 0x0) (rerun: 64)

4m12.908485438s ago: executing program 6 (id=19634):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000000c0)={0xffffffffffffffff})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x2, 0x7}})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000000c0)={0xffffffffffffffff}) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x2, 0x7}}) (async)

4m12.872462288s ago: executing program 6 (id=19635):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x4, 0x3}}, 0x10)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x80002}}}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0)
r4 = syz_io_uring_setup(0x1e10, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080))
r5 = epoll_create1(0x0)
epoll_pwait2(r5, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}], 0x1}, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)
r7 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r7, &(0x7f0000004700)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x2b4, @remote, 0x8}, 0xa, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000500)="ebce8f4a3ad6f79b42231f8a6ae6d1795c143943bf58052d91d293163a2c070ef977e96f475ea53b479d22cc60700215c356a383d8fdb6da91ef81ab4f4d9351", 0x40}, {&(0x7f0000001640)="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", 0x559}], 0x3}}], 0x1, 0x80040c4)
getsockopt$inet6_tcp_int(r7, 0x6, 0x19, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r8 = epoll_create(0x800)
r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r10 = fsmount(0xffffffffffffffff, 0x0, 0x3)
clock_gettime(0x0, &(0x7f00000002c0)={<r11=>0x0, <r12=>0x0})
ppoll(&(0x7f00000001c0)=[{r8, 0x4090}, {}, {r9, 0x4}, {r10, 0x200}, {r2, 0x4012}], 0x5, &(0x7f0000000240)={r11, r12+10000000}, &(0x7f0000000280)={[0x1]}, 0x8)
r13 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0)
ioctl$BLKRRPART(r13, 0x125f, 0x0)

4m12.575940134s ago: executing program 6 (id=19639):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0xcca, 0x1, 0x1000, 0x6, 0x17})
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
getgroups(0x2, &(0x7f00000000c0)=[0xee01, <r2=>0xee01])
setfsgid(r2)
setfsgid(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a0000000202000000000000240009801c00000000000000140015"], 0x40}], 0x1}, 0x0)
pipe2(&(0x7f0000001b40), 0x4800)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r4 = inotify_init()
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x7}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000001a80)=[{{&(0x7f0000000040)=@can, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/216, 0xd8}, {&(0x7f0000000380)=""/95, 0x5f}, {&(0x7f0000000580)=""/139, 0x8b}], 0x3, &(0x7f0000000640)=""/46, 0x2e}, 0x8}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000680)=""/88, 0x58}, {&(0x7f0000000700)=""/56, 0x38}, {&(0x7f0000000740)=""/72, 0x48}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/168, 0xa8}, {&(0x7f0000001880)=""/237, 0xed}], 0x6, &(0x7f0000001a00)=""/105, 0x69}, 0x79f}], 0x2, 0x22, &(0x7f0000001b00)={0x77359400})

4m12.555459654s ago: executing program 6 (id=19640):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1020000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="cc0000001b000100000000000000000000000000000000000000000000000000fe88000000000000000000000000000000002f00"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000e300000000080000000000000001000000000000000000000000000100000000000000000000000081dd0000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffffff07000008000000000000000000000000000000000000000c0015005c"], 0xcc}}, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x56, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @register_looper, @acquire, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={@fd, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/171, 0x0, 0x2, 0x34}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000100)}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0xb}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000000380)}, 0x40}], 0x0, 0x0, 0x0})

4m12.500421465s ago: executing program 6 (id=19642):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000050000000000000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000020000000403"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x70bd28, 0x25dfdbff, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x80004}, [@migrate={0x50, 0x11, [{@in6=@private1, @in=@loopback, @in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000000001010400000000000000000a000000300001802c0000801400150000000000000000000000ffff00001a0014000400ff010000000000000000000000000001887a"], 0x44}}, 0x74800)
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="60010000", @ANYRES16=r5, @ANYBLOB="050000000000030000000f00000008000300", @ANYRES32, @ANYBLOB="05010e0080000000080211000001080211000000a968dcf6a1cb1cac92e653759e82003bd9ed8b651b00000000000000000000640001000106818209988b06030134040603070200fc0005b40fa6087b0dc7d970f3776a19960a4c018c5f44236601cf3ddba58218f0a1e32f6c8f76de669b0261d74bda500d6a1636efa17b9e5a64ddd2b0a421a49877c5a5855f09fbfb1dfcdd3ca510e01deb"], 0x160}}, 0x0)
r6 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0)
splice(r3, 0x0, r6, &(0x7f0000001580)=0x3, 0x9614, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCFLSH(r7, 0x80045438, 0x300000000000000)
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x2, 0x2, 0x3fffd, 0x3}})
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000102505080040000000010109025100010100000309040000ff02020000052406000005240000000d240f0100000000000000000004241305052401020804241300"], 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x90041, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r9, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x14)
socket(0x22, 0x6, 0x594)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x28, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0xffffffffffffffaa, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

4m12.393190757s ago: executing program 6 (id=19645):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto(r0, &(0x7f0000000300)="4625bb7328291e27241d5e90a0e4f786d5e28b5af9798b0011691dc45f020e74dfe695eaa8b21bf696c4172679af9fbebebeadf3f63f3cff51e31835d1e764bc726794dbf68c7dff17b92f01be4a847434477d29bda8268314722bf3db3c942259e42b7483ddd643b5adb4669476e969a786b2dce51872be184927eb5046aa12290af71829b2b0b16e346e743d869b125c5ac9ce1b90179eb66a7fc54ba9411187dd8beefef3aa382637103d99a2076f7d615475c100cf3dccf2eccacf20aa5dfa577ab1980dfa4304cf95e68602ee8e573defef035bbf9f34cbc01345", 0xdd, 0x2004c845, &(0x7f0000000440)=@sco={0x1f, @none}, 0xc6)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
flock(r1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x5489, 0x6})
write$vga_arbiter(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7472796c6f636b20696f0062d1d4002c8d0394e1df34ce1dce49a9450a66a392c6c40ebcda572cd7424c5f9aadf2cb3e48551237a46a89032b8b6c68976fe046206f8efc89ad19148d019047e1907db9a0666861238251b39c7bf78b02e4bea5b35023f6418f3eaaa5675c925b266ec11c93cb205487285e84b6414c38255893656d1e7e5202cff96b"], 0xb)
write$vga_arbiter(r2, &(0x7f0000000280)=ANY=[], 0xe)

4m12.383535217s ago: executing program 48 (id=19645):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto(r0, &(0x7f0000000300)="4625bb7328291e27241d5e90a0e4f786d5e28b5af9798b0011691dc45f020e74dfe695eaa8b21bf696c4172679af9fbebebeadf3f63f3cff51e31835d1e764bc726794dbf68c7dff17b92f01be4a847434477d29bda8268314722bf3db3c942259e42b7483ddd643b5adb4669476e969a786b2dce51872be184927eb5046aa12290af71829b2b0b16e346e743d869b125c5ac9ce1b90179eb66a7fc54ba9411187dd8beefef3aa382637103d99a2076f7d615475c100cf3dccf2eccacf20aa5dfa577ab1980dfa4304cf95e68602ee8e573defef035bbf9f34cbc01345", 0xdd, 0x2004c845, &(0x7f0000000440)=@sco={0x1f, @none}, 0xc6)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
flock(r1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x5489, 0x6})
write$vga_arbiter(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7472796c6f636b20696f0062d1d4002c8d0394e1df34ce1dce49a9450a66a392c6c40ebcda572cd7424c5f9aadf2cb3e48551237a46a89032b8b6c68976fe046206f8efc89ad19148d019047e1907db9a0666861238251b39c7bf78b02e4bea5b35023f6418f3eaaa5675c925b266ec11c93cb205487285e84b6414c38255893656d1e7e5202cff96b"], 0xb)
write$vga_arbiter(r2, &(0x7f0000000280)=ANY=[], 0xe)

3m1.140925899s ago: executing program 8 (id=20835):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000001180)={0x2020}, 0x2020)

3m1.114635279s ago: executing program 8 (id=20836):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000480))
ioprio_get$pid(0x2, 0x0) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x80000000000003}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (rerun: 64)

2m59.090531758s ago: executing program 8 (id=20851):
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = creat(&(0x7f0000000380)='./bus\x00', 0x124)
sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40080003}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x20, r0, 0x608, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6d}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x8008000)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8001)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r4 = socket(0x8000000010, 0x2, 0x0)
write(r4, &(0x7f00000006c0)="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", 0xfc)
sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000640)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)={0x17c, r0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x60}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x110, 0x2a, [@prep={0x83, 0x1f, {{}, 0x0, 0x8, @device_b, 0xfffffffa, @void, 0x4, 0x0, @device_a, 0x5}}, @peer_mgmt={0x75, 0x18, {0x0, 0x2, @val=0xe, @val=0x40, @val="7f960078bae5da4fd03d5dca39c17615"}}, @random_vendor={0xdd, 0xaf, "a29d2263ed7c0ac490dd60f4464220ccc60be662f10413744cf9b08992f1876bd13ad695e2ae95d36bac28f5bd1ee59a2c262ab3740ab20c7ccef72647b12dedeb19604e12f8bd23ef710f8f40679abec39a39d353289ec77ced3e38120c648bcc21928655114b275f0c5651a9441b84161c2437fa186e5f274081a350f102a8927c8b574afdcfb959a2bbdf5d6e68b884c67f66bf35ffc513e16b47caa7020b8b5d08adcc852b8971b622ce602c1d"}, @peer_mgmt={0x75, 0x16, {0x0, 0x0, @val=0x200, @void, @val="95afb295e9d25f7af314ca367347379a"}}, @mesh_chsw={0x76, 0x6, {0x1, 0x1, 0x1b, 0x3}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x8, 0x34, @random="4cf872d2"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x13, 0x34, @random="197f2b58fb1b36faa98b8ea94247ee"}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048080}, 0x40000)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r5 = getuid()
setreuid(0xee00, r5)
mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x311000, &(0x7f00000001c0)={[{@redirect_dir_on}, {@verity_require}, {@metacopy_off}, {@xino_on}]})
r6 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0xa, 0xffffffffffffffff, [0x400, 0x6, 0x1000000, 0x7, 0xa6e, 0x2, 0x3, 0x0, 0x7, 0xe]}})
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r8, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
read$FUSE(r6, &(0x7f0000004a00)={0x2020}, 0x2020)
r9 = syz_clone(0x2204000, 0x0, 0x0, 0x0, 0x0, 0x0)
capget(&(0x7f0000000500)={0x20071026, r9}, &(0x7f0000000580)={0x7f, 0x3, 0x4, 0x307, 0x0, 0xfff})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2100, 0x0)
sendmsg$sock(r6, &(0x7f0000000300)={&(0x7f0000000140)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x4001}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)="26dd4039316e18ab9b1829873b39acfed74bc714c63ed4e77f300281d9ed045d", 0x20}], 0x1, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}], 0x30}, 0x800)

2m54.178003982s ago: executing program 8 (id=20890):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x40)
writev(r1, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000500)="9092", 0x2}], 0x3)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x800)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0)

2m52.68346264s ago: executing program 8 (id=20896):
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x400, 0x9) (async)
pipe2$9p(&(0x7f0000000580)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200000, 0x40)
openat$incfs(r2, &(0x7f00000002c0)='.pending_reads\x00', 0x0, 0x12)
renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x7) (async)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async, rerun: 32)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (rerun: 32)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000000)={0x60, 0x3, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5ea7d5a2, 0x0, 0x0, 0xfffffffffffffffa, 0xa, 0x0, 0x55, 0x8})
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 64)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) (rerun: 64)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r6, 0x540b, 0x2)
write$FUSE_DIRENTPLUS(r5, &(0x7f0000001280)=ANY=[@ANYRESHEX=r0], 0x138) (async)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async)
r7 = dup(r1) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x401c5820, &(0x7f0000000080)={'bridge_slave_1\x00', @remote})
write$FUSE_BMAP(r7, &(0x7f0000000140)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0x10c) (async)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000001200)=ANY=[@ANYBLOB='tranc=fdKrfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',debug=0x0000000000000007,\x00']) (async, rerun: 32)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) (rerun: 32)
setresgid(0xee00, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x44180, 0x72)
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100)

2m49.729274937s ago: executing program 8 (id=20920):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x9, 0x2, 0x17}, @fda={0x66646185, 0x4, 0x2, 0x27}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/25, 0x19, 0x2}}, &(0x7f00000000c0)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0})

2m49.659553258s ago: executing program 49 (id=20920):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x9, 0x2, 0x17}, @fda={0x66646185, 0x4, 0x2, 0x27}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/25, 0x19, 0x2}}, &(0x7f00000000c0)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0})

4.16320686s ago: executing program 5 (id=22796):
r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
ppoll(&(0x7f0000000000)=[{r0, 0x400}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f0000000100)={[0x1]}, 0x8) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) (async)
sendmmsg$inet(r6, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001380)="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", 0x11a}, {&(0x7f0000000b40)="518cf972f4602550447422ed8ab8e292d2b9e8f110c883251bad904148ec2972fe137bd155df9280115c15ef84b13e47e1f03396189a1c190470ee546a28d08515a098686a73a9ad70f822e5140fbfb110391250b8a84802dbf4588dc39d82195d48715ca048c7d8c59a24b6243810e456ba666105704711b987f85fb409a72e0b54194f1fd5a802e4692a1d90af11dc51df1ddced4389edb8073eb6f00f3ed16c292f5ba1ca872d781fd40050ce60814a7b3396efbe6fd294f4cd171446572145fe460ae70a488caf82d6f939612739d6319c182c4346b63cb07a30b4bfcaccd9dfe7d9c9bb755cbdbcee5caa", 0xed}, {&(0x7f0000000380)="5132ac5e8205378f905fac4b0f7b0ad4ff080df00b5a6655e32124d51a45ebebdf4a86101587d502357bfc43f44098742b83caede42f6e007330dc8ab67371c65d39bc126b8f9bf17dce0ba9d14f263efa7056bb8a0291a4842e42342519a9e795b7d8aee13edfa09bd3f9ae3bdc4c2dccc274c0cf4fe85fa17f46ff8c017571490f296ef2ea1cf31486bd4167bb33cb9a5e1f96de2ee8af5074695ddf5d1ec4d17c9508cdd9e77ec5bc62a820e263a31521f0b9031c9e1e1491f0c99b44960df2aaee22480355aa20d280d1ed54ae539055ca1e20a57f81db185fa207", 0xdd}, {&(0x7f0000000280)="661da68e4cccac69431df174bbce91246fce262b3de6a53334d329a142ae0f304e4fbde8fab4d68bedcd182b41227278c65f7de3723a93dbbaeb901b447fb35a9f3f4b671a3e3929c119f9deec5e46cdbe5cac679cad88c9aa61bc7ffd219a18b36ef0bf5ca45da80aa46274c5cda17a4b8588c492dcdd43dee797fe7debf7c1143177d4f4b02255ca5a46", 0x8b}], 0x4}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000640)="72126509caec095807090dba7a3967d9884ce638db1b533a4b22559bf9166ba1568930c85350c8e4c4bc40d2f21c8042ef5f78d0c8450382c66ea27d01387272ddb6350a1b9df7af8dc636bd2a4e14c5ead6ff46562bbb74e63c835b9827f0b5be88de7ea0b09ad394495e7a2e45da891ae90f972844a04ac9427903a3102cfc7d7ebe01950d7c3c1a1df3b5c2c7940b81f27ed3e5bbb9db01d84e36e67763cde8eb69ed38a8401e2c6daa808897bf60b8b795aac9afe46e918edb28ea6fe06a6afcfad209e55826dc2000a46b358665fdfee08e82c24a22ef3e7c3a5400"/232, 0xe8}, {&(0x7f0000000d80)="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", 0x10b}, {&(0x7f0000000200)="2807eb239ed0436e9e6e49955dfb4a4d3e1fb254c484ed2da2060d16fe61161b8cdf744a18e00a9b61fc0e090f175efa", 0x30}, {&(0x7f0000000480)="be604475647d7a29472269b80db06ea99d16a1e23f58504441c02e955c5499b328b1bd19909555679e3bbb39e23235037223da6566635d09c0a7192acce97d05ae3077ffe54c98d0c06a98319bc853f4c0177977cff5e33badeed08f6d2ff80d19c30d111c2b98cd96a0f57677161d34c64fb37365fb0ffa931bc4915658f185a359953910493f692868f8ff95a8", 0x8e}, {&(0x7f0000000c40)="38b4526ae50b033bea476dbff6a39da0edcb079b0fda4152d05cdd28639ff976bf8594edbe9b6b439ddfb8143ab5819a9cde4005fc8adb41ad29a3369003f5", 0x3f}], 0x5}}], 0x3, 0x2000c044)
sendto$inet(r6, &(0x7f0000000540)=';', 0x1, 0x80, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) (async)
close_range(r1, 0xffffffffffffffff, 0x0)

4.130543711s ago: executing program 5 (id=22798):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0})
fcntl$setstatus(r0, 0x4, 0x2800)

4.096281331s ago: executing program 5 (id=22799):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000e0001000500000000000072080003000500030000", 0x39}], 0x5a) (async, rerun: 32)
getsockopt$sock_int(r0, 0x1, 0x2b, 0x0, &(0x7f0000000580)) (async, rerun: 32)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05"], 0x0) (async)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000180)={[0x7f, 0x2, 0x6, 0x9, 0x7fffffff, 0xfffffffffffff661, 0x5, 0x1, 0x9, 0x6, 0x1, 0xb, 0x5, 0x2, 0x4, 0x9], 0x2, 0x210})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})

3.520799043s ago: executing program 5 (id=22802):
r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
cachestat(r0, &(0x7f0000000100)={0x0, 0xfff}, &(0x7f0000000200), 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x1, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004b80)=[{}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001380)="52348bf9812fc081678b5760a4c4967393fd8939aaf12a894c5424df616c4eea14fbac2dad114a75c405d89fafa5715b56abba4bbceca456d8225e3f6eb57a03287e74c7bd74e40e3fda3150f92d181e7c82cb2f8ea0416fc4c0f111161cdb9a52911925644e25f871d02f403c83214f830f93b30b874e75cab53f1ed7871f21c0d654a47fab0637868517d7e8d9915e99b4dc2dcafdcb2ef2a012ec95418a544c32181fb969e01318e00a12fd1b2a0eb57bcf7de086e320f2d4be4e1453010be849e4d7dba41558329699aacd3d1c7d97b9bf74caf8b7946647309d209558b1965ef7ea4576ec0e289b73c2089310271d0a67d88a312f4cb0194c4f28ec3c2fe269311d0cec1fe0efef17d376d183b08e392b6cb58e930e1f959dd4528ec95350fc86e5297e6d59af036b132df17833881238ba8692842a8da4d5b4a37c94915331143d9128a197495433c2f550b4455a9ae03b937305e192e861ca3a60f9b3a14288e3daeb6936593485388a4aaab39b3843ee2960d9c8728eafb904333e7b78a270480e8dd89b93fe5a37ca9c85a0e6e82bd603efb596c4cf0b791013cff43bf314e11a44d5f9c4fdad8a2fcdb04f76de29a50a0428148f4bc3eff1e84d25ea95dabddfba6162860a3c3389ee366450b6bcf1409f920caf1be5702af0402e2cef4896d9544a26ebfab694d7a47eca55bd2f62e7d7eb1f6061f7e441df5ab31344f02179764822036ef706133ea1a6380e042f074b2b0ddcc578cb8a668a846b9d5792f8d434f8ec7b562594587c49e8e6b3450e545fc070644bd06a36106cdb63f9e8ad7ae50b5b44e47f377961f5e29392330fb40d63c911ffd13e094f0452cc5c77b0731b56211b2d8a7554f6077ae593626a54f56d6dea49058fd1d48db02a7b33d50474b58a7e14e6a4d935bfaf4865f00074d59ece4b2d5f5e768e952733ee2c34b3e4b0be230f792f8b16f872afbbd155fe5314d4f54ea7b747eb2cd2410db7464c73ecd4815cda0bcc839fb603bb3f0c04b2d233b54a78b7aa3db9745b69c8788e155cc2ef39bcf8491101058093c842df8cd0ac03d29e6d6902187f31eaf960b306debf734d8d26cc34a7e62c64a98b5a8a6102142af724db839aa7f63f7e0d81f5213d4d5722088be5b5ea6b1ee19b148d1f8b7172cd507533360d2d668e85252463b1d61302a75a7e3dc5e8c607a1026c66c2e8a6cbd34e3e5e99890da6cf07ed1247a07f004a6b1d643e00be7c156127bd7b39326e84ea6963d0530a4538eea35cf8048440a65148f1fe6314020bbe9c9358242589360f", 0x39e}], 0x1}}], 0x2, 0x4)
sendto$inet(r1, &(0x7f00000002c0)="d7f0fcc5819f12ed780b80f87505bfe5a0109e5ffc756f3593a84cfd650fff6fd7fe3c6cf2ec30abed8e8157b8f52cf9bf9151c0d649c55312b1f122ad5535fb2524a62a86157173253e8473aa97a0890c4885c07358555d5c10e36acc448a299998caff3235339d0f90a4dbd5978b6e21d2e54e70338450d816ea738b7074ddd3446865486b2064fa39a36e90e5d51300c84d669f66c3da40586102b6629c5058d6483f3e6d383cdec27abdec404f06487adc4c8ffdff1864bc3aa8", 0xbc, 0x20000800, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r2 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="4011060000e7694acf754ab74a4334099a3179225b2f2070b28ee5776015bd98f0832c73e33c8ad90c8cbc7f107fd51a697617f2657b4e6c965b41f4fd1ae89a94094841e615ff426babf63070a124cf77eee740e81ee2e4807c6dc9a71272341e10be7ed71e351009854d8c73d9e3a0ab7b7044bab69c66fd9d16f1256c89"], 0x0, 0x0})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace(0x4208, r5)
write(r0, &(0x7f0000000080)="01", 0x1)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
readv(r6, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2)

3.091974731s ago: executing program 2 (id=22811):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
unshare(0x20000800)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)

3.017244262s ago: executing program 2 (id=22812):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000100)=0x1)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

3.016788042s ago: executing program 2 (id=22813):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1c)
ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000080)=@attr_other={0x0, 0x10001, 0x866, &(0x7f0000000040)})
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, <r3=>0x0})
r4 = syz_clone(0x400a2000, &(0x7f0000000100)="cbc05d65eed37d14163a0a859c3cfd2c6411197781bb5bbad59da26bbb189bac99d6dd5ee68e6052b8c3b112f51da44724f2a6c10700bcea8f16ad283021d2f7ab6e6c2f30e48f793bd32571a5245b667952ae43b4b0f9fe95fdccb0cc08", 0x5e, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="2d8b203e10298f0d2089a94fe0")
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000240)={r1, r0, 0x9})
write$tun(r1, &(0x7f0000000280)={@void, @val={0x1, 0x1, 0x40, 0x4, 0x1}, @mpls={[{}, {0xc}, {0x9}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}], @ipv6=@tipc_packet={0xe, 0x6, "059a6c", 0xf6, 0x6, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, {[@dstopts={0xa7, 0x9, '\x00', [@hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4e}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1a}}, @pad1]}, @dstopts={0x5c, 0xb, '\x00', [@pad1, @generic={0x4, 0x50, "6261c27f46ea13a29d2d368e8384423d13c73ab44bdc1ea640076e17d79825ec625cc7ef84fe519cb3b57845a5dcd5a7a4fa2aa7c0821b2ea69c2928b5e660af6b9a3d770d933e7214ed347f4e6917da"}, @enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}], @payload_mcast={{{{{{0x36, 0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0x1, 0x6, 0x73a5, 0x3, 0x4e24, 0x4e24}, 0x1}, 0x1}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x13c)
r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$UI_DEV_CREATE(r5, 0x5501)
statx(r1, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x40, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
quotactl_fd$Q_SETINFO(r1, 0xffffffff80000600, r6, &(0x7f0000000640)={0x8, 0xa67})
socket$nl_audit(0x10, 0x3, 0x9)
write$rfkill(r1, &(0x7f0000000680)={0xb, 0x4, 0x1, 0x1}, 0x8)
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f00000006c0)={0x5, 0x4, 0x2000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x1b, r5})
mount(&(0x7f0000000780)=@sg0, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='nfsd\x00', 0x4840, &(0x7f0000000940)='/dev/rfkill\x00')
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0xc)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece)
ioctl$KVM_SET_CLOCK(r8, 0x4030ae7b, &(0x7f0000000980)={0x8, 0x4, 0x9, 0x8000000000000000, 0x1000})
ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r1, 0x8004af79, &(0x7f00000009c0))
ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f0000000a00))
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000ac0)={'erspan0\x00', &(0x7f0000000a40)={'tunl0\x00', <r9=>0x0, 0x8, 0x8, 0x80000001, 0xffff604a, {{0x13, 0x4, 0x2, 0x6, 0x4c, 0x65, 0x0, 0xf9, 0x29, 0x0, @loopback, @remote, {[@noop, @rr={0x7, 0xb, 0x5c, [@loopback, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x26, 0x3, 0x9, [{@multicast2, 0xc}]}, @ssrr={0x89, 0x1f, 0xd4, [@private=0xa010102, @empty, @broadcast, @rand_addr=0x64010102, @loopback, @private=0xa010100, @empty]}]}}}}})
setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000b00)={@loopback, @private=0xa010102, r9}, 0xc)
sync_file_range(0xffffffffffffffff, 0x1, 0x9, 0x7)
ioctl$VHOST_VDPA_SET_VRING_ENABLE(r5, 0x4008af75, &(0x7f0000000b40)={0x3, 0x6})
ioctl$VHOST_VDPA_GET_VQS_COUNT(r8, 0x8004af80, &(0x7f0000000b80))
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c80)={'ip6gre0\x00', &(0x7f0000000c00)={'ip6gre0\x00', <r10=>r9, 0x29, 0x2, 0x1d, 0xb, 0x20, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x8000, 0x4, 0x6}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x154, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4001}, 0x20040090)
preadv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000f00)=""/7, 0x7}, {&(0x7f0000000f40)=""/244, 0xf4}, {&(0x7f0000001040)=""/210, 0xd2}], 0x3, 0x178, 0x5)

2.979757272s ago: executing program 2 (id=22814):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtaction={0xb8, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0xa4, 0x1, [@m_ipt={0xa0, 0x4, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x101}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x7fffffff}]}, {0x16, 0x6, "e5b895048d6423d35c9e0a17335f694172a7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x6400c8c1}, 0x9000) (async, rerun: 64)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async)
read$FUSE(r1, 0x0, 0x0) (async, rerun: 64)
r2 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = fsmount(0xffffffffffffffff, 0x0, 0xe) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3057a98ae65337000000", @ANYRES16=r5, @ANYBLOB="00012cbd7000fddbdf25110000000c000380080003000200000008000400050000000800060004000000"], 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x4000010)
sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r5, 0x226, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240008b4}, 0x20004000)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020100030e0000002cbd70000000000005000600332000000a00000000000000fe800000000000000000000000000018000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000020013"], 0x70}, 0x1, 0x7}, 0x4000000) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async, rerun: 32)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
openat$cgroup_int(r6, &(0x7f0000000080)='io.max\x00', 0x2, 0x0)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)

2.786716137s ago: executing program 2 (id=22815):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, ':'}}], [], 0x6b}})
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00')
r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x700}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0)
sendfile(r4, r3, 0x0, 0xffffffff)

2.585209251s ago: executing program 2 (id=22816):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) (async, rerun: 64)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b"], 0x0) (rerun: 64)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async, rerun: 64)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 64)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) (async)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async)
ptrace(0x10, r3)
ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000005480)={<r4=>0xffffffffffffffff})
ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) (async, rerun: 64)
close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64)

1.818286915s ago: executing program 3 (id=22822):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x9c2, 0x2, 0x8, 0xffffffffffffffff, 0x8})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x3, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x6003, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x400000000000001c)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r7, 0x29, 0xcc, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424", 0x21)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000002201"])
openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x408)
r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r8, &(0x7f0000000280)=""/163, 0xbb)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1})
r9 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x100})
ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES16=0x0, @ANYRES8=r6, @ANYRES64])
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="bc010000190001000000000000000000fe8000000000000000000000000000bbfc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000001100000000000000000000000000000000000000000000000100000000000000040105007f000001000000000000000000000000000000003c00000000000000ac1e00010000000000000000000000000000000000000000000000000000000040000000fc000000000000000000000000000000000000003300000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000002b00000000000000ac1414aa0000000000002937ebad9c06f7b10752d3"], 0x1bc}}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000340)=@ethtool_link_settings={0x2, 0x81, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20, 0xc, [0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x10000]}})
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x2224400, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}'])
umount2(&(0x7f0000000400)='./file0\x00', 0x8)

1.641046548s ago: executing program 3 (id=22823):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
pause()
getpid()
sendmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x8841)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r4, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendto$inet6(r6, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be0402050605fe100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000440)={"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"})
close_range(r0, 0xffffffffffffffff, 0x0)

880.454913ms ago: executing program 9 (id=22827):
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8)
fchown(r0, r3, 0xee00)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x9, 0x0, &(0x7f0000000000)=[@register_looper, @decrefs={0x40046307, 0xfffffffd}], 0x0, 0x0, 0x0})

870.008633ms ago: executing program 9 (id=22828):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer], 0x3e, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd(0x390)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x1000, 0x4, 0x0, r3, 0xf})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="88010000", @ANYRES16=r5, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0xd0}, 0x8080)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer], 0x3e, 0x0, 0x0}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
eventfd(0x390) (async)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x1000, 0x4, 0x0, r3, 0xf}) (async)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="88010000", @ANYRES16=r5, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0xd0}, 0x8080) (async)

839.374454ms ago: executing program 9 (id=22829):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000040)={0x40, 0x30, 0x4, "efb865cb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
sendfile(r1, r1, 0x0, 0x7ffff000)
ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f00000000c0))

697.196067ms ago: executing program 3 (id=22830):
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0)
r1 = dup(r0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x62)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[])
open(&(0x7f00000000c0)='./file0\x00', 0x4840, 0x7047cf88f663e089)

679.796227ms ago: executing program 3 (id=22831):
mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f0000000040)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}]}}) (async)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000080)="4d01000000000000000100e50414090b0092000000000000005ee4cc040c1e5fcc2eae7fc0dacea9ed192143db2c8381a3e349d8", 0x34, 0x41881, &(0x7f0000000340)={0x11, 0x0, r1, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) (async)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00')

610.432548ms ago: executing program 3 (id=22832):
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x4, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf8, 0x2, 0x7, 0x5, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x4}, [@nested={0xe4, 0xe, 0x0, 0x1, [@typed={0x8, 0x12e, 0x0, 0x0, @u32=0x7}, @generic="1be6f6598443c1afc876fea927c206429e4bb6657298a3eaa2bb336821bef4d9d4578db8eb6dac22ac063ac24c3eb2fe33577e15300a1a690d807874085e09215d7aa3c0c79463d44be10ef1ae13f1e6f802be57c08c1279c7c3e557f82004c1efe9474e9461cc4edad116dadac92ee4cb0f9d8bfeca9b2a4c6e976667a69e0e31c7f00a650eda18bc3c6064db44588b1c640ce3e800bafb55b9e8679f99327ba7a3caab789f80f9a73f56e53a2d2e3af734a5a1cb39ba1f", @typed={0x8, 0x83, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x4, 0x69}, @typed={0x8, 0x13f, 0x0, 0x0, @fd=r0}, @typed={0xc, 0xbc, 0x0, 0x0, @str='/)][/-]\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x854}, 0x0) (async)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0xa5702000) (async)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000200)={0x0, 0x8001}) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001200), 0x8a04, 0x0)
ioctl$BLKGETNRZONES(r1, 0x80041285, &(0x7f0000001240)=0x7) (async)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001280)=<r2=>0x0)
capset(&(0x7f00000012c0)={0x20071026, r2}, &(0x7f0000001300)={0x8, 0x0, 0x386e, 0x200, 0x5, 0x7}) (async)
r3 = creat(&(0x7f0000001340)='./file0\x00', 0x11)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$pppl2tp(r3, &(0x7f00000013c0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @private=0xa010100}, 0x1, 0x2, 0x2, 0x2}}, 0x26)
r6 = getpgrp(r2)
r7 = syz_open_procfs(r6, &(0x7f0000001400)='mountinfo\x00')
ioctl(r4, 0xffffff01, &(0x7f0000001440)="96d5efca20411ea99c70ec97e8fb62888e15d688f3379148a829050d0098a6da13350cbe0f1bd7147fecd8ffeba38d95622a41")
sendto$inet(r7, &(0x7f0000001480)="b47c2cd2097466d271c0ab83047f73577542b4aaee23cee20811e7f092c271e16b9172902cae8e49fa", 0x29, 0x4008004, &(0x7f00000014c0)={0x2, 0x4e23, @empty}, 0x10) (async)
r8 = socket$pptp(0x18, 0x1, 0x2)
recvfrom(r8, &(0x7f0000001500)=""/91, 0x5b, 0x40000002, &(0x7f0000001580)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x20010084}, 0x80)
ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000001600)) (async)
r9 = fcntl$getown(r5, 0x9)
ptrace$PTRACE_SETSIGMASK(0x420b, r9, 0x8, &(0x7f0000001640)={[0x6]}) (async)
ioctl$BLKIOMIN(r7, 0x1278, &(0x7f0000001680)) (async)
capset(&(0x7f00000016c0)={0x20080522, r9}, &(0x7f0000001700)={0x8f7e, 0x0, 0x3, 0x1, 0x3ff, 0xfffffffd})
r10 = openat$cgroup_devices(r7, &(0x7f0000001740)='devices.deny\x00', 0x2, 0x0)
cachestat(r10, &(0x7f0000001780)={0x6, 0xef86}, &(0x7f00000017c0), 0x0)
setitimer(0x2, &(0x7f0000001800)={{}, {0x77359400}}, &(0x7f0000001840)) (async)
r11 = inotify_init()
ioctl(r11, 0x6, &(0x7f0000001880)="ae0a98ebb63c48bdc3fe8b10fc0413b7ae5f9be9ef89ed351394790387b96bf5e8810f16e44b508ff183b832628bb61b18330da917f071b46a8679f04afba2407af758ef860819e71fd1d0a8ddb315418d6f601c44eaaf6ae3b81a9b9c763c45e9750ab048a5af287c440ee3b1d8ed0113bf883b46ca06bdf5b5234a27dc52085777a1866ff160e56a8175e7cbab92f31b74afc0a34a51ffe7094d81fd207d0816513d6143d6f85552") (async)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000001940)={0x7, 'macvtap0\x00', {0x3}, 0xffa5}) (async)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000019c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x30, r12, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xffff, 0x4, 0x8, 0x1}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040084}, 0x4001)

493.07943ms ago: executing program 3 (id=22833):
r0 = eventfd(0x7fff) (async)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000004c0)) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f00000002c0)={0xb6, 0x0, 0x6b3})
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async)
chdir(&(0x7f00000001c0)='./bus\x00') (async)
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) (async)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380), &(0x7f00000003c0)='./bus\x00', 0x6, 0x0) (async)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) (async)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x100003a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) (async)
r7 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f0000000480)=0x10)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/diskstats\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0xffffffff00000000)
ppoll(&(0x7f0000000140)=[{r0, 0x25a8}, {r7, 0x45dc}], 0x2, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000280)={[0x4]}, 0x8) (async)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async)
ioctl$USBDEVFS_CONNECTINFO(r4, 0x8108551b, &(0x7f0000002a40)) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)

264.991285ms ago: executing program 9 (id=22834):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000000c0), 0x12)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
cachestat(r2, &(0x7f0000000080)={0xb, 0x5}, &(0x7f0000000100), 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

250.415805ms ago: executing program 5 (id=22835):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x1000, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) (async)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x100000000000, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x1000, 0x8, 0x2000, 0x5, 0x0, 0x3})
syz_io_uring_setup(0x520, &(0x7f0000000080)={0x0, 0x9003, 0xb2, 0x0, 0x4, 0x0, 0x0}, 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x802, 0x0)
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
keyctl$set_reqkey_keyring(0xe, 0x1)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r5, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003}) (async)
ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003})
timer_create(0x2, 0x0, &(0x7f0000000180)) (async)
timer_create(0x2, 0x0, &(0x7f0000000180)=<r6=>0x0)
clock_gettime(0x1, &(0x7f0000000200)={<r7=>0x0, <r8=>0x0})
timer_settime(r6, 0x0, &(0x7f0000000140)={{}, {r7, r8+60000000}}, 0x0) (async)
timer_settime(r6, 0x0, &(0x7f0000000140)={{}, {r7, r8+60000000}}, 0x0)
timer_gettime(r6, &(0x7f0000000540)) (async)
timer_gettime(r6, &(0x7f0000000540))
keyctl$set_reqkey_keyring(0xe, 0x1)
close_range(r0, r3, 0x0)

101.161257ms ago: executing program 9 (id=22836):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)
syz_io_uring_setup(0x644e, &(0x7f0000000c80)={0x0, 0xce80, 0xc040, 0x2, 0x25a}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f0000000040)={0x0, 0x8})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
r5 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
preadv(r4, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000140)={r1, 0x1000, {0x0, 0x0, 0x0, 0x5, 0x9, 0x0, 0x5, 0x9, 0x18, "8bc5b0178b1e954d86379d1baf87a82ef3f9e83bba40a7de4cc4edb599962da3ca8a9d7fed357eb7cd0a5eca17d1bb3578c786b206cc31ca0abc9d1d5e438037", "dcc80f788db9aef1fe24067a9c938fb36b04e3a4be6a5973d3ac7bb02882994fc2a500de9f5bc6b1625f83861e247d92fd3b6a5ee0555b85fabacb89011b64dc", "cb784fba98810a86497efb9b7a14447f715f637a2a39ed03fcd9daf51755ccc2", [0x8, 0x2]}})

100.771198ms ago: executing program 5 (id=22837):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000000))
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000400)={0x1, 0x0, @ioapic={0x8000000, 0x81, 0x8, 0x5d2bbac6, 0x0, [{0x6, 0xd4, 0x5c, '\x00', 0x5}, {0x4, 0x7f, 0x3, '\x00', 0x2}, {0xa, 0x7, 0x9, '\x00', 0x40}, {0x80, 0x1, 0x7, '\x00', 0x45}, {0x9, 0x3, 0x5}, {0xc7, 0x3, 0x4}, {0x3, 0xff, 0xa, '\x00', 0x40}, {0x2, 0x9, 0x7, '\x00', 0x2}, {0x86, 0x6, 0xd, '\x00', 0xd8}, {0x2f, 0x3, 0x8, '\x00', 0xff}, {0x1, 0x9, 0x4, '\x00', 0xc}, {0x5c, 0x9, 0x1, '\x00', 0x80}, {0x4, 0x1, 0xc1, '\x00', 0x7}, {0x49, 0x1, 0xfd, '\x00', 0x1}, {0x7, 0x7f, 0x1, '\x00', 0x5}, {0x2, 0x1, 0x2, '\x00', 0x3}, {0x2, 0x0, 0x90, '\x00', 0xa5}, {0xe, 0x8, 0x0, '\x00', 0x10}, {0x7f, 0x5, 0xeb, '\x00', 0x4}, {0x80, 0x4, 0x1, '\x00', 0x7f}, {0x0, 0x2, 0xfa, '\x00', 0x4}, {0xc, 0x2, 0x7, '\x00', 0x2}, {0x0, 0x0, 0x3, '\x00', 0x80}, {0x4, 0x3, 0x8, '\x00', 0x1}]}})
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000007c0)={{r0}, "db7ec9beb01e0cb6ccc8629b98edf957ae87e741a5896c682540bf2dc747d0f0d27213b48ef4ea1d68f9b3e57cf6eb6800358c88f1a5fdc34773eb675642827a6739a8887a35a834b667f10c803476b6edfd86673a35576154ccafd82dd61c2a30858fa7bf36b3dc0357d2b10c4fcfd9d4a4b486f0376730b9353dcd037d82ddcd1b4ea32c4167e7a09f6676e32dcfb716315debbcc7495527d406e4a9bd3544d8ad00579b8c46d554da8f56e7466c25e90ae17c77a7d412940493bb444846ab3a02da3109a27fabdb67d8f3043b4121c9215115fa22fe390681198804bc26f2ff4e157d15a67af15c4c63554c9989ecbff27bb75a68f476b055ebf99e81d153b62dba968582471a60401a62194c29a20f13458a5790fbe4a025832f629ccaccef5be049ca7dd8a20279f22227bb98c1179444aa998fc0c58c573383a24bc2dcb9483715a32e1fea00f6da7b9248c3647af0a763e81c6680d66a59a5514977452621961fbca57bfef3b762f00e5b7578f30fa428c839cb56ad508fea5ccd2051c65f3bc10d5df7eb868673b1cc351818340d789ba3658e4e0f8c97244acfba21e81075ddcfc2f4241e5bb446a5184a8b09203545a59bd604c6841c5b72c6bc904d2a187cfe4f50c924dace100b3e55f798ac94e275e16c3471412e4ff8af647e2629b912657e8a901f4fbdb1b56c730c4302182c42ed2c1baeefeb7354149f056b55ab56ecc4ad92162d2ca250708581f89be0963d0eb8064004f5f930dcb6d692ed0fe9649bf5a06dfa80dc9ce8b9300fe633f65e00942bc416f3421fad4c6a36aef80d6f51a3d8081ddfa24fa9f04d9f75fe8445ef27476066d72d65bec99fe344ae5881f4d333493805f2934aa126cc0d623ca8280da03fb2e52937de4c48ea07c3331cb257345061350ce04836208653e82c660a213e5f72eecaf34faf7f51dc95f2d14c9944b501981859c086a71e6e77af12262349f0ce33e11dc1437a1099c8f47c5878da5b993628ab41a0903502b009b4657f09ff62a8d28d8e1c2212e750c124ddc90cd3d7b7127dc7677aaf831475daaed4b2652534676eebb14bba435ab4b888c280f53d46d2b9c13a88104cd123fdc0d64296a9e870ea961bc084d3cdea39bdba946d19f7f93571fd7ff7e303090b63d4fc2287828598c3dab87f2464499cd9f1f078286c3fdca89a0b5db265537564c7532ef3177d2420fca67b590b83068c0987887bc8f1798f61d9b329ce06e87dd87458cc67688e5d179082ad572cb980ca101a31d50ce5d0a063dd2fb15dc2dc78e38c84e4d758a224f069be698c5b86f522353aed8113b6b32a70f9407e0f38cd70af0fa6e961d106acc9b58d34548d25170152be423c933a368ab5c1902e48af252aeb8392f6cc9367f070c3be67ab51068f72137507a5a6502f8b83f426b22cd8996bfc01e237e84f8a2460e438ced2f30d1a6cd980b976bb6cef89004f8f8d89051199b899765187b228c9d0724d8afb1d65baf3ae3f8eb46d18b543cca5f12bd59c69f0a99af024a9b1f6688896f4f44be03938f10ccf1dbb9851a736c9f4a0e0639bc0537bae05610908521723f6dd805a9568edaaa2f5425bf04992bf924a8c7d74f8ce3065f4c7c21233a1dd1d466ed9a90450478e2777b5a3b62c4eac8f270d74f4ba323bd612d53d21af66b580016b27348148f0c3656742ae7b82ce55880d67533fdc56976e1e51c172e26b17a8b401393403f7d3ba2bf1365c622e64c9e67cf62088db243d4ee8de43857c008660f863db2ced1abad99c2ac888eab1787e3d06c4b725f82dc57e5441c0f7e1d9318356c268df07be02d4730b5c18c2c141fb899bc334875435e30558c869e8223b3a45fa3907878963317d35f256895dc5374781ca62a19bbedada2095b2c5038dafe6b710149fa8bd27d0175c49591a8048a724a3588961164c0930f84ae9de273655818d04bf51332c0612ee668d8769cb80ff086a26c80f4629064c5300638476aa6accaf5dd8cacc1e9676da3fcef15f41c72a000e4bdbfe3f8f1e3f24b8944c509d543d98897828b38576b9e47418e94b557eef6b1d71eb493a850956d050fee1e2a1b609c03d243a3e4b56c4e4101c8f974b9479801258aab7277348969ff261c7c1ecb954efacabbbbc6908846b385005ff1c56d82365f7b1beab1feb66ff50bd78e195f16d438d8c0f30a6f0801be527c915a8bd4c362901307319158083381cd5f9bf3c15c6114e08ed94d4a5ce30118da0f7f74d22992987f9e6fc703b3fed281b912c1eb2008d4c6d4b31ff8f921da0609fc409a25f9fea4f57738659c8619a5ec579ea169c99bd824ffb77dfcfccd315b7e71b039f539ce983f2415d7abf8dbcd83f7e5212cff877289ccd741f445af0580ece3354b58a6a25200729504e9748bca69d83350984be208854549fcc4c5a9ea191ca40d77c543a3f0a80d6f6f77331c70dba7d08cdcf95d34549cc1148957dccd270c6175c92c59e8d146dd726720b2f23c885f963b79a560a93ac930298ff8f91105b11713c6a74ab9fb998f5c282be1bd2e1797f13332d52b93e2d130f4fb4422eb670f826d95bf1ba4fe91f9cd0d3af82938b2f943dff9177a4c1f8f9370d24f40997ca0874f4cc09a95cfea75bd19377eb21143871643977fff613204856aa73f4c1842e477db45651fafda81fa2987cadbcb7ad11986f10f48c9622b2fb5cf06f6403a6a48b35bdda09d35a9e1a19983992aa2647482a89df44212e5896195873a782bd7ab64bb32c3059fa9916359f4ab0fee484a668af4df4a721a9d2f3a6b32d536e9c47beaad62dd00bacd1ce97dd2e3d09dba30a8a7fdf611e3c410d37c1c95ccd331a4af0b398c0a56e4899f1063cf19c60b6fdcedc97d735bee72e6358a338886f2ea25b3101d19a2177b84496d2ca55b1835df7f4378761e0f3a9640d6783d6e4832b339ce0e31dcf8cd97c6d01c6bd0ae97881529b7d991de22c5a3abafe782bddf1f33e66adb24d26bad0afc500d38cdf2c1d0ea97955807e368b29a9cd3323d7638a3477d7a911b59a380003f22b1fc8989a7d1b10a5656bd8c17ddd30d0c2911ca82dc986555ec8c16e3e7752987a4a5966cf67a9cb52ec3cb3c2c08b9123b88369770760b35b77481ae5c015cdee7a45ddd1cc90f9bfa2b8953e34ff55580a003010e8526c9a93e9904070b0a26914278e76aa4288f3c7d56deb7a18c0fb1d00844a0d9c395eba942007b9418569018e6a350e8919b33c7beda691a717bc67e04e1d73df93dc5b6a636cdd625810c48342287d5b703cb242f81b12260595bb0434edecabb928edae266dda3619aa29cdf844e47661eaa2fca094c9938c5c97fde558790e89c840abb1539d7299ce35709e8740fead41df3715e120026b47387fe6b6046bfc139b511805a8bd00607691a2b74787275e54e450a8f929cb871182e8839db7e07914ee6c4dad726ecf5308c16925c3bd6383bccb06097fc68c475303c3cd0f059ce56427d4d6f9fcf65d2f835f8b28a80a06eb3cdc6aef5d4aa3d097d8ce75af9b571f6652f5e110eec71bf4bda70a0467f78458f44417542d9fd101974905e1a20d5f0eff96a05f0925a6e0c96b3cf5cf771307c88976bc3bb5b5ba9a8f092230e9dbc69ea4762bbd24162e42c4958966cf021e91bf4bff9fcf6e5a70f98807420a4a1f27581b01a99f4584144e0ae7fa35256ff0c9a76a33f41a81910589e4a9839303dc8665f3435966d97d30aecc70f6a403558b26e2c87191a19f58db1f24f923cde8ab76b3efa52f741e3d664cf0bc005e7f887fa1848ca92d839b6556b338d151526fb733b5ff92d5830036d4c2a56e28274c269d4bc147462717d811e31e536b9106dc0ca6b96462ac3c238f84d3718dd1a10a1dd459e763fb37343a5ea43eeb40ce960e25e33d4eb2e974da1b74199d4382c6a3a20b7048be43fd69cc2966c2cf47dc919e8705a068411557cddfc022cf8b27c4178d8f1ee7291f976c1892f9c8de566536809386872b88c8c5e87f1afa9eface36bd5527169431301d4f60438f4162b414c65de404b2817bce1778369a3f18171eaa248f91b08769a28f562c28314e116bc25e4f901b1f3d2124703a95839e215b23a8834d5dc38a28db5910e1b8e337a64bb4b91ffbc917d267f23fdf0eb10b6ff3d91d60caf78e3a9ee36d38b6a229cb5185ee11f9fc4ff9b0d8661ae6fb13cab2e5eb4e9289fe156d56c2c699e5f5d3bb5fce8725c419f01b34348b9472244426a01a671838362bd5ec76368ea26a9366fc9fab825e938e42f5e7e5699a1d1fa8cbc1eb6ac9edef09e0674bb6f096f7aacdd96e820061ed89f46ccc4f0e69d8f28bc86e7746b23d310795f8c9881d214610eea910d2299e57546e63b73ba10907176c55fcda2420e44fd110dcafe99651b212cf21999928a1a85587a6959054e6c7f52e099324892e2677cc3b9f223dc58aedfbcea656e0b6971eb69fee8ac7207cf9de993e4f27fdea0edf0baf5c457252eb48e2e62a5a2bf9ebd02cb7830614a624b3a8020b221c861997fb0f5aaab577ed6b6bb2f2c45f0ed337e020d51de5d217f39bdea6d28db4b5ec7fda3f6c318c621bfd5efaf5b971ac4dec7cad67655dff276245e91214e81ce0024861ca739abf58cd6429f32b336bffb52f26f73d93803a10d812cb609447569c9c4f1db27d4fc1213e8c925e3208b372533b573ef1f5f14694e47f41f48673a85bb4233d5438059207ca85aebfd83602e65c7709aa0b25de4a30cedc43953dfac661854756c955cad7f6983a829254d68051f506997155cc8b66c28e64789c6337341859873036446061034950f603f3ffb7afcce372171a65126e73af5ffc0d05240a5ba7042466620338a617e5acd9dae51a9a99687f79130379ba6e892c33e1cb4964f8aad63424d1239a522159b0122e04ce44099ef3d454811a8c370586f28c977c34623213d900cb43c749398aa1356215b4d9bfdf8787d64fca5264312422f91b1f7dfaf07a17500553c82a920db755a390fb894f5b9fc7d6986c21a2defa777d2ba57a3760d2c2a3c6ae2e52af6701039dcce14b2054fae920f9a2996727f7b70d781bb55f85ffb376801ae6cda0dbc357bb503ec932a07225f566d96d7ac274a8558d8471d973c3c329fed718e509510841331fb7c70079a1cd49446d77fcc2e007f4562d78efb7fb30c7aacc1026a322f5a87df69d930ade48bf8b1020febfbb8d82e944046ac3e1131738ae0f2c22c7fd01ff8a82e8877827c15bc37037ccad688a19133ba5220ff52fc2c335b2115a27b46a58adff4a121e5cf8d24ff38ebc40d7444ab50b183842d6f310b9ad147612fc706200fdb651a655e8e7e6a7b400fdbca609e2b2cf3a9b7f1bb42b369f3fd225fdfc9c34d71eebc339ecb86ccd91fc663b421ffed6aacf4d4277fcdf4a941f4158dd325f7759b32e08911c988e65b8c94045150e6c956ee61e46cf8c55b734db609f7299e8cf5782624797137582b088b567bc5dd4dd25aa96ff64b756f4e36666963d3a070b1ac59b26359887a0ca6372ab4a263281553f9c80c5b6eeb7d14e883badbae43e6ed9235fef4d7bdb2788af487c4c53e3154ba6e78729a8cbe16ccc1a12e0ae581e0ddd99335682eb1dc8d9f523bd6a1accfe41adb877d13e0235167fd5ca099aac5967f6db8e3941916b15cc5cf6504015125baf821cd700d35b3d57b929ba78354fdc181a1455199a795e749aa7159bfe802fce0181411d8077cfa9839c215966ce60e7fe8f"}) (async)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000007c0)={{r0}, "db7ec9beb01e0cb6ccc8629b98edf957ae87e741a5896c682540bf2dc747d0f0d27213b48ef4ea1d68f9b3e57cf6eb6800358c88f1a5fdc34773eb675642827a6739a8887a35a834b667f10c803476b6edfd86673a35576154ccafd82dd61c2a30858fa7bf36b3dc0357d2b10c4fcfd9d4a4b486f0376730b9353dcd037d82ddcd1b4ea32c4167e7a09f6676e32dcfb716315debbcc7495527d406e4a9bd3544d8ad00579b8c46d554da8f56e7466c25e90ae17c77a7d412940493bb444846ab3a02da3109a27fabdb67d8f3043b4121c9215115fa22fe390681198804bc26f2ff4e157d15a67af15c4c63554c9989ecbff27bb75a68f476b055ebf99e81d153b62dba968582471a60401a62194c29a20f13458a5790fbe4a025832f629ccaccef5be049ca7dd8a20279f22227bb98c1179444aa998fc0c58c573383a24bc2dcb9483715a32e1fea00f6da7b9248c3647af0a763e81c6680d66a59a5514977452621961fbca57bfef3b762f00e5b7578f30fa428c839cb56ad508fea5ccd2051c65f3bc10d5df7eb868673b1cc351818340d789ba3658e4e0f8c97244acfba21e81075ddcfc2f4241e5bb446a5184a8b09203545a59bd604c6841c5b72c6bc904d2a187cfe4f50c924dace100b3e55f798ac94e275e16c3471412e4ff8af647e2629b912657e8a901f4fbdb1b56c730c4302182c42ed2c1baeefeb7354149f056b55ab56ecc4ad92162d2ca250708581f89be0963d0eb8064004f5f930dcb6d692ed0fe9649bf5a06dfa80dc9ce8b9300fe633f65e00942bc416f3421fad4c6a36aef80d6f51a3d8081ddfa24fa9f04d9f75fe8445ef27476066d72d65bec99fe344ae5881f4d333493805f2934aa126cc0d623ca8280da03fb2e52937de4c48ea07c3331cb257345061350ce04836208653e82c660a213e5f72eecaf34faf7f51dc95f2d14c9944b501981859c086a71e6e77af12262349f0ce33e11dc1437a1099c8f47c5878da5b993628ab41a0903502b009b4657f09ff62a8d28d8e1c2212e750c124ddc90cd3d7b7127dc7677aaf831475daaed4b2652534676eebb14bba435ab4b888c280f53d46d2b9c13a88104cd123fdc0d64296a9e870ea961bc084d3cdea39bdba946d19f7f93571fd7ff7e303090b63d4fc2287828598c3dab87f2464499cd9f1f078286c3fdca89a0b5db265537564c7532ef3177d2420fca67b590b83068c0987887bc8f1798f61d9b329ce06e87dd87458cc67688e5d179082ad572cb980ca101a31d50ce5d0a063dd2fb15dc2dc78e38c84e4d758a224f069be698c5b86f522353aed8113b6b32a70f9407e0f38cd70af0fa6e961d106acc9b58d34548d25170152be423c933a368ab5c1902e48af252aeb8392f6cc9367f070c3be67ab51068f72137507a5a6502f8b83f426b22cd8996bfc01e237e84f8a2460e438ced2f30d1a6cd980b976bb6cef89004f8f8d89051199b899765187b228c9d0724d8afb1d65baf3ae3f8eb46d18b543cca5f12bd59c69f0a99af024a9b1f6688896f4f44be03938f10ccf1dbb9851a736c9f4a0e0639bc0537bae05610908521723f6dd805a9568edaaa2f5425bf04992bf924a8c7d74f8ce3065f4c7c21233a1dd1d466ed9a90450478e2777b5a3b62c4eac8f270d74f4ba323bd612d53d21af66b580016b27348148f0c3656742ae7b82ce55880d67533fdc56976e1e51c172e26b17a8b401393403f7d3ba2bf1365c622e64c9e67cf62088db243d4ee8de43857c008660f863db2ced1abad99c2ac888eab1787e3d06c4b725f82dc57e5441c0f7e1d9318356c268df07be02d4730b5c18c2c141fb899bc334875435e30558c869e8223b3a45fa3907878963317d35f256895dc5374781ca62a19bbedada2095b2c5038dafe6b710149fa8bd27d0175c49591a8048a724a3588961164c0930f84ae9de273655818d04bf51332c0612ee668d8769cb80ff086a26c80f4629064c5300638476aa6accaf5dd8cacc1e9676da3fcef15f41c72a000e4bdbfe3f8f1e3f24b8944c509d543d98897828b38576b9e47418e94b557eef6b1d71eb493a850956d050fee1e2a1b609c03d243a3e4b56c4e4101c8f974b9479801258aab7277348969ff261c7c1ecb954efacabbbbc6908846b385005ff1c56d82365f7b1beab1feb66ff50bd78e195f16d438d8c0f30a6f0801be527c915a8bd4c362901307319158083381cd5f9bf3c15c6114e08ed94d4a5ce30118da0f7f74d22992987f9e6fc703b3fed281b912c1eb2008d4c6d4b31ff8f921da0609fc409a25f9fea4f57738659c8619a5ec579ea169c99bd824ffb77dfcfccd315b7e71b039f539ce983f2415d7abf8dbcd83f7e5212cff877289ccd741f445af0580ece3354b58a6a25200729504e9748bca69d83350984be208854549fcc4c5a9ea191ca40d77c543a3f0a80d6f6f77331c70dba7d08cdcf95d34549cc1148957dccd270c6175c92c59e8d146dd726720b2f23c885f963b79a560a93ac930298ff8f91105b11713c6a74ab9fb998f5c282be1bd2e1797f13332d52b93e2d130f4fb4422eb670f826d95bf1ba4fe91f9cd0d3af82938b2f943dff9177a4c1f8f9370d24f40997ca0874f4cc09a95cfea75bd19377eb21143871643977fff613204856aa73f4c1842e477db45651fafda81fa2987cadbcb7ad11986f10f48c9622b2fb5cf06f6403a6a48b35bdda09d35a9e1a19983992aa2647482a89df44212e5896195873a782bd7ab64bb32c3059fa9916359f4ab0fee484a668af4df4a721a9d2f3a6b32d536e9c47beaad62dd00bacd1ce97dd2e3d09dba30a8a7fdf611e3c410d37c1c95ccd331a4af0b398c0a56e4899f1063cf19c60b6fdcedc97d735bee72e6358a338886f2ea25b3101d19a2177b84496d2ca55b1835df7f4378761e0f3a9640d6783d6e4832b339ce0e31dcf8cd97c6d01c6bd0ae97881529b7d991de22c5a3abafe782bddf1f33e66adb24d26bad0afc500d38cdf2c1d0ea97955807e368b29a9cd3323d7638a3477d7a911b59a380003f22b1fc8989a7d1b10a5656bd8c17ddd30d0c2911ca82dc986555ec8c16e3e7752987a4a5966cf67a9cb52ec3cb3c2c08b9123b88369770760b35b77481ae5c015cdee7a45ddd1cc90f9bfa2b8953e34ff55580a003010e8526c9a93e9904070b0a26914278e76aa4288f3c7d56deb7a18c0fb1d00844a0d9c395eba942007b9418569018e6a350e8919b33c7beda691a717bc67e04e1d73df93dc5b6a636cdd625810c48342287d5b703cb242f81b12260595bb0434edecabb928edae266dda3619aa29cdf844e47661eaa2fca094c9938c5c97fde558790e89c840abb1539d7299ce35709e8740fead41df3715e120026b47387fe6b6046bfc139b511805a8bd00607691a2b74787275e54e450a8f929cb871182e8839db7e07914ee6c4dad726ecf5308c16925c3bd6383bccb06097fc68c475303c3cd0f059ce56427d4d6f9fcf65d2f835f8b28a80a06eb3cdc6aef5d4aa3d097d8ce75af9b571f6652f5e110eec71bf4bda70a0467f78458f44417542d9fd101974905e1a20d5f0eff96a05f0925a6e0c96b3cf5cf771307c88976bc3bb5b5ba9a8f092230e9dbc69ea4762bbd24162e42c4958966cf021e91bf4bff9fcf6e5a70f98807420a4a1f27581b01a99f4584144e0ae7fa35256ff0c9a76a33f41a81910589e4a9839303dc8665f3435966d97d30aecc70f6a403558b26e2c87191a19f58db1f24f923cde8ab76b3efa52f741e3d664cf0bc005e7f887fa1848ca92d839b6556b338d151526fb733b5ff92d5830036d4c2a56e28274c269d4bc147462717d811e31e536b9106dc0ca6b96462ac3c238f84d3718dd1a10a1dd459e763fb37343a5ea43eeb40ce960e25e33d4eb2e974da1b74199d4382c6a3a20b7048be43fd69cc2966c2cf47dc919e8705a068411557cddfc022cf8b27c4178d8f1ee7291f976c1892f9c8de566536809386872b88c8c5e87f1afa9eface36bd5527169431301d4f60438f4162b414c65de404b2817bce1778369a3f18171eaa248f91b08769a28f562c28314e116bc25e4f901b1f3d2124703a95839e215b23a8834d5dc38a28db5910e1b8e337a64bb4b91ffbc917d267f23fdf0eb10b6ff3d91d60caf78e3a9ee36d38b6a229cb5185ee11f9fc4ff9b0d8661ae6fb13cab2e5eb4e9289fe156d56c2c699e5f5d3bb5fce8725c419f01b34348b9472244426a01a671838362bd5ec76368ea26a9366fc9fab825e938e42f5e7e5699a1d1fa8cbc1eb6ac9edef09e0674bb6f096f7aacdd96e820061ed89f46ccc4f0e69d8f28bc86e7746b23d310795f8c9881d214610eea910d2299e57546e63b73ba10907176c55fcda2420e44fd110dcafe99651b212cf21999928a1a85587a6959054e6c7f52e099324892e2677cc3b9f223dc58aedfbcea656e0b6971eb69fee8ac7207cf9de993e4f27fdea0edf0baf5c457252eb48e2e62a5a2bf9ebd02cb7830614a624b3a8020b221c861997fb0f5aaab577ed6b6bb2f2c45f0ed337e020d51de5d217f39bdea6d28db4b5ec7fda3f6c318c621bfd5efaf5b971ac4dec7cad67655dff276245e91214e81ce0024861ca739abf58cd6429f32b336bffb52f26f73d93803a10d812cb609447569c9c4f1db27d4fc1213e8c925e3208b372533b573ef1f5f14694e47f41f48673a85bb4233d5438059207ca85aebfd83602e65c7709aa0b25de4a30cedc43953dfac661854756c955cad7f6983a829254d68051f506997155cc8b66c28e64789c6337341859873036446061034950f603f3ffb7afcce372171a65126e73af5ffc0d05240a5ba7042466620338a617e5acd9dae51a9a99687f79130379ba6e892c33e1cb4964f8aad63424d1239a522159b0122e04ce44099ef3d454811a8c370586f28c977c34623213d900cb43c749398aa1356215b4d9bfdf8787d64fca5264312422f91b1f7dfaf07a17500553c82a920db755a390fb894f5b9fc7d6986c21a2defa777d2ba57a3760d2c2a3c6ae2e52af6701039dcce14b2054fae920f9a2996727f7b70d781bb55f85ffb376801ae6cda0dbc357bb503ec932a07225f566d96d7ac274a8558d8471d973c3c329fed718e509510841331fb7c70079a1cd49446d77fcc2e007f4562d78efb7fb30c7aacc1026a322f5a87df69d930ade48bf8b1020febfbb8d82e944046ac3e1131738ae0f2c22c7fd01ff8a82e8877827c15bc37037ccad688a19133ba5220ff52fc2c335b2115a27b46a58adff4a121e5cf8d24ff38ebc40d7444ab50b183842d6f310b9ad147612fc706200fdb651a655e8e7e6a7b400fdbca609e2b2cf3a9b7f1bb42b369f3fd225fdfc9c34d71eebc339ecb86ccd91fc663b421ffed6aacf4d4277fcdf4a941f4158dd325f7759b32e08911c988e65b8c94045150e6c956ee61e46cf8c55b734db609f7299e8cf5782624797137582b088b567bc5dd4dd25aa96ff64b756f4e36666963d3a070b1ac59b26359887a0ca6372ab4a263281553f9c80c5b6eeb7d14e883badbae43e6ed9235fef4d7bdb2788af487c4c53e3154ba6e78729a8cbe16ccc1a12e0ae581e0ddd99335682eb1dc8d9f523bd6a1accfe41adb877d13e0235167fd5ca099aac5967f6db8e3941916b15cc5cf6504015125baf821cd700d35b3d57b929ba78354fdc181a1455199a795e749aa7159bfe802fce0181411d8077cfa9839c215966ce60e7fe8f"})
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'bond_slave_0\x00', {0x82fd}, 0x495d})
setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f00000003c0)=ANY=[], 0xd0060) (async)
setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f00000003c0)=ANY=[], 0xd0060)
socket$xdp(0x2c, 0x3, 0x0) (async)
r2 = socket$xdp(0x2c, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r3 = socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x7f, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14)
r6 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x1, r5, 0x2, r6}, 0x10)
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x8000000, {{0xa, 0xfffe, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x801, 0x0)
getsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000640), &(0x7f00000003c0)=0x4)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x2)
r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140)='./binderfs/binder1\x00', r9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2})
setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000040)=0x224c10, 0x4)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000100)={0x6, 0x0, &(0x7f00000017c0), 0x0, 0x0, 0x0})

0s ago: executing program 9 (id=22838):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008000a000d"], 0x1c}], 0x1}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
io_setup(0x3, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000001580)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x4, r2, 0x0, 0x0, 0xe6, 0x0, 0x1}])
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r4, &(0x7f0000002180)="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", 0x2000, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x7, 0xa110000, 0xc9f, 0xfff, 0xd, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = socket(0x8000000010, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x804)
syz_fuse_handle_req(r4, &(0x7f0000006400)="7f73a2cec5d0db4d420442fce4e4191e2ed112a607e662fc1eeef7926d41c5a0f91c64de08fcd231ba34fb2b58307d834cc83ce0f3908b5333fec9af958c900344d938cfa948f432dd5acb1a7a73bdba45cd411b82f7fed6fa3bf23c9abdc4f263fdf3fd68dcbd973b4dc2aef81c7296d7d08e562f89231f57d43e4d7458c8f389810e60c1c20bddfefcf1739824ad409148f4647b52cc98987f7c31bd6f7f44e39ac5f97f75f06dccd331d2828625fbfd3a65fd0d32871b92c0a6aa8895d3b467921c933eeb93cdbd7387abe27c4427d4ab77bbf9558a9a085a74170e875d83f8c5017d46901eb519854e8aaeaf94e6e050fec7c1afd81e26da117484dfb042805ed1ad3fc67a28636f5a35ad72f6106a5c3cbdd25048567ef13b229024142ebeb7a8bf518f017fd49dc31d8652ab7036107f8d5216a142e58f8ed850ba177786e911fa4f9ff952f8ddb66af705c7b97ed4b385d9ea3c0fecfdd5dcf168832726ced26b51f7a5911a35106aaee0e8662497f6c5dce5543690ea32505e79f13bace0f89ad9e8c551578eedc78028c414145dc3be2184e2055c037cc2ae07842a78910815c69d010bfbb850ec8f1a5da8b48ed2f75838dfe8657e5b1b59c561cd5d219a481802939c7abfb216e01173985e3436b7135d2377ba714281dcb3f82c064957e621464e5de29e8248d2400668e5775d8a75d23d7e3fd9fdce31aef258be698b121ac4ff319c6e4f872c4cf1b5f3ebbfb2ebabe113ccffe028d829922ea909a5522e5b632e3b99fb47ba9d0f8e15ca401e3ac671e80dcb56214330e7ffb3a415d6a0b84c56b056a6f2a4ffbb77130a5867b12e061a2539aaf67360af472c21a27855b5387e132ef9bac10b86b1f93974da52b3f4c48011c77eab7481e1838975fec2ae160f6b8c168b80dcfd3e03e8c1ec2a643cf850203e8254112c08ed4c2c6d0715b6bf5f281df7356cc2c9f8baac8b0dc574fc46eef5eaa9530dc0a6a88b3ad315d01a36282c5338cc5c399deb78cad23b22eb71b80d266fa904fc1a6d94f77a1e3a2173abe5dba58af48a75fbadd339eddfe7dc5ecf3fb85284e903ab70dc00663f0a5270ab805556aaf09223679845a1e091f24318d71dff015847107ffd9d7f789e8753abc2a51d5067da21c49fa8b8f66c89afb009cf17200753164786af597b8b6d5b5505d1d716c74fb26cd78679d77330c2cb2bd154423bd6e5b8972e2c576a89806e57686a7019a369de75c99e0bb6704f508adfd5394568a2f8c56a5333c861432e4ed056e5b8f20217c81563f0fb9efa6467459753832814e3118c24b634d6068b35871bcaaadda1d206584324a2bd35050f5fb993e898ca25fe82b3578e325658a4cb91ba32589c6d6720284c610569788acd2907091a968651b3978d797a5e808d4f33be1859de2bb57b5d249725f06d94e32ab46d1b7d1174703bf8dba02d4a5f5a16fb3878d6a2c915df4ea588ad8b0545b62308112d6c7f9bd93e5a51a45af9e990985f8d7dc8925ac1f63210cad488769d4957b03108e5e6f716d80a0bf88349d680067fb0a0bc59edd8ba646a2a86b4c32fd531dbc4879c86ab74e17f49f877c30a36279698a3420f3f236a69a84781fb981a2248bc0dd12dcc464f6b970b27ee634f0fa8c1338bdc3b4193b865727eb856995c08d9b88161b9a15245ec0967000f678e807c953f933edc6e80fcfe963663f7cc801927bc91c238d0b6f0c61ae66a8d210ca577b17677d79ffad404194d733dbcce9b2f163637b7ed1cf4f967ca680bf1db83b1b6f090dd99b8e0d49e7b3cac65864c32cb321d84bf43e7a300a6f4ac27c8091e39e4383fc99617f4b367d7a2e0041176dee5fa85ceb501c3d2a2efc1f489f83fbbbdc4af125fcac9a2ed8db3cc227543b195e36adef6a67a126a28be525e0441d3c5def236da4bb1d5cec084b1f08da02299f72b2a10ea7fdd5eb3c2f999740a287c179db7fa5766f8781b5147a6933623bbaec777152c4e65d262733ce7e864c5c79a56f60075662248f6b765562f718d0767a89de9bd3649957fa54bc9df603158d4ea631d71be5ea93ce64d4718abc196fdc85dddd8656806500660aaf5e3c5c74732872141cf9c542bd32f1ad210cae53fd91bce48a55afe056540d396b0930632d6b252833a91bb4d9020d5ed10d66d2467e324ee68f06926194d378da476f0d4dbb9c452475d938e8c774cc68bd291726a95223ae3866d9a2f3e4e6c319e2b4700ef4640ceedd9ab0a587bdaabd649363f0d93ec1afd6106e791f8d8f1a0d52c085a4c8a89a5c6d8443c63d3757dcca07e1f813aa6c7d007385b54b9a280713e80d8b61630360166c5ef66190fe367d7694112f340f790d8a9cf0f39eef719edbe914c9da3ecae2913a544cdce5bdb9fa462ef83bf3da34e76670612885e66c1cb13c76f72fa796ab1810f507be6dccdb66aad16e88168e0637ce5ea5bbb01ba6731052459600121734f1db7c610920e979e1f2c69be00a33a7cf14e5dec0626d3928040c75db097626e198c17114da8841c9e5cea3ba122dc119d6a2da3144993e7e023849f5360f299675f49353828a592aa8b6c2ec821b0991dc478024a6811656a265431f9aa56feda7e8267d6e3351ce340a79856e59de5db2c919c6726cff7ee678b95390d6c6ddd2ba323be59eb4c42f08a2f9973ff0c45820d59b50b6a153775ed0e9e73e73c6ccb98887bf70d35d97ae8d226c35b4fe8a5d4cda816eac80cdb962e8444a5cb4452ea83da83ccb437c7b00e146d7b71aa86a0933aced67fada0588dfd280066f5a735215691ecdcfd474dd0ae3c644af51a79f8fe7a84b0c2130e619dba270a101b0d1669c9317d5e548a2cc3755d5a37817d8eaae8059713854fb1b5b70991ac62db6453afc3bc4fb78a5cdd56e22b4d7abd70e6370ba28d5cba9478886f232a482cc4a1dda770c0458c8bef5ac19d8f4a24117d6ab0c7d37928c05a9b51cb6b2d8f5e422383dfae0f8152365fea2a948a12899aac9587a01ed162e6e70572d3eb02fec0cf0af4e65757f4bb535aa4fb82a193f79913b09e8a4d1ebe26eb4bd3d1549ecb20a08c501bfb5aa8ceb236a99d6ac3cf7be65475a867c27d301bd62a947c1d03e7247db527d9f7356bd59ea335f3c0afe3de183fc16c77e658aade451f036c34b9ee58ba53672994358355209728a760d76aa2f22d7d4e37732cca6404fde0d067bc97a4020a9f3946893743fe132704285a7e1b01403955d61aa22805dd592e4f4af41bd3c3f3ff2b1f0fa434c141261fc28b2bc1b104c78ed7f27cc9609a3d9ca2b8b976dd2374db05550e85032d7e080fac951aa68eac62a9de55565ab6201508cff33c38286494184219c919958415b50420756d32ea98cd04b6ac9c5f311fc933e48a597285c2f8a3dc008f174854b6ea186af6aa55aeecc10345b7d9bb9d2bbd3c0bb8153f6fbf080f4cd49e07dd850ab3a44cf505fecc8cb52b0540a60598ca941d40bda71b16f703bb30e344d3de13e540bc1205a1d9b3c94658b2199b2f2008c9f106eae565ef605278b8779ece25cda761069c7c72f020b820a39e6d0c441cdb00a41292c3146f39d2a5f7bb2fc8723a318fe3df11ce8a2e81eeabd0dd9245cb0f54a6d048c428c899182804cff8947361c01b009214b7d95617d312fbbfd379925f402bd9cc0cf5c25f14c24c64ccc7d87add9ce615711c9c6df6b0866d001f4669030abde15fd2e4059f25ad1c5543ededdf6d26c5a4f52d6c4448d105bbaad24a88cdc41b7e741c82973dc2578f9f1fd1faf4e522eb08c430f4efc4772fa4f6e504164b7b0b275635446c64fe3764cc13b1903b2a359eaa16c28abd331a34f78354ef286116c7b4a0ed3b8c38e8667f26a4ad8de9e205b9f1b24ec8c46a3c3578655f45d4356bd9504b2c4bceab55e7b02cd53139c1b5f044d9182b1e41c9020ad44eb31b8e8a7bf01e85c182ec849d7ed42d69eda8eb57d58c1c38e4ef4c3266fab97db4047eee31d289e91c53b243f5ad50af8de32c35cdd1165c894cfc9df5f59f55b2acdf81b6ee3db4eeed50c7cad36cf53dd10ad592c6d059f067d76711c067d42a148443a195512ea16f41589b3f1dace5e63d2c1255ea19c8ef1836ed19ff7ccaf96536548c06d4fdc76daf99d960c040e4df0e5a1f39f57bcd6dc294adff4af3a8ef364338049c5991d532a248aef4a0d166de764a4c3b583b6f8c30a8cad255f34f342f2b778fdda98766e11c21f4df0db226e6bfb66e71c342d904e99d506aea721d01456938e02f60e78b2652204819ed4595ee77e987d9646b2720ecdd41869653f7225e23dec28dbf0709a1da684693cb22f5b74f569f2d424499eb246ca8d8cf9ba86b2f1d25ac5e3707d46c46fa5d3008cc01aaf2e645b92dda134010df5ce5ad6ca03c2a30ae023a72688f766bcc821f24fb81d1c9edf5da5d96816476a3afcd4df699cc2b98664af0d1365e589673ee7272e3746d7e95ff6c87e1d5ae8055551724e3ad3c50d852eeac1333a4507d096687c6a7765accefc4b22dcc36a73f231d6c9dc242a5e7a0309415bb10455c2df3bf719c79d73e35ad068f5473b66c7e9bf769919b295d6c9dce8f774a21bb7878fd7d4b887bd2efaee03c73532a35bd23810dfe10e214d4f9cec03c72afa212f009e068852546eca171ce2c7070228901527621eca6771cb75b1613df30ad1582df923e12b91013f73102f130fb33b85d82f038bc1f54e6f126d5077262ca82ea7130995a5b24c4974ca8a1b1d4ae7c3417d05547cdf5e6030c4d02c6cfa0bec697be7df432b8d78926831d00e7bca1a5e67e6d55666cca07c6842950cd793ce986da89185efe61046e863add47c745775b8e3727b074434f1c14c502e44d276b73ad2faad946cef2435fbf1225076c461b76b3f83e24a05cbaf0fed70c3a05f4765c0499a9b7a80805be294053e7f27e2260e1ddd1737d535aeb7692a0c8c169b5c058a9d217776b1a9888dd8175477f4cfa44b83715ab4f6f212153628554f719fcdb6bd376c1d443c2692ba8f2db168c63723eb8c88e9a9612a0934ee66dd63daab19078d61fe68ab10a621460d98d12bd3cc6799b2c35eb1010a457e2f36fccf3b37a96233d844291bf798f630fec23525ffa41e64b17b895c28ff7699cf31e9faab9b2f515d2e14dd3981ac7c21dea76810ab33ac178648ecab1cb09b158f43d1d9a97ab05b52c322d02206922a719a400367796063570b480980d4f9347214d747ce0de4f56902df321e892bac8a79ededdac14b93682b9ca8b95452b68c8ec3fa1ed188237dd1f67a286d988fb8e43889c00f4a87a3e6416bfb34259646296cd5f73d0e00534309af6e8f5e0e54c63fca9822505237f4e3cd95b8adccf45f3709e8427da5d7c3c57c99286a2c094db3f815373a756e9ffd2af88d6e69a8829dd4a7cee75942aea8556ffcd82653fce46daeee574ed7502fb2b1e8dd8d60a5d46b898684a0d715f643ad91505747cca04968e6a1d0c447e036e1ca25419cd8bd785402d88bce5e40532b1806aee693f8b5030cfad71e9f52d0445304aa2af28893b1bc731f37b55bfc6e5846634482cfa3cee7e9d2c8a34a48fcca25393d7b3fe5c5a3c2d53de126654468984ab1777954272c6e25ba392f3c3c2a658518625921196839ddfbaa0bab14836ea12e63542a60db72048bc0770351cc2c30ed6185ce69b61f8160078415e86f9bab5f399bd7ed4b720fd19fa327f440f6054937b0dd6ef511849823e6162e0c7d1f846f9ebafc32583954e7b136303977a191d9974e939fc7cac14134026967b5408fa6907afbdfa41cf80a17c251fc1363725987819f165518f86fee07ca1660c25d04f157ecd43b8b92f93b2c6c02e0c1e715836d70c503e60ceaeaaac61f7b9e07d3fc9904ecfc81ece857754191e57a8991bd0042750b53722f35741641ebd5c5febee02d648fc1d048bf916a8d8f33227fca790602c02dfbd4aad34f2dc8e77e537ad4042a553e5e8a0a15dbee27da24ac13048378899c3a8772a0d8b85c442c8082f464b58fc016e845186bafa8fdf4f04d0d952136d4c7be90a909e3e6adcb3d74ed37da19769cb81114ead1a40dc0368169e5c230eb02a0d1c1a11ffd808f27159baeaa8879a034dcaf6a70b2f99e5859ad9c7465d61b4b51e993d8b93095ca63675dee276ba112bd2f469efdfb79fc8c97b809e0076001b98651bffa6829b2141fb3ff789d0ddc3d73b077d36521841ed9aa5a8a134f5875c444c62efa1f9b0d98a4bb4a62760a15d33824791420a5a89467ec364f30954db77219b849677e0f5bfea9c3d2a3a1e1e76ce3df4c8b9a6a3866b20566e7c68c6d32bad4d70fd2b9235fa7d38475ec1b9c9d746f55b02bdbdee6dcb6238caeed353de28d1e6e2d5126117e5fa82b9d57b703dd527736b51444b0d7d4b77562d4a370a202ed70b4940bf58ef3ff8801f78d632f2d2428fb133a910aaf4757b32d657d831c5575398aa88643e7fb1431ed0dec16a505e2d8583ef3d8787413bbdfe132c921d16cf272ca791e88e196824ea3a5c009a6a21b88dd1d6d6f87733528959ed24a4d3505d469d32a09b1970329add757c533afea8f8314c58400c0f3e25b703d9757c4b04f1b1bf293defb008ea60dcc77b0d3a6e9a1286c761bb3aa0c8f3aed74f8cab11094741c093e495867afb3857d3a92ef0fae7253b2bc3291a9ac0dcdb62c517ce2471ca23d985012f2e860238ccbec834039e8538de07f6086d1ac09027729bcc4e0bbd36e931be4242ec7135d16b01b3da39b1cd1c1d751017df8ffb31875f5a541a94099a4f035044f310fe5356d3b2d9a1eb5bcefd422e546bb3c169b8793df2764e6390dd161d90943a55d40f1984e1e211fd0227296e2b5c6485ad19675dcbce483a88f5c68d44b80ebb716c1aa0017ebafe340a0273b48979c7dd4e426f8c0a736e40c4f844a037742d00a73b67fba3c14051c6278c4dabdc4d8446ab5762e2d9d4f34359da34cdc333735b02e5deb9f71c8af1a5cea228eb70d0d8b371e378f5fd8172e60d9432e38e8eef54758d89e5413693ff2deb95fadfda6ecb6feb3adeae0c08860056a23d122e7b070568ca196b58cf0c5e737be9f2d9c66fa2be4f532c603ea8533cf06152d231cd2513cdcf212af2869ab96488f5cc484cf773c4d6eff8573b9487e51c84c3ea2e03e0bf3bea7717b8c92470a05d6e518265e8d31e23a22dbefbf82bb2a81d6c76372c5f41b19c5bcbea706ebd0b3cb7e52be6f8c70b7fbbfda4de69318cf9186aaba9d94c93b2df2310c44ed93d937db65b5f596dfaf6b52a7a4ae77c4b096d0075189cb568e4bbf6ce9c796839855440e6f060e241f295e4f76b0f162dacb2cb2e47a06961152e0057ed615fe14943822e8d6fa18636f3168f09ff2986dbf1904043ba4fee74b5c4706781568861df4c9b13bf2a815ba7c69a0b60114e19d817c3a038921fbb1b47acb8597bb38f7980f8b628f3565b09d7f7be504264ff143409b54516b4e79bdf7147eac7b1de7e43d76c558d6306bf780095f2bb5b9ffa3846df980001b22171d65463c17f4adbb95274abe315707946e65026a86d1b368586046e0cfd2a99352c16b9bbd91bb839c443e9962ae35a9d0dd6e2a48e773e6ac06597c6e428f5cc14836e6462135972bec63de2e7e3b5306704d44c2d9367308ffc4bb43cf839e37ee5fda8e50383aaf2eb67004645fad98662d6ce3d499ed921c9015ee5691b030f53cf95c346131097fd8fdbf257dbbb4410fb1dd14d64e384ad486ed5903866cb1982c606d41d611d4bb6298fb26cf965a7dbaf57309d46483fd5ff7c4782341446e7ad9695c52f7aa57a0c856214f67b7a7b8def0e915f5eb2ae457e4800d8791faac0133cb3851881aa429826cda874a42b7956a032f3d0615296c4f706ed649690d196ca6a6a2481be470c0a3922c7789276effa51e0221c8e163ce47dd8ba62391882338ad843d5579a6c3cd3ed711d770b8e0be9de4c91120bc01d69f457715fd770d6c335de853c87be3b638953faa0f2284d415c537e01285afe9b7f54d7a432bb7e16cd18621b6e5769b635dba997a5c65279bad6522d189da110e549f51fe20af42fcabf1a900cdea166bfe279855b8fdcb1bfb97049238dd17aec8093ea38b04e04bf43dd1b43658abab3b0b395cecf73d59279b9001e0d4ba93b95de101534ac718336a82216f2112b7aa0235c15594960f4771a0fdc21b4636ce3ddda5dd63291bfedce53347b725f8fe17848319b05cdf4c8d3d198b64deb3e10f6fab3db35ecce06908cd4f26cbda0f8c4a7deeb6ee12e0b5c13dd022851e6da21f44505697a4a974a10e57145bc75960ba59e189768938e89eb0c81071b45345ce428e90c4fc04ba11e75127f96698a4a2dba776a0f0a1576853d39e0ad3addb7bc1f3c030794d1fe621799d34582d07b80114df1039cd2866f1899f19fe34b946571c17f8b3efdc0e857fcf83f1ebc2b99ad59485fef3057e07534d36e7b4350dee86fe84f6f85f75330064301e2f055e017cc187f93bb8e92583b9e6e3999ae5c7ad1521ec77ee0ba476308242f9d6cad4d5ed385924c3806077f0d143bce70b9205b6d59f8f107f50133fd6fa87ddffaabab3a16156d353c28c5b3d92ba8643e4f06b866ea3f7ffc604a234750e5eba551e4787b340ddc90081b74a0d2e7df723e73b09e5cd38568993f171ecd6056aee45496c8d8fc458f8e2e721e359541cbb9dbcb1d801538cb84324fb090e960d53bc81c0020229e38e36c186cfaff1a1bc385e2d5338bd3bd9148730275b36f2dab198ee329b060159efb17ab00e40a940245d8ca47712921db546dde1100c29ff47dab5dd8cf10cca97565ed96901b0309841d7e3d746cde9fb1985cc276e4420636b145a2ee8720ad2fa2c256b995879b95e2e597f6d6fdeac1f2d349e3305322cd4b0df519abf958e874ed6d25bd4eb7418e9e45addd44e4a9e6cdf7b553cb48fc0c2d12683b2a83d2aeeaf03b6718abfaaffa59f38879a1b380668ade3e320ec2db4bdfa4409d09abf35fdd2ff501dafd55fbb2dd2ff2821a47ef41f644f4cc87d4a41576e2618a4da38302aa3ab38516e656b5a64f790a008d0200aede7267bea8bfe554e7d082d11d8ec186e314b070b5ea07b0ae722b4f2ab965bea7f906326710e0909eb1c0ba9959dd97a7b5331494d87b74c04587e4b78c420b8aa8ac99ad6c59d05d35a2e370b2126de5eb8901cc6ba879ee86de290bcf77e0bed67a74932794b3faaa187f5fd23a7932037f0a3d4517a1509eb981752492d13aa7d48d997fb71e65ee97db61d51ede49a215a158890bb60103f5502893a998be6ba800a07ecf9d8e5379b817621047933b3b314b7cb20abb6c30c6d490db451c7ee5c37942b5e886e0b43f21b9ff383ab80461e1a2c9c05f870111d023fc49dc425fae83e848eae43772902f83bdb1af645039e0cc961d6ce39588bd4b00e2a5e55ec02cfcc3ebe3783fbedab8ab64ed2d78202493ff6550471ba6196e73ad2b35f828eceaf8e340b78e9ff0fca04431e56cb7d0c3e366f938f0d7d966ba34458b0ac9dd6dd5c0034f73f902ed2183d7438377b72e81919ce168f294009c734220b4a501ec8e47b2d1f3f69605ce91fc825b5c4ac7b267718cf28c81d485aaa7de1d0dee66f677b6ee9ad02d75099c653decac58e0f1e13f414304b972d6e17d3d1fc0ff30591b82aa785a3dbf24c59bc8efc57fdef33c7c2d051214d9d8f48a9a71ed77ee6a3a2a699bd3882a4a71ccb714c8a911388be571a2a7136b9c308c5c854f6ed7bb74bab77076ff3d48ba989384ee4dc996262fc9e1585d2638107df8615d66f335d147efb64373ad8668fb50e00eba86ef4c65842cbf246496e997fcf0546c043740035af30e05f69d69ae06334e249fc828d5c3d1d58f31f2e439fd6d415be63ac6c88385935bdb11f4e8cba2f0209314253a0e5001fb029cfff63e012c379d8269611eb3868055868087f3916990089d3cb9dd201db0fbc4768a03b4c36c2a58511932468ce65f6b2d5fdaf3b1e669dbb7bd3ed2525d6f81944512d79918b1b14e17e225b3b7cce0bbcc073eec2ca8aa47a260d4842ab5a0e29b163d83ed1392ede695ad64e44f530af80aa4af328f8fbad8e4ea11f71bfc8418a145ae47612f9e7a7d4d037c3249e5d3a1feded9798dbd78af07990aa8d607254194256c1c662479a881f8bb6e6ecc4cb92aacd919fef13e78b58ad44ef3a3e7e0145950706e762c1ac44e78249cd1a29c5dd1f635c596c8046cc432024079ac0eb4b7376d89ac60485300594ce3a2498a374e0ef103a6aa5e0c42df5cbdb6da478bcfece47ff79e79cc2abaa7678a2d6f5f26bf3702d3b07cc5cdf5f402b2b5801c7d5489ecdef4477d111a5040f65cf7ba8586509151890a0a1ff2a093b1b969a4d01fbb29de063138d5407ff358d7c98a8ec79a424d3080d5b9b4533f23dc80ad3fd9baef5d1895576a8af9479c65f772874b9f7b0379d9212f386af9fbe816179316290746a973b5178601b861c1054e9d8f38426edfbe8206765314c723f262fe0e32950f68f00a45582e6e72d0140614035f58e3527eba96d29363f966bda6a29b4453285ad94b3eb51ebfbf5afba8bd6a89fc54e8cfc1d8b91555282e27ebcba8b2aa7f4d397b6b017bbcd80d30fc0180cd93b97541a0b127925d609baae79e4243c34b9660a17ff066c4b906ba554655dc30e47cca38f18e5190ff861dc3cb2bf777052da48bcac3925db0b9e9ce401c1cb2c2a1c51d0c420d357af3c939166cc01759d50f9e65fb04957c7c5c5ac46433e064ec563233d8dc7eea97d9f5c12b4a03a46ce306550f3bd4c7166dea3d4876f7a83b39b207654e6fd2a01abadfb2a3f19436c065088ea49859d5dbc8fdfcf1e0c4857cc512870795fe74989f674f40875a5104713ad3560ee1ce61df8fa6b97937703c7434fbf81009890d98f327954c3f7800e39fe5269e5b030b6cd8312bff2c0c44eb435ab1a3d861a0aaf01e992776d135d33e0b02fb28ca2d06c545366f222f55d28514d883e11aa255681ee7f20d61f73a5c20955ea919c557c1b7403401c34ceb76cde309ab991a13a5b6c3535dff4118b1162a22329be3efba01f08d3f0a9a68becd040c09bf6da005aea6c8120af5c6775925af7e042a1847087067c1b8e1527dc2b9ba6fc3082b47a9e42a7eddb980ecda3f66ab5af600b5f92d1db42032b1fb4a11ed8a4732ea3ec73454ebf0b84acd58a545ccc95b9f413044f47b9e40df58a8225651c379ace7b826cfe7f5bd5205917b606cc7fe266702918eb7da26be268e137aea627ba1b849961692ccc8a6fe2d42957601fc95e393a399c6199a2f1c0adf2187711b9e82023872a99fc25c7144131364ddb03d392961080734533c49911fc91e1a2d2b14f7db46d8133a9b2ab3824b53f620b659c877ca458c1c8d0cef838ec467bf67f2060b688fdb0f8ba0948da364a742d87e2eb2173b2cc019d1c76b53505a87ae986cab70db7885056a3989dd1a3abb6f21d3415f3e53aba7ed09b6864a", 0x2000, &(0x7f0000000440)={&(0x7f0000000200)={0x50, 0xffffffffffffffda, 0x3, {0x7, 0x29, 0x7, 0x1021900, 0x5c9, 0x1, 0x8001, 0x5, 0x0, 0x0, 0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@random={'btrfs.', './bynderfs/\xdf\xd2nder0\x00'})
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@random={'os2.', '/dev/rnullb0\x00'})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0)
rt_sigaction(0x1, &(0x7f00000004c0)={0x0, 0x40000007, 0x0, {[0x100000000]}}, 0x0, 0x8, &(0x7f00000005c0))
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x40, 0x0, &(0x7f00000005c0)=[@clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}, @increfs_done={0x40106308, 0x3}, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0})
splice(r2, &(0x7f00000001c0)=0xfffffffffffff001, r6, &(0x7f0000000280)=0x6d, 0x7, 0x9)

kernel console output (not intermixed with test programs):

er: Error while translating object.
[ 1433.328750][ T1847] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[ 1433.334934][ T1847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:508
[ 1433.778790][ T1851] __vm_enough_memory: pid: 1851, comm: syz.9.21711, bytes: 18014402804453376 not enough memory for the allocation
[ 1433.955096][ T1859] rust_binder: Write failure EFAULT in pid:52
[ 1434.104322][ T1863] netlink: 'syz.5.21717': attribute type 4 has an invalid length.
[ 1434.118647][T13529] usb 10-1: new low-speed USB device number 73 using dummy_hcd
[ 1434.278988][T13529] usb 10-1: device descriptor read/64, error -71
[ 1434.535555][T13529] usb 10-1: device descriptor read/64, error -71
[ 1434.673706][ T1899] rust_binder: Write failure EFAULT in pid:56
[ 1434.728849][ T1905] tipc: MTU too low for tipc bearer
[ 1434.802812][T13529] usb 10-1: new low-speed USB device number 74 using dummy_hcd
[ 1434.824244][T13551] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 1434.962889][ T1917] /dev/loop0: Can't lookup blockdev
[ 1434.968214][T13529] usb 10-1: device descriptor read/64, error -71
[ 1435.007144][T13551] usb 6-1: too many configurations: 151, using maximum allowed: 8
[ 1435.038989][T13551] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[ 1435.048168][T13551] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[ 1435.057226][T13551] usb 6-1: Product: syz
[ 1435.061467][T13551] usb 6-1: Manufacturer: syz
[ 1435.066078][T13551] usb 6-1: SerialNumber: syz
[ 1435.072657][T13551] usb 6-1: config 0 descriptor??
[ 1435.230451][T13529] usb 10-1: device descriptor read/64, error -71
[ 1435.298359][T13551] usb 6-1: bad CDC descriptors
[ 1435.314590][T13551] usb 6-1: USB disconnect, device number 46
[ 1435.360406][T13529] usb usb10-port1: attempt power cycle
[ 1435.395107][ T1938] fuse: Bad value for 'fd'
[ 1435.435225][ T1940] /dev/loop0: Can't lookup blockdev
[ 1435.732944][T13529] usb 10-1: new low-speed USB device number 75 using dummy_hcd
[ 1435.768198][T13529] usb 10-1: device descriptor read/8, error -71
[ 1435.913359][ T1946] __vm_enough_memory: pid: 1946, comm: syz.3.21747, bytes: 18014402804453376 not enough memory for the allocation
[ 1435.936383][T13529] usb 10-1: device descriptor read/8, error -71
[ 1436.111742][ T1957] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.116294][ T1957] rust_binder: inc_ref_done called when no active inc_refs
[ 1436.192576][T13529] usb 10-1: new low-speed USB device number 76 using dummy_hcd
[ 1436.227030][T13529] usb 10-1: device descriptor read/8, error -71
[ 1436.264030][ T1961] rust_binder: Write failure EFAULT in pid:540
[ 1436.279178][   T36] kauditd_printk_skb: 642 callbacks suppressed
[ 1436.279199][   T36] audit: type=1400 audit(2000018962.375:272786): avc:  denied  { ioctl } for  pid=31789 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1436.338551][   T36] audit: type=1400 audit(2000018962.393:272787): avc:  denied  { create } for  pid=1962 comm="syz.5.21754" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1436.360987][   T36] audit: type=1400 audit(2000018962.393:272788): avc:  denied  { map } for  pid=1962 comm="syz.5.21754" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=236796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1436.388213][   T36] audit: type=1400 audit(2000018962.393:272789): avc:  denied  { read write } for  pid=1962 comm="syz.5.21754" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=236796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1436.414703][   T36] audit: type=1400 audit(2000018962.412:272790): avc:  denied  { read write } for  pid=31789 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1436.439285][T13529] usb 10-1: device descriptor read/8, error -71
[ 1436.453017][   T36] audit: type=1400 audit(2000018962.412:272791): avc:  denied  { read write open } for  pid=31789 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1436.478935][   T36] audit: type=1400 audit(2000018962.412:272792): avc:  denied  { ioctl } for  pid=31789 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1436.505302][   T36] audit: type=1400 audit(2000018962.431:272793): avc:  denied  { read write } for  pid=1967 comm="syz.5.21755" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1436.530528][   T36] audit: type=1400 audit(2000018962.431:272794): avc:  denied  { read write open } for  pid=1967 comm="syz.5.21755" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1436.556390][T13529] usb usb10-port1: unable to enumerate USB device
[ 1436.573923][   T36] audit: type=1400 audit(2000018962.431:272795): avc:  denied  { read write } for  pid=1967 comm="syz.5.21755" name="binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1436.668695][ T1980] netlink: 44 bytes leftover after parsing attributes in process `syz.2.21760'.
[ 1436.677820][ T1980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21760'.
[ 1436.687017][ T1980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21760'.
[ 1436.700234][ T1980] /dev/loop2: Can't lookup blockdev
[ 1436.756661][ T1983] 9pnet_fd: Insufficient options for proto=fd
[ 1436.759995][ T1985] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.775105][ T1986] 9pnet_fd: Insufficient options for proto=fd
[ 1444.950746][   T36] kauditd_printk_skb: 85 callbacks suppressed
[ 1444.950767][   T36] audit: type=1400 audit(2000018970.485:272881): avc:  denied  { read write } for  pid=1991 comm="syz.3.21765" name="binder1" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1444.965438][ T1997] __vm_enough_memory: pid: 1997, comm: syz.5.21766, bytes: 18014402804453376 not enough memory for the allocation
[ 1444.984074][   T36] audit: type=1400 audit(2000018970.485:272882): avc:  denied  { read write open } for  pid=1991 comm="syz.3.21765" path="/dev/binderfs/binder1" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1445.024139][   T36] audit: type=1400 audit(2000018970.485:272883): avc:  denied  { read write } for  pid=1992 comm="syz.5.21766" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1445.050299][   T36] audit: type=1400 audit(2000018970.485:272884): avc:  denied  { read write open } for  pid=1992 comm="syz.5.21766" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1445.075464][   T36] audit: type=1400 audit(2000018970.485:272885): avc:  denied  { read write } for  pid=1991 comm="syz.3.21765" name="binder1" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1445.131650][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1445.139479][   T36] audit: type=1400 audit(2000018970.485:272886): avc:  denied  { read write open } for  pid=1991 comm="syz.3.21765" path="/dev/binderfs/binder1" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1445.180346][   T36] audit: type=1400 audit(2000018970.485:272887): avc:  denied  { create } for  pid=1992 comm="syz.5.21766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1445.228680][   T36] audit: type=1400 audit(2000018970.485:272888): avc:  denied  { bind } for  pid=1992 comm="syz.5.21766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1445.272968][T31588] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1445.285355][T31588] audit: audit_lost=327 audit_rate_limit=0 audit_backlog_limit=64
[ 1445.432991][ T2024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:414
[ 1445.539047][ T2028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:416
[ 1445.623248][ T2033] overlayfs: failed to clone upperpath
[ 1445.691671][ T2035] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:418
[ 1445.847647][ T2044] tmpfs: Bad value for 'size'
[ 1446.134853][T13530] usb 10-1: new high-speed USB device number 77 using dummy_hcd
[ 1446.297623][T13530] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1446.309263][T13530] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 2388, setting to 1024
[ 1446.320606][T13530] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[ 1446.330781][T13530] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1446.340004][T13530] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1446.352955][ T2046] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1446.360174][T13551] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1446.519704][T13551] usb 6-1: Using ep0 maxpacket: 8
[ 1446.527911][T13551] usb 6-1: config 128 has an invalid interface number: 89 but max is 0
[ 1446.537609][T13551] usb 6-1: config 128 contains an unexpected descriptor of type 0x2, skipping
[ 1446.546537][T13551] usb 6-1: config 128 has an invalid descriptor of length 100, skipping remainder of the config
[ 1446.557048][T13551] usb 6-1: config 128 has no interface number 0
[ 1446.563542][T13551] usb 6-1: config 128 interface 89 altsetting 9 endpoint 0x8E has an invalid bInterval 94, changing to 10
[ 1446.574898][T13551] usb 6-1: config 128 interface 89 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1446.588020][T13551] usb 6-1: config 128 interface 89 has no altsetting 0
[ 1446.596987][T13530] usb 10-1: USB disconnect, device number 77
[ 1446.601150][T13551] usb 6-1: string descriptor 0 read error: -22
[ 1446.609576][T13551] usb 6-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=99.4d
[ 1446.618671][T13551] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1446.861605][T13552] usb 6-1: USB disconnect, device number 47
[ 1447.056010][ T2065] __vm_enough_memory: pid: 2065, comm: syz.5.21788, bytes: 18014402804453376 not enough memory for the allocation
[ 1447.078044][ T2067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21789'.
[ 1447.113567][ T2070] netlink: 'syz.5.21790': attribute type 1 has an invalid length.
[ 1447.195951][ T2074] cgroup: No subsys list or none specified
[ 1447.534900][ T2099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1447.553564][ T2083] rust_binder: 577: no such ref 0
[ 1447.558933][ T2099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1447.570700][ T2083] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1447.578090][ T2083] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[ 1447.915167][T25793] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1449.200411][ T2122] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226)
[ 1449.200441][ T2122] rust_binder: Error while translating object.
[ 1449.211677][ T2122] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[ 1449.219230][ T2122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90
[ 1449.232307][ T2123] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1449.346876][ T2134] rust_binder: Write failure EFAULT in pid:100
[ 1449.402387][ T2136] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=2136 comm=syz.2.21809
[ 1449.446011][ T2139] fuseblk: Unknown parameter 'audit'
[ 1449.493782][ T2141] netlink: 'syz.2.21811': attribute type 4 has an invalid length.
[ 1449.588342][ T2146] batadv_slave_0: entered promiscuous mode
[ 1449.596080][ T2146] batadv_slave_0: left promiscuous mode
[ 1449.962111][T13555] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 1450.069015][T23689] Bluetooth: hci0: command 0x1003 tx timeout
[ 1450.069212][T17382] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1450.133119][T13555] usb 4-1: Using ep0 maxpacket: 16
[ 1450.143852][T13555] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1450.153995][T13555] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1450.184181][T13555] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1450.207953][T13555] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1450.216020][T13555] usb 4-1: Product: syz
[ 1450.221303][T13555] usb 4-1: Manufacturer: syz
[ 1450.225936][T13555] usb 4-1: SerialNumber: syz
[ 1450.316846][   T36] kauditd_printk_skb: 627 callbacks suppressed
[ 1450.316867][   T36] audit: type=1400 audit(2000018975.508:273515): avc:  denied  { read write } for  pid=2181 comm="syz.9.21826" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1450.356809][ T2184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21827'.
[ 1450.368428][   T36] audit: type=1400 audit(2000018975.536:273516): avc:  denied  { read write open } for  pid=2181 comm="syz.9.21826" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1450.392861][   T36] audit: type=1400 audit(2000018975.536:273517): avc:  denied  { create } for  pid=2183 comm="syz.2.21827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1450.414219][   T36] audit: type=1400 audit(2000018975.536:273518): avc:  denied  { map } for  pid=2181 comm="syz.9.21826" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1450.427785][ T2186] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1450.438370][   T36] audit: type=1400 audit(2000018975.536:273519): avc:  denied  { connect } for  pid=2183 comm="syz.2.21827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1450.442868][ T2186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:458
[ 1450.446146][   T36] audit: type=1400 audit(2000018975.536:273520): avc:  denied  { read write } for  pid=2181 comm="syz.9.21826" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1450.476585][ T2151] __vm_enough_memory: pid: 2151, comm: syz.3.21814, bytes: 18014402804453376 not enough memory for the allocation
[ 1450.497926][   T36] audit: type=1400 audit(2000018975.536:273521): avc:  denied  { create } for  pid=2183 comm="syz.2.21827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1450.529926][   T36] audit: type=1400 audit(2000018975.536:273522): avc:  denied  { setopt } for  pid=2183 comm="syz.2.21827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1450.549805][   T36] audit: type=1400 audit(2000018975.555:273523): avc:  denied  { read write } for  pid=31588 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1450.574222][   T36] audit: type=1400 audit(2000018975.555:273524): avc:  denied  { read write open } for  pid=31588 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1450.600513][T13555] usb 4-1: 0:2 : does not exist
[ 1450.605473][T13555] usb 4-1: unit 9 not found!
[ 1450.611934][T13555] usb 4-1: 4:0: cannot get min/max values for control 1 (id 4)
[ 1450.621771][T13555] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4)
[ 1450.635711][T13555] usb 4-1: USB disconnect, device number 71
[ 1450.677431][ T2000] udevd[2000]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1450.905058][ T2193] 9pnet_fd: p9_fd_create_tcp (2193): problem binding to privport
[ 1451.226626][T13551] rust_binder: 2208: removing orphan mapping 0:4096
[ 1451.277673][ T2215] ./cgroup: Can't lookup blockdev
[ 1451.354813][ T2217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2217 comm=syz.3.21838
[ 1451.768809][T13530] usb 10-1: new high-speed USB device number 78 using dummy_hcd
[ 1451.907795][T13530] usb 10-1: device descriptor read/64, error -71
[ 1452.137363][ T2239] can0: slcan on ptm0.
[ 1452.169711][T13530] usb 10-1: device descriptor read/64, error -71
[ 1452.399561][T13555] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1452.442327][T13530] usb 10-1: new high-speed USB device number 79 using dummy_hcd
[ 1452.571564][T13555] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1452.591990][T13555] usb 6-1: config 0 has no interfaces?
[ 1452.613359][T13555] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[ 1452.614653][T13530] usb 10-1: device descriptor read/64, error -71
[ 1452.645004][T13555] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1452.677268][T13555] usb 6-1: config 0 descriptor??
[ 1452.861196][ T2263] binder: Unknown parameter 'context����[7�'
[ 1452.891330][T13530] usb 10-1: device descriptor read/64, error -71
[ 1453.010766][T13530] usb usb10-port1: attempt power cycle
[ 1453.022277][ T2269] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1453.029657][ T2268] rust_binder: 129: no such ref 0
[ 1453.034827][ T2269] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[ 1453.369992][ T2280] rust_binder: 141: no such ref 0
[ 1453.375186][T13530] usb 10-1: new high-speed USB device number 80 using dummy_hcd
[ 1453.383400][ T2280] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1453.390625][ T2280] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[ 1453.417488][T13530] usb 10-1: device descriptor read/8, error -71
[ 1453.539261][ T2292] netlink: 'syz.3.21858': attribute type 6 has an invalid length.
[ 1453.549922][ T2292] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[ 1453.549944][ T2292] rust_binder: Read failure Err(EFAULT) in pid:143
[ 1453.568022][T13530] usb 10-1: device descriptor read/8, error -71
[ 1453.639148][ T2299] /dev/rnullb0: Can't lookup blockdev
[ 1453.836612][ T2319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21866'.
[ 1453.842819][T13530] usb 10-1: new high-speed USB device number 81 using dummy_hcd
[ 1453.877137][T13530] usb 10-1: device descriptor read/8, error -71
[ 1454.016451][T13530] usb 10-1: device descriptor read/8, error -71
[ 1454.131552][T13530] usb usb10-port1: unable to enumerate USB device
[ 1454.518562][ T2329] /dev/rnullb0: Can't open blockdev
[ 1454.527741][ T2329] overlay: Unknown parameter 'fowner<00000000000000000000'
[ 1454.631421][ T2334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:160
[ 1455.125674][T13551] usb 10-1: new high-speed USB device number 82 using dummy_hcd
[ 1455.280849][T13528] usb 6-1: USB disconnect, device number 48
[ 1455.298844][T13551] usb 10-1: Using ep0 maxpacket: 32
[ 1455.312185][ T2239] can0 (unregistered): slcan off ptm0.
[ 1455.320107][T13551] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1455.350163][T13551] usb 10-1: New USB device found, idVendor=056a, idProduct=033d, bcdDevice= 0.00
[ 1455.375243][T13551] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1455.387782][T13551] usb 10-1: config 0 descriptor??
[ 1455.661951][T13551] usbhid 10-1:0.0: can't add hid device: -71
[ 1455.670890][   T36] kauditd_printk_skb: 969 callbacks suppressed
[ 1455.670920][   T36] audit: type=1400 audit(2000018980.503:274494): avc:  denied  { search } for  pid=2359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1455.728371][T13551] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1455.743573][T13551] usb 10-1: USB disconnect, device number 82
[ 1455.758694][   T36] audit: type=1400 audit(2000018980.503:274495): avc:  denied  { write search } for  pid=2359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1455.784069][   T36] audit: type=1400 audit(2000018980.503:274496): avc:  denied  { add_name search } for  pid=2359 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1455.788498][T13528] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 1455.808471][   T36] audit: type=1400 audit(2000018980.503:274497): avc:  denied  { create } for  pid=2359 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1455.837624][   T36] audit: type=1400 audit(2000018980.503:274498): avc:  denied  { write open } for  pid=2359 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=21203 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1455.869847][   T36] audit: type=1400 audit(2000018980.503:274499): avc:  denied  { search } for  pid=2359 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1455.938678][   T36] audit: type=1400 audit(2000018980.503:274500): avc:  denied  { search } for  pid=2359 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1455.976895][   T36] audit: type=1400 audit(2000018980.503:274501): avc:  denied  { search } for  pid=2359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1455.990718][ T1558] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1456.001643][ T2382] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1456.032486][ T2382] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 187)
[ 1456.032535][ T2382] rust_binder: Error while translating object.
[ 1456.044373][ T2382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[ 1456.051241][ T2382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:474
[ 1456.064557][ T2382] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 4
[ 1456.084813][ T2382] EXT4-fs: dax option not supported
[ 1456.107771][T13528] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1456.141311][T13528] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1456.163229][T13528] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1456.205415][T13528] usb 6-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[ 1456.214520][T13528] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1456.260243][T13528] usb 6-1: config 0 descriptor??
[ 1456.425022][ T2397] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[ 1456.432260][ T2397] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1456.440630][T13551] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 1456.492405][ T2405] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[ 1456.501907][ T2405] rust_binder: Write failure EINVAL in pid:602
[ 1456.581595][ T2414] 9pnet: p9_errstr2errno: server reported unknown error O�����X��۵רѳl��u�9
[ 1456.615680][T13551] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[ 1456.639390][T13551] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1456.655581][T13551] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1456.667242][T13551] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1456.689290][T13551] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1456.706208][T13528] usbhid 6-1:0.0: can't add hid device: -71
[ 1456.717958][T13528] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1456.728554][T13551] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1456.750730][T13528] usb 6-1: USB disconnect, device number 49
[ 1456.782789][T13551] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1456.804890][T13551] usb 4-1: config 0 descriptor??
[ 1456.816081][ T2387] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1456.955541][ T2434] input: syz0 as /devices/virtual/input/input134
[ 1456.997052][ T2434] ip6gretap0: mtu less than device minimum
[ 1457.273504][T13551] plantronics 0003:047F:FFFF.0055: unknown main item tag 0xd
[ 1457.301175][T13551] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0
[ 1457.313149][T13551] plantronics 0003:047F:FFFF.0055: No inputs registered, leaving
[ 1457.322227][ T2450] rust_binder: 491: no such ref 3
[ 1457.332152][ T2450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:491
[ 1457.334555][T13551] plantronics 0003:047F:FFFF.0055: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1457.360374][ T2450] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 262145
[ 1457.426087][ T2450] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[ 1457.682814][ T2463] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1457.683856][ T2465] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[ 1457.705787][ T2465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:610
[ 1457.759374][T13554] usb 4-1: USB disconnect, device number 73
[ 1457.888781][ T2477] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[ 1458.027872][ T2480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1458.219036][ T2490] netlink: 'syz.5.21910': attribute type 19 has an invalid length.
[ 1458.248552][ T2490] netlink: 5 bytes leftover after parsing attributes in process `syz.5.21910'.
[ 1458.264594][ T2491] netlink: 32 bytes leftover after parsing attributes in process `syz.5.21910'.
[ 1458.302485][ T2491] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1458.302862][ T2491] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1458.316775][ T2490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:619
[ 1458.526984][T13531] usb 10-1: new high-speed USB device number 83 using dummy_hcd
[ 1458.646532][ T2499] /dev/rnullb0: Can't open blockdev
[ 1458.717710][T13531] usb 10-1: Using ep0 maxpacket: 32
[ 1458.728937][T13531] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1458.735796][T13531] usb 10-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[ 1458.752962][T13531] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1458.773672][T13531] usb 10-1: config 0 descriptor??
[ 1459.045065][T13531] usbhid 10-1:0.0: can't add hid device: -71
[ 1459.058018][T13531] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1459.083897][T13531] usb 10-1: USB disconnect, device number 83
[ 1459.118779][ T2515] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1459.132111][T25793] veth1_macvtap: left promiscuous mode
[ 1459.177447][T13528] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 1459.211967][ T2514] tipc: Disabling bearer <eth:syzkaller0>
[ 1459.344644][T13528] usb 6-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config
[ 1459.355309][T13528] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1459.364517][T13528] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1459.382072][T13528] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1459.391605][T13528] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1459.399648][T13528] usb 6-1: Product: syz
[ 1459.403942][T13528] usb 6-1: Manufacturer: syz
[ 1459.408712][T13528] usb 6-1: SerialNumber: syz
[ 1459.493612][ T2517] binder: Unknown parameter '��'
[ 1459.716539][T13528] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found
[ 1459.742142][T13528] cdc_ncm 6-1:1.0: bind() failure
[ 1459.754803][T13528] usb 6-1: USB disconnect, device number 50
[ 1460.479411][ T2554] __vm_enough_memory: pid: 2554, comm: syz.2.21932, bytes: 21200069853184 not enough memory for the allocation
[ 1460.567189][T13528] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 1460.653061][ T2562] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1460.727527][T13528] usb 6-1: Using ep0 maxpacket: 32
[ 1460.742301][T13528] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[ 1460.758269][T13528] usb 6-1: config 0 has no interface number 0
[ 1460.764982][T13528] usb 6-1: config 0 interface 184 has no altsetting 0
[ 1460.780373][T13528] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1460.794591][T13528] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1460.811901][T13528] usb 6-1: Product: syz
[ 1460.817032][T13528] usb 6-1: Manufacturer: syz
[ 1460.821674][T13528] usb 6-1: SerialNumber: syz
[ 1460.834636][T13528] usb 6-1: config 0 descriptor??
[ 1460.851045][T13528] smsc75xx v1.0.0
[ 1460.886072][ T2569] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[ 1461.048864][   T36] kauditd_printk_skb: 1010 callbacks suppressed
[ 1461.048884][   T36] audit: type=1400 audit(2000018985.545:275466): avc:  denied  { ioctl } for  pid=2573 comm="syz.3.21940" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1461.084032][   T36] audit: type=1400 audit(2000018985.573:275467): avc:  denied  { ioctl } for  pid=2544 comm="syz.5.21928" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1461.109992][   T36] audit: type=1400 audit(2000018985.573:275468): avc:  denied  { ioctl } for  pid=2544 comm="syz.5.21928" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1461.135284][   T36] audit: type=1400 audit(2000018985.573:275469): avc:  denied  { ioctl } for  pid=2544 comm="syz.5.21928" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1461.161566][   T36] audit: type=1400 audit(2000018985.573:275470): avc:  denied  { ioctl } for  pid=2544 comm="syz.5.21928" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1461.186770][   T36] audit: type=1400 audit(2000018985.573:275471): avc:  denied  { ioctl } for  pid=2544 comm="syz.5.21928" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1461.212201][   T36] audit: type=1400 audit(2000018985.573:275472): avc:  denied  { ioctl } for  pid=2544 comm="syz.5.21928" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1461.219565][T13551] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[ 1461.238802][   T36] audit: type=1400 audit(2000018985.629:275473): avc:  denied  { ioctl } for  pid=2573 comm="syz.3.21940" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1461.270508][   T36] audit: type=1400 audit(2000018985.629:275474): avc:  denied  { sys_module } for  pid=2575 comm="syz.2.21941" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 1461.292033][   T36] audit: type=1400 audit(2000018985.629:275475): avc:  denied  { sys_module } for  pid=2575 comm="syz.2.21941" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 1461.340229][ T2545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21928'.
[ 1461.401721][T13551] usb 4-1: Using ep0 maxpacket: 16
[ 1461.409911][T13551] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1461.421525][T13551] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1461.435372][T13551] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1461.436125][T13528] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1461.457406][T13551] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1461.474278][T13551] usb 4-1: config 0 descriptor??
[ 1461.487307][T13551] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1461.494759][T13528] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 1461.522959][T13528] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[ 1461.543156][T13528] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[ 1461.571845][T13528] usb 6-1: USB disconnect, device number 51
[ 1461.797137][T13528] usb 4-1: USB disconnect, device number 74
[ 1462.299085][T13528] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[ 1462.459404][T13528] usb 4-1: Using ep0 maxpacket: 32
[ 1462.469713][T13528] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1462.484219][T13528] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1462.493788][T13528] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1462.502153][T13528] usb 4-1: Product: syz
[ 1462.506606][T13528] usb 4-1: Manufacturer: syz
[ 1462.511250][T13528] usb 4-1: SerialNumber: syz
[ 1462.519340][T13528] usb 4-1: config 0 descriptor??
[ 1462.531458][T13528] smsc75xx v1.0.0
[ 1462.535216][T13528] smsc75xx 4-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1462.545509][T13528] smsc75xx 4-1:0.0: probe with driver smsc75xx failed with error -22
[ 1462.745652][ T2600] netlink: 'syz.3.21949': attribute type 27 has an invalid length.
[ 1462.762628][T13551] usb 4-1: USB disconnect, device number 75
[ 1463.033762][ T2629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21957'.
[ 1463.132923][T13551] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[ 1463.141962][ T2632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1463.142857][ T2632] rust_binder: Error in use_page_slow: ESRCH
[ 1463.149585][ T2632] rust_binder: use_range failure ESRCH
[ 1463.156398][ T2632] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[ 1463.161960][ T2632] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[ 1463.171246][ T2632] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:640
[ 1463.313947][T13551] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1463.348520][T13551] usb 4-1: config 0 has no interface number 0
[ 1463.354663][T13551] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1463.387178][T13551] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1463.407329][T13551] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[ 1463.428469][T13551] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1463.465875][T13551] usb 4-1: config 0 descriptor??
[ 1463.777838][ T2643] netlink: 'syz.2.21962': attribute type 4 has an invalid length.
[ 1463.795116][ T2643] netlink: 'syz.2.21962': attribute type 2 has an invalid length.
[ 1463.918564][T13551] prodikeys 0003:041E:2801.0056: item fetching failed at offset 5/7
[ 1463.947777][T13551] prodikeys 0003:041E:2801.0056: hid parse failed
[ 1463.971761][T13551] prodikeys 0003:041E:2801.0056: probe with driver prodikeys failed with error -22
[ 1464.202139][T13554] usb 4-1: USB disconnect, device number 76
[ 1464.286448][ T2663] netlink: 'syz.3.21968': attribute type 4 has an invalid length.
[ 1464.351765][ T2663] netlink: 'syz.3.21968': attribute type 5 has an invalid length.
[ 1464.394423][ T2663] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.21968'.
[ 1464.418827][ T2671] can0: slcan on ptm0.
[ 1464.512044][T13528] usb 6-1: new low-speed USB device number 52 using dummy_hcd
[ 1464.683060][T13528] usb 6-1: Invalid ep0 maxpacket: 32
[ 1464.704570][T13527] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[ 1464.822063][T13528] usb 6-1: new low-speed USB device number 53 using dummy_hcd
[ 1464.879049][T13527] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1464.889721][T13527] usb 4-1: config 0 has no interfaces?
[ 1464.895229][T13527] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[ 1464.906054][T13527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1464.918534][T13527] usb 4-1: config 0 descriptor??
[ 1464.982397][T13528] usb 6-1: Invalid ep0 maxpacket: 32
[ 1464.994118][T13528] usb usb6-port1: attempt power cycle
[ 1465.142690][T13554] usb 4-1: USB disconnect, device number 77
[ 1465.176069][ T2662] can0 (unregistered): slcan off ptm0.
[ 1465.356580][T13528] usb 6-1: new low-speed USB device number 54 using dummy_hcd
[ 1465.378733][T13528] usb 6-1: Invalid ep0 maxpacket: 32
[ 1465.538312][T13528] usb 6-1: new low-speed USB device number 55 using dummy_hcd
[ 1465.560472][T13528] usb 6-1: Invalid ep0 maxpacket: 32
[ 1465.581090][T13528] usb usb6-port1: unable to enumerate USB device
[ 1466.347671][ T2743] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[ 1466.398780][ T2746] netlink: 'syz.9.21982': attribute type 13 has an invalid length.
[ 1466.411937][   T36] kauditd_printk_skb: 1666 callbacks suppressed
[ 1466.411957][   T36] audit: type=1400 audit(2000018990.558:277142): avc:  denied  { setopt } for  pid=2745 comm="syz.9.21982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1466.445684][ T2746] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21982'.
[ 1466.454813][ T2746] bridge_slave_1: left allmulticast mode
[ 1466.462224][   T36] audit: type=1400 audit(2000018990.586:277143): avc:  denied  { create } for  pid=2745 comm="syz.9.21982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1466.483076][ T2746] bridge_slave_1: left promiscuous mode
[ 1466.488757][ T2746] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1466.498035][ T2746] bridge_slave_0: left allmulticast mode
[ 1466.503832][   T36] audit: type=1400 audit(2000018990.586:277144): avc:  denied  { ioctl } for  pid=2745 comm="syz.9.21982" path="socket:[240313]" dev="sockfs" ino=240313 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1466.511181][ T2746] bridge_slave_0: left promiscuous mode
[ 1466.533961][   T36] audit: type=1400 audit(2000018990.586:277145): avc:  denied  { create } for  pid=2745 comm="syz.9.21982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1466.555599][   T36] audit: type=1400 audit(2000018990.586:277146): avc:  denied  { create } for  pid=2745 comm="syz.9.21982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1466.564738][ T2746] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1466.577635][   T36] audit: type=1400 audit(2000018990.586:277147): avc:  denied  { write } for  pid=2745 comm="syz.9.21982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1467.418705][   T36] audit: type=1400 audit(2000018991.494:277148): avc:  denied  { create } for  pid=2750 comm="syz.9.21984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1467.439484][   T36] audit: type=1400 audit(2000018991.494:277149): avc:  denied  { setopt } for  pid=2750 comm="syz.9.21984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1467.459418][   T36] audit: type=1400 audit(2000018991.494:277150): avc:  denied  { write } for  pid=2750 comm="syz.9.21984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1467.482753][   T36] audit: type=1400 audit(2000018991.494:277151): avc:  denied  { bind } for  pid=2750 comm="syz.9.21984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1467.594676][ T2755] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1467.612306][ T2755] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:647
[ 1467.737496][ T2758] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21986'.
[ 1468.134679][ T2770] pim6reg1: entered promiscuous mode
[ 1468.154514][ T2770] pim6reg1: entered allmulticast mode
[ 1468.374788][ T2789] cgroup2: Unknown parameter 'me�<g%A\��s�CF ���[gs.�mory�IRV}��V�_l'
[ 1468.405523][ T2791] rust_binder: Write failure EINVAL in pid:221
[ 1468.469182][ T2797] rust_binder: Error while translating object.
[ 1468.475532][ T2797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[ 1468.484793][ T2797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223
[ 1468.577717][ T2800] netlink: 'syz.3.22001': attribute type 15 has an invalid length.
[ 1468.599559][ T2800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22001'.
[ 1468.658198][ T2800] /dev/rnullb0: Can't open blockdev
[ 1468.762223][ T2810] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1468.762549][ T2810] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1468.785933][ T2810] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1468.799867][ T2810] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1468.834155][ T2810] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1468.847832][ T2813] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1468.858457][ T2813] rust_binder: Error in use_page_slow: ESRCH
[ 1468.869400][ T2813] rust_binder: use_range failure ESRCH
[ 1468.875971][ T2813] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false
[ 1468.884332][ T2813] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[ 1468.894922][ T2813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:659
[ 1468.968873][ T2817] /dev/rnullb0: Can't open blockdev
[ 1469.030518][ T2819] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active
[ 1469.131964][ T2823] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1469.181373][ T2825] /dev/rnullb0: Can't open blockdev
[ 1469.334906][ T2834] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1469.336774][ T2834] netlink: 260 bytes leftover after parsing attributes in process `syz.3.22012'.
[ 1469.363833][ T2833] netlink: 260 bytes leftover after parsing attributes in process `syz.3.22012'.
[ 1469.375909][ T2833] rust_binder: Failed copying remainder into alloc: EFAULT
[ 1469.375932][ T2833] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[ 1469.383821][ T2833] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[ 1469.393591][ T2833] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:237
[ 1469.650318][ T2853] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1469.681272][ T2853] rust_binder: Error in use_page_slow: ESRCH
[ 1469.705115][ T2853] rust_binder: use_range failure ESRCH
[ 1469.722783][ T2853] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[ 1469.744273][ T2853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[ 1469.767002][ T2853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:675
[ 1470.210228][T25796] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1470.416111][ T2874] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[ 1470.416151][ T2874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:242
[ 1470.474357][ T2877] fuse: blksize only supported for fuseblk
[ 1470.545822][ T2879] binder: Bad value for 'max'
[ 1470.710548][ T2881] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[ 1470.710585][ T2881] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:247
[ 1470.812558][ T2885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22029'.
[ 1470.832862][ T2886] rust_binder: Error while translating object.
[ 1470.832903][ T2886] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[ 1470.839261][ T2886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:249
[ 1470.853593][ T2885] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1470.959947][ T2892] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2892 comm=syz.3.22031
[ 1471.005147][ T2897] rust_binder: Error in use_page_slow: ESRCH
[ 1471.005174][ T2897] rust_binder: use_range failure ESRCH
[ 1471.011224][ T2897] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false
[ 1471.016828][ T2897] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[ 1471.029407][ T2897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:685
[ 1471.385361][ T2918] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.22040'.
[ 1471.468629][ T2924] fuseblk: Unknown parameter 'max_rea000
'
[ 1471.706981][T13550] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[ 1471.803443][   T36] kauditd_printk_skb: 663 callbacks suppressed
[ 1471.803463][   T36] audit: type=1400 audit(2000018995.610:277815): avc:  denied  { ioctl } for  pid=2921 comm="syz.3.22043" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1471.857151][   T36] audit: type=1400 audit(2000018995.656:277816): avc:  denied  { ioctl } for  pid=2931 comm="syz.5.22046" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1471.899221][T13550] usb 4-1: Using ep0 maxpacket: 32
[ 1471.905017][   T36] audit: type=1400 audit(2000018995.694:277817): avc:  denied  { ioctl } for  pid=2921 comm="syz.3.22043" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1471.907246][T13550] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1471.930462][   T36] audit: type=1400 audit(2000018995.694:277818): avc:  denied  { ioctl } for  pid=2921 comm="syz.3.22043" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1471.942517][T13550] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1471.967506][   T36] audit: type=1400 audit(2000018995.694:277819): avc:  denied  { ioctl } for  pid=2921 comm="syz.3.22043" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1471.975709][T13550] usb 4-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00
[ 1472.000627][   T36] audit: type=1400 audit(2000018995.694:277820): avc:  denied  { ioctl } for  pid=2921 comm="syz.3.22043" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1472.010100][T13550] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1472.034486][T13530] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 1472.047002][T13550] usb 4-1: config 0 descriptor??
[ 1472.056419][   T36] audit: type=1400 audit(2000018995.694:277821): avc:  denied  { ioctl } for  pid=2921 comm="syz.3.22043" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1472.083788][   T36] audit: type=1400 audit(2000018995.731:277822): avc:  denied  { ioctl } for  pid=2921 comm="syz.3.22043" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1472.111842][   T36] audit: type=1400 audit(2000018995.759:277823): avc:  denied  { ioctl } for  pid=2931 comm="syz.5.22046" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1472.139430][   T36] audit: type=1400 audit(2000018995.834:277824): avc:  denied  { ioctl } for  pid=2931 comm="syz.5.22046" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1472.209257][T13530] usb 6-1: Using ep0 maxpacket: 32
[ 1472.217570][T13530] usb 6-1: config 0 has an invalid interface number: 148 but max is 0
[ 1472.227912][T13530] usb 6-1: config 0 has no interface number 0
[ 1472.234830][T13530] usb 6-1: config 0 interface 148 has no altsetting 0
[ 1472.246672][T13530] usb 6-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=dd.c8
[ 1472.257038][T13530] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1472.273384][T13530] usb 6-1: Product: syz
[ 1472.277608][T13530] usb 6-1: Manufacturer: syz
[ 1472.285658][T13530] usb 6-1: SerialNumber: syz
[ 1472.296150][T13530] usb 6-1: config 0 descriptor??
[ 1472.304198][T13530] pl2303 6-1:0.148: required interrupt-in endpoint missing
[ 1472.391038][T23689] Bluetooth: hci0: command 0x1003 tx timeout
[ 1472.397250][T17382] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1472.520238][T13528] usb 6-1: USB disconnect, device number 56
[ 1473.088782][ T2967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1473.105439][ T2967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1473.188824][ T2974] fuse: Unknown parameter '000000000000000000030x0000000000000003'
[ 1473.197429][ T2974] fuse: Unknown parameter '000000000000000000030x0000000000000003'
[ 1473.207445][ T2974] fuse: Unknown parameter '000000000000000000030x0000000000000003'
[ 1473.218898][ T2974] fuse: Unknown parameter '000000000000000000030x0000000000000003'
[ 1473.520260][ T2994] SELinux: ebitmap: start bit 64 comes after start bit 1152
[ 1473.528930][ T2994] SELinux: failed to load policy
[ 1473.749140][ T3010] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1473.756779][ T3010] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false
[ 1473.764309][ T3010] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[ 1473.772410][ T3010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:703
[ 1474.224706][ T3020] ptm ptm37: ldisc open failed (-12), clearing slot 37
[ 1474.385922][ T3027] overlayfs: failed to clone upperpath
[ 1474.561191][T13530] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 1474.587101][ T3035] overlayfs: failed to clone upperpath
[ 1474.647552][ T3039] netlink: 4 bytes leftover after parsing attributes in process `syz.9.22082'.
[ 1474.691314][T13528] usb 4-1: USB disconnect, device number 78
[ 1474.734799][T13530] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1474.753595][T13530] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1474.775911][T13530] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1474.794342][T13530] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1474.794627][ T3042] tc_dump_action: action bad kind
[ 1474.805048][T13530] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1474.828720][T13530] usb 6-1: config 0 descriptor??
[ 1474.941988][ T3045] rust_binder: Error while translating object.
[ 1474.942049][ T3045] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[ 1474.950810][ T3045] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:275
[ 1475.245378][T13550] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[ 1475.255599][ T3051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22087'.
[ 1475.283156][T13530] plantronics 0003:047F:FFFF.0057: No inputs registered, leaving
[ 1475.314761][T13530] plantronics 0003:047F:FFFF.0057: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1475.416443][T13550] usb 4-1: device descriptor read/64, error -71
[ 1475.578721][T13530] usb 6-1: USB disconnect, device number 57
[ 1475.683715][T13550] usb 4-1: device descriptor read/64, error -71
[ 1475.940371][T13550] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[ 1476.089974][T13550] usb 4-1: device descriptor read/64, error -71
[ 1476.359994][T13550] usb 4-1: device descriptor read/64, error -71
[ 1476.475315][T13550] usb usb4-port1: attempt power cycle
[ 1476.505695][T13551] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0
[ 1476.592505][T13551] hid-generic 0000:0000:0000.0058: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1476.673691][ T3093] fido_id[3093]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1476.881072][T13550] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[ 1476.905294][T13550] usb 4-1: device descriptor read/8, error -71
[ 1477.044414][T13550] usb 4-1: device descriptor read/8, error -71
[ 1477.113328][ T3118] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1477.149786][ T3121] 9pnet_fd: Insufficient options for proto=fd
[ 1477.160086][   T36] kauditd_printk_skb: 546 callbacks suppressed
[ 1477.160100][   T36] audit: type=1400 audit(2000019000.614:278371): avc:  denied  { ioctl } for  pid=3046 comm="syz.3.22085" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1477.193043][   T36] audit: type=1400 audit(2000019000.614:278372): avc:  denied  { ioctl } for  pid=3046 comm="syz.3.22085" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1477.219530][   T36] audit: type=1400 audit(2000019000.614:278373): avc:  denied  { listen } for  pid=3120 comm="syz.9.22111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1477.242726][   T36] audit: type=1400 audit(2000019000.614:278374): avc:  denied  { create } for  pid=3120 comm="syz.9.22111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1477.264753][   T36] audit: type=1400 audit(2000019000.614:278375): avc:  denied  { write } for  pid=3120 comm="syz.9.22111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1477.320662][T13550] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[ 1477.336266][   T36] audit: type=1400 audit(2000019000.614:278376): avc:  denied  { write } for  pid=3120 comm="syz.9.22111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1477.359056][T13550] usb 4-1: device descriptor read/8, error -71
[ 1477.366667][   T36] audit: type=1400 audit(2000019000.614:278377): avc:  denied  { accept } for  pid=3120 comm="syz.9.22111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1477.395147][   T36] audit: type=1400 audit(2000019000.689:278378): avc:  denied  { ioctl } for  pid=3046 comm="syz.3.22085" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1477.443718][   T36] audit: type=1400 audit(2000019000.764:278379): avc:  denied  { read write } for  pid=31789 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1477.480073][ T3134] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1477.480946][ T3137] rust_binder: Error in use_page_slow: ESRCH
[ 1477.487414][ T3137] rust_binder: use_range failure ESRCH
[ 1477.501375][ T3137] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[ 1477.511788][   T36] audit: type=1400 audit(2000019000.764:278380): avc:  denied  { read write open } for  pid=31789 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1477.546579][ T3137] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[ 1477.546657][ T3137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:728
[ 1477.558507][T13550] usb 4-1: device descriptor read/8, error -71
[ 1477.669917][ T3145] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1477.680881][ T3145] rust_binder: Error in use_page_slow: ESRCH
[ 1477.688951][T13550] usb usb4-port1: unable to enumerate USB device
[ 1477.712282][ T3145] rust_binder: use_range failure ESRCH
[ 1477.712317][ T3145] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[ 1477.726688][ T3145] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[ 1477.746158][ T3145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:732
[ 1477.988477][ T3158] netlink: 96 bytes leftover after parsing attributes in process `syz.9.22124'.
[ 1478.092516][ T3170] netlink: 'syz.9.22128': attribute type 4 has an invalid length.
[ 1478.100406][ T3170] netlink: 17 bytes leftover after parsing attributes in process `syz.9.22128'.
[ 1478.113202][ T3170] netlink: 12 bytes leftover after parsing attributes in process `syz.9.22128'.
[ 1478.132145][T13550] usb 6-1: new full-speed USB device number 58 using dummy_hcd
[ 1478.295122][T13550] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1478.305367][T13550] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1478.313068][T13550] usb 6-1: language id specifier not provided by device, defaulting to English
[ 1478.325851][T13550] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40
[ 1478.335082][T13550] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1478.343121][T13550] usb 6-1: Product: syz
[ 1478.348802][T13550] usb 6-1: Manufacturer: ޿ṕ즒꡴婵皰磈㠁缥鉓堫췟芄嶦ꓡ᧼啠㌂座∺티먌䵖퀣輺䯍ﮫ巄㨥䄲뗽ꕐ䒖
[ 1478.362837][T13550] usb 6-1: SerialNumber: syz
[ 1478.565316][ T3183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22134'.
[ 1478.587251][ T3156] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1478.590171][ T3156] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:734
[ 1478.672081][T13550] usbhid 6-1:1.0: couldn't find an input interrupt endpoint
[ 1478.711042][T13550] usb 6-1: USB disconnect, device number 58
[ 1478.860756][ T3190] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1478.868018][ T3190] IPv6: NLM_F_CREATE should be set when creating new route
[ 1478.875355][ T3190] IPv6: NLM_F_CREATE should be set when creating new route
[ 1479.241465][ T3193] /dev/rnullb0: Can't lookup blockdev
[ 1479.286428][ T3194] 9pnet: p9_errstr2errno: server reported unknown error O�����X��۵רѳl��u�9v�
[ 1479.325299][ T3194] 9pnet: p9_errstr2errno: server reported unknown error O�����X��۵רѳl��u�9v�
[ 1479.718438][ T3213] overlayfs: failed to clone upperpath
[ 1480.324036][ T3218] /dev/rnullb0: Can't open blockdev
[ 1481.720561][ T3268] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1481.721652][ T3268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[ 1481.741825][ T3268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:750
[ 1482.070364][ T3283] fuse: Bad value for 'fd'
[ 1482.141668][ T3285] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1482.515030][T13528] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[ 1482.529861][   T36] kauditd_printk_skb: 538 callbacks suppressed
[ 1482.529879][   T36] audit: type=1400 audit(2000019005.637:278919): avc:  denied  { ioctl } for  pid=3294 comm="syz.3.22174" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1482.544448][ T3323] overlayfs: failed to clone upperpath
[ 1482.564297][   T36] audit: type=1400 audit(2000019005.637:278920): avc:  denied  { ioctl } for  pid=3294 comm="syz.3.22174" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1482.592676][   T36] audit: type=1400 audit(2000019005.637:278921): avc:  denied  { name_bind } for  pid=3322 comm="syz.9.22184" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[ 1482.598543][ T3323] fuse: Bad value for 'fd'
[ 1482.615922][   T36] audit: type=1400 audit(2000019005.637:278922): avc:  denied  { node_bind } for  pid=3322 comm="syz.9.22184" saddr=ff02::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 1482.621919][T13530] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 1482.642182][   T36] audit: type=1400 audit(2000019005.637:278923): avc:  denied  { mounton } for  pid=3322 comm="syz.9.22184" path="/261/bus" dev="tmpfs" ino=1431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1482.673603][   T36] audit: type=1400 audit(2000019005.674:278924): avc:  denied  { ioctl } for  pid=3305 comm="syz.5.22177" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1482.698991][   T36] audit: type=1400 audit(2000019005.674:278925): avc:  denied  { ioctl } for  pid=3294 comm="syz.3.22174" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1482.725518][   T36] audit: type=1400 audit(2000019005.703:278926): avc:  denied  { mounton } for  pid=3322 comm="syz.9.22184" path="/261/file0" dev="tmpfs" ino=1429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1482.728801][T13528] usb 4-1: Using ep0 maxpacket: 16
[ 1482.749270][   T36] audit: type=1400 audit(2000019005.768:278927): avc:  denied  { ioctl } for  pid=3305 comm="syz.5.22177" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1482.779416][   T36] audit: type=1400 audit(2000019005.768:278928): avc:  denied  { ioctl } for  pid=3305 comm="syz.5.22177" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1482.806681][T13528] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1482.818691][T13528] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1482.829394][T13528] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[ 1482.842416][T13528] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1482.852219][T13530] usb 6-1: config 160 has an invalid interface number: 200 but max is 0
[ 1482.862591][T13530] usb 6-1: config 160 has no interface number 0
[ 1482.869203][T13528] usb 4-1: config 0 descriptor??
[ 1482.881367][T13530] usb 6-1: config 160 interface 200 has no altsetting 0
[ 1482.914738][T13530] usb 6-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[ 1482.924505][T13530] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1482.942638][T13530] usb 6-1: Product: syz
[ 1482.954272][T13530] usb 6-1: Manufacturer: syz
[ 1482.970744][T13530] usb 6-1: SerialNumber: syz
[ 1483.213037][T13530] usb 6-1: MIDIStreaming interface descriptor not found
[ 1483.225495][ T3349] fuse: Bad value for 'group_id'
[ 1483.230528][ T3349] fuse: Bad value for 'group_id'
[ 1483.239590][T13530] usb 6-1: USB disconnect, device number 59
[ 1483.329375][T13528] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5012.0059/input/input138
[ 1483.352173][ T2058] udevd[2058]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:160.200/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1483.370792][T13528] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5012.0059/input/input139
[ 1483.400961][T13528] kye 0003:0458:5012.0059: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.3-1/input0
[ 1483.669141][ T3299] SELinux: ebitmap: truncated map
[ 1483.721246][ T3299] SELinux: failed to load policy
[ 1483.736455][T13530] usb 4-1: USB disconnect, device number 83
[ 1483.753514][ T3355] overlay: ./file1 is not a directory
[ 1483.913020][ T3360] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1483.915577][ T3360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:765
[ 1483.950677][ T3361] overlayfs: failed to clone upperpath
[ 1483.981046][ T3360] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false
[ 1483.981080][ T3360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[ 1484.022418][ T3360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:765
[ 1484.038887][ T3361] netlink: 'syz.9.22196': attribute type 46 has an invalid length.
[ 1484.278353][ T3375] 9pnet_fd: Insufficient options for proto=fd
[ 1484.860657][ T3410] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1485.452528][ T3432] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch
[ 1485.606308][ T3436] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[ 1485.613489][ T3436] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[ 1485.631641][ T3436] rust_binder: 779: no such ref 2
[ 1485.637587][ T3436] rust_binder: Read failure Err(EAGAIN) in pid:779
[ 1485.895403][ T3449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22225'.
[ 1485.936904][ T3449] /dev/rnullb0: Can't lookup blockdev
[ 1486.349872][ T3466] overlay: ./file0 is not a directory
[ 1486.541306][ T3458] overlayfs: failed to clone upperpath
[ 1486.644506][ T3470] netlink: 'syz.9.22230': attribute type 11 has an invalid length.
[ 1487.586236][ T3502] tmpfs: Bad value for 'size'
[ 1487.903061][T13528] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[ 1487.911857][   T36] kauditd_printk_skb: 383 callbacks suppressed
[ 1487.911876][   T36] audit: type=1400 audit(2000019010.669:279312): avc:  denied  { ioctl } for  pid=3501 comm="syz.3.22240" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1487.944682][   T36] audit: type=1400 audit(2000019010.669:279313): avc:  denied  { ioctl } for  pid=3501 comm="syz.3.22240" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1487.970492][   T36] audit: type=1400 audit(2000019010.669:279314): avc:  denied  { ioctl } for  pid=3501 comm="syz.3.22240" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1488.002187][   T36] audit: type=1400 audit(2000019010.707:279315): avc:  denied  { read write } for  pid=31789 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1488.043280][   T36] audit: type=1400 audit(2000019010.707:279316): avc:  denied  { read write open } for  pid=31789 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1488.075029][   T36] audit: type=1400 audit(2000019010.707:279317): avc:  denied  { ioctl } for  pid=31789 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1488.103131][   T36] audit: type=1400 audit(2000019010.754:279318): avc:  denied  { ioctl } for  pid=3501 comm="syz.3.22240" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1488.106166][T13528] usb 4-1: Using ep0 maxpacket: 16
[ 1488.133860][   T36] audit: type=1400 audit(2000019010.754:279319): avc:  denied  { read } for  pid=3503 comm="syz.5.22241" name="binder0" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1488.164216][   T36] audit: type=1400 audit(2000019010.754:279320): avc:  denied  { read open } for  pid=3503 comm="syz.5.22241" path="/dev/binderfs/binder0" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1488.173453][T13528] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[ 1488.218857][T13528] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1488.229745][T13528] usb 4-1: config 0 has no interface number 0
[ 1488.236005][   T36] audit: type=1400 audit(2000019010.828:279321): avc:  denied  { read write } for  pid=31789 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1488.264021][T13528] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[ 1488.273683][T13528] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1488.281819][T13528] usb 4-1: Product: syz
[ 1488.286135][T13528] usb 4-1: Manufacturer: syz
[ 1488.292104][T13528] usb 4-1: SerialNumber: syz
[ 1488.300539][ T3516] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[ 1488.307891][T13528] usb 4-1: config 0 descriptor??
[ 1488.309005][ T3516] rust_binder: Write failure EINVAL in pid:793
[ 1488.440293][ T3519] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1488.449009][ T3520] rust_binder: Error in use_page_slow: ESRCH
[ 1488.456640][ T3520] rust_binder: use_range failure ESRCH
[ 1488.463541][ T3520] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[ 1488.469073][ T3520] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[ 1488.477219][ T3520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:797
[ 1488.545239][ T3502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1488.562851][ T3502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1488.573547][ T3502] netlink: 'syz.3.22240': attribute type 15 has an invalid length.
[ 1488.583366][ T3524] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22246'.
[ 1488.584183][ T3502] __vm_enough_memory: pid: 3502, comm: syz.3.22240, bytes: 18014402804453376 not enough memory for the allocation
[ 1488.604617][  T293] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1488.619736][ T3502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1488.628443][ T3502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1488.641089][T13528] usb 4-1: USB disconnect, device number 84
[ 1488.863532][ T3534] /dev/rnullb0: Can't lookup blockdev
[ 1489.278815][ T3557] netlink: 4 bytes leftover after parsing attributes in process `syz.9.22261'.
[ 1489.288589][ T3559] rust_binder: Read failure Err(EAGAIN) in pid:335
[ 1489.570460][ T3582] __vm_enough_memory: pid: 3582, comm: syz.3.22268, bytes: 18014402804453376 not enough memory for the allocation
[ 1489.685832][ T3594] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[ 1489.701331][ T3593] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[ 1489.712983][ T3594] rust_binder: Write failure EINVAL in pid:351
[ 1489.713055][ T3593] rust_binder: Write failure EINVAL in pid:351
[ 1490.195288][ T3631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22284'.
[ 1490.224336][ T3631] bridge_slave_1: left allmulticast mode
[ 1490.230046][ T3631] bridge_slave_1: left promiscuous mode
[ 1490.238043][ T3631] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1490.247944][ T3631] bridge_slave_0: left allmulticast mode
[ 1490.260769][ T3631] bridge_slave_0: left promiscuous mode
[ 1490.276473][ T3631] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1490.425194][  T293] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1490.579376][ T3655] /dev/rnullb0: Can't lookup blockdev
[ 1490.778929][ T3648] Bluetooth: hci0: command 0x1003 tx timeout
[ 1490.778978][T17382] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1491.822133][ T3693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=3693 comm=syz.9.22303
[ 1491.842360][ T3693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=3693 comm=syz.9.22303
[ 1491.934595][ T3699] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1492.189998][T13527] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 1492.363361][T13527] usb 6-1: config index 0 descriptor too short (expected 39, got 27)
[ 1492.371960][T13527] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1492.381837][T13527] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1492.392041][T13527] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1492.401135][T13527] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1492.409478][T13527] usb 6-1: Product: syz
[ 1492.413671][T13527] usb 6-1: Manufacturer: syz
[ 1492.418320][T13527] usb 6-1: SerialNumber: syz
[ 1492.424681][T13527] usb 6-1: config 0 descriptor??
[ 1492.432383][T13527] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1492.438412][T13527] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1492.446036][T13527] usb 6-1: selecting invalid altsetting 0
[ 1492.574929][T23689] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1492.661717][ T3699] rust_binder: Error in use_page_slow: ESRCH
[ 1492.661744][ T3699] rust_binder: use_range failure ESRCH
[ 1492.676477][ T3699] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[ 1492.692498][ T3699] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[ 1492.700668][ T3699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:815
[ 1492.820820][T13552] usb 6-1: USB disconnect, device number 60
[ 1493.260995][   T36] kauditd_printk_skb: 1318 callbacks suppressed
[ 1493.261016][   T36] audit: type=1400 audit(2000019015.674:280640): avc:  denied  { read write } for  pid=31789 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1493.323198][   T36] audit: type=1400 audit(2000019015.674:280641): avc:  denied  { read write open } for  pid=31789 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1493.396446][   T36] audit: type=1400 audit(2000019015.674:280642): avc:  denied  { ioctl } for  pid=31789 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1493.463626][   T36] audit: type=1400 audit(2000019015.711:280643): avc:  denied  { read write } for  pid=3724 comm="syz.5.22315" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1493.541778][   T36] audit: type=1400 audit(2000019015.711:280644): avc:  denied  { read write open } for  pid=3724 comm="syz.5.22315" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1493.569111][T13527] usb 6-1: new full-speed USB device number 61 using dummy_hcd
[ 1493.612050][   T36] audit: type=1400 audit(2000019015.711:280645): avc:  denied  { ioctl } for  pid=3724 comm="syz.5.22315" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1493.638310][   T36] audit: type=1400 audit(2000019015.711:280646): avc:  denied  { ioctl } for  pid=3724 comm="syz.5.22315" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1493.664544][   T36] audit: type=1400 audit(2000019015.711:280647): avc:  denied  { ioctl } for  pid=3724 comm="syz.5.22315" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1493.708080][   T36] audit: type=1400 audit(2000019015.711:280648): avc:  denied  { ioctl } for  pid=3724 comm="syz.5.22315" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1493.735415][   T36] audit: type=1400 audit(2000019015.777:280649): avc:  denied  { execmem } for  pid=3726 comm="syz.9.22316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1493.774054][T13527] usb 6-1: not running at top speed; connect to a high speed hub
[ 1493.785362][T13527] usb 6-1: config 95 has an invalid interface number: 1 but max is 0
[ 1493.793990][T13527] usb 6-1: config 95 has no interface number 0
[ 1493.800591][T13527] usb 6-1: config 95 interface 1 has no altsetting 0
[ 1493.823690][T13527] usb 6-1: string descriptor 0 read error: -22
[ 1493.836356][T13527] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79
[ 1493.845492][T13527] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1494.939264][T13550] usb 6-1: USB disconnect, device number 61
[ 1495.220310][ T3755] new mount options do not match the existing superblock, will be ignored
[ 1495.909917][ T3775] fuse: Unknown parameter '�d'
[ 1495.963949][ T3777] netlink: 4520 bytes leftover after parsing attributes in process `syz.2.22334'.
[ 1496.168681][ T3796] rust_binder: 375: no such ref 0
[ 1496.174311][ T3796] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1496.182540][ T3796] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[ 1496.517627][ T3817] fuse: Bad value for 'fd'
[ 1496.530385][T13550] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[ 1496.720567][T13550] usb 4-1: config 0 has an invalid interface number: 213 but max is 0
[ 1496.733560][T13550] usb 4-1: config 0 has no interface number 0
[ 1496.751077][T13550] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=92.db
[ 1496.776259][T13550] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1496.784333][T13550] usb 4-1: Product: syz
[ 1496.788629][T13550] usb 4-1: Manufacturer: syz
[ 1496.793485][T13550] usb 4-1: SerialNumber: syz
[ 1496.804983][T13550] usb 4-1: config 0 descriptor??
[ 1497.124075][ T3836] 9pnet_fd: Insufficient options for proto=fd
[ 1497.991637][ T3844] overlayfs: failed to clone upperpath
[ 1498.299925][ T3875] /dev/loop0: Can't lookup blockdev
[ 1498.561467][ T3897] can: request_module (can-proto-0) failed.
[ 1498.692118][   T36] kauditd_printk_skb: 611 callbacks suppressed
[ 1498.692153][   T36] audit: type=1400 audit(2000019020.753:281261): avc:  denied  { create } for  pid=3905 comm="syz.9.22378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1498.721369][   T36] audit: type=1400 audit(2000019020.753:281262): avc:  denied  { connect } for  pid=3905 comm="syz.9.22378" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1498.742936][   T36] audit: type=1400 audit(2000019020.753:281263): avc:  denied  { setopt } for  pid=3905 comm="syz.9.22378" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1498.744509][ T3908] 9pnet_fd: Insufficient options for proto=fd
[ 1498.765708][   T36] audit: type=1400 audit(2000019020.809:281264): avc:  denied  { mounton } for  pid=3907 comm="syz.9.22379" path="/349/file0" dev="tmpfs" ino=1908 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1498.833804][   T36] audit: type=1400 audit(2000019020.884:281265): avc:  denied  { create } for  pid=3911 comm="syz.2.22381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1498.843117][ T3912] netlink: 164 bytes leftover after parsing attributes in process `syz.2.22381'.
[ 1498.853890][   T36] audit: type=1400 audit(2000019020.893:281266): avc:  denied  { create } for  pid=3911 comm="syz.2.22381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1498.878894][ T3912] overlayfs: failed to clone upperpath
[ 1498.884724][   T36] audit: type=1400 audit(2000019020.893:281267): avc:  denied  { write } for  pid=3911 comm="syz.2.22381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1498.909698][   T36] audit: type=1400 audit(2000019020.893:281268): avc:  denied  { nlmsg_write } for  pid=3911 comm="syz.2.22381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1498.913609][ T3912] overlayfs: failed to clone upperpath
[ 1498.930895][   T36] audit: type=1400 audit(2000019020.921:281269): avc:  denied  { write } for  pid=3911 comm="syz.2.22381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1498.956272][   T36] audit: type=1400 audit(2000019020.931:281270): avc:  denied  { mounton } for  pid=3911 comm="syz.2.22381" path="/582/file0" dev="tmpfs" ino=3129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1499.243219][ T3941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22387'.
[ 1499.255375][ T3941] incfs: Error accessing: ./file0.
[ 1499.261386][ T3941] incfs: mount failed -20
[ 1499.313091][ T3944] fuseblk: Bad value for 'fd'
[ 1499.318955][ T3945] netlink: 'syz.2.22388': attribute type 12 has an invalid length.
[ 1499.468683][T13550] usb 4-1: USB disconnect, device number 85
[ 1499.621950][ T3969] .N: renamed from veth0_to_bond (while UP)
[ 1500.581406][ T4049] netlink: 80 bytes leftover after parsing attributes in process `syz.5.22420'.
[ 1500.601935][ T4042] /dev/rnullb0: Can't lookup blockdev
[ 1500.921776][ T4059] binder: Bad value for 'stats'
[ 1501.100937][ T4063] __vm_enough_memory: pid: 4063, comm: syz.3.22424, bytes: 18014402804453376 not enough memory for the allocation
[ 1501.666644][ T4089] fuseblk: Bad value for 'fd'
[ 1502.194548][ T4100] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1502.214301][ T4100] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1502.222468][ T4100] bridge_slave_0: entered allmulticast mode
[ 1502.229929][ T4100] bridge_slave_0: entered promiscuous mode
[ 1502.232209][ T4110] netlink: 100 bytes leftover after parsing attributes in process `syz.5.22440'.
[ 1502.237720][ T4100] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1502.253296][ T4100] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1502.260463][ T4100] bridge_slave_1: entered allmulticast mode
[ 1502.268039][ T4100] bridge_slave_1: entered promiscuous mode
[ 1502.481646][ T4118] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[ 1502.481682][ T4118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:395
[ 1502.518706][ T4100] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1502.535214][ T4100] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1502.542561][ T4100] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1502.549650][ T4100] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1502.648377][T25796] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1502.655866][T25796] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1502.671083][T25793] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1502.678189][T25793] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1502.690999][T25793] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1502.698073][T25793] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1502.760411][ T4133] input: syz1 as /devices/virtual/input/input140
[ 1502.951741][ T4100] veth0_vlan: entered promiscuous mode
[ 1503.007501][ T4100] veth1_macvtap: entered promiscuous mode
[ 1503.236533][ T4156] rust_binder: 407: no such ref 4096
[ 1503.242513][ T4156] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 33554434
[ 1503.283855][ T4156] rust_binder: Write failure EINVAL in pid:407
[ 1503.407458][ T4160] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[ 1503.983838][ T4188] KVM: debugfs: duplicate directory 4188-5
[ 1504.073600][   T36] kauditd_printk_skb: 771 callbacks suppressed
[ 1504.073621][   T36] audit: type=1400 audit(2000019025.791:282042): avc:  denied  { create } for  pid=4191 comm="syz.9.22465" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1504.127181][   T36] audit: type=1400 audit(2000019025.819:282043): avc:  denied  { ioctl } for  pid=4191 comm="syz.9.22465" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=246019 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1504.200041][   T36] audit: type=1400 audit(2000019025.819:282044): avc:  denied  { ioctl } for  pid=4191 comm="syz.9.22465" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=246019 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1504.236373][   T36] audit: type=1400 audit(2000019025.819:282045): avc:  denied  { mount } for  pid=4191 comm="syz.9.22465" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 1504.297035][   T36] audit: type=1400 audit(2000019025.828:282046): avc:  denied  { create } for  pid=4191 comm="syz.9.22465" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1504.355406][ T4199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[ 1504.355446][ T4199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10
[ 1504.355942][   T36] audit: type=1400 audit(2000019025.828:282047): avc:  denied  { ioctl } for  pid=4191 comm="syz.9.22465" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=246020 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1504.409764][   T36] audit: type=1400 audit(2000019025.828:282048): avc:  denied  { ioctl } for  pid=4191 comm="syz.9.22465" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=246020 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1504.440473][   T36] audit: type=1400 audit(2000019025.865:282049): avc:  denied  { create } for  pid=4191 comm="syz.9.22465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1504.516559][   T36] audit: type=1400 audit(2000019025.865:282050): avc:  denied  { setopt } for  pid=4191 comm="syz.9.22465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1504.537086][   T36] audit: type=1400 audit(2000019025.865:282051): avc:  denied  { bind } for  pid=4191 comm="syz.9.22465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1504.837006][T13530] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1504.987603][T13530] usb 3-1: device descriptor read/64, error -71
[ 1505.253944][T13530] usb 3-1: device descriptor read/64, error -71
[ 1505.510490][T13530] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1505.681539][T13530] usb 3-1: device descriptor read/64, error -71
[ 1505.849759][ T4233] SELinux:  Context K�N�Dd�5�SqÄ/�LܻŊ=ݚ��Q3�Bcٔyb���ӭ��s����
,�~��;c3zX:�� is not valid (left unmapped).
[ 1505.948818][T13530] usb 3-1: device descriptor read/64, error -71
[ 1506.068344][T13530] usb usb3-port1: attempt power cycle
[ 1506.440579][T13530] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1506.465023][T13530] usb 3-1: device descriptor read/8, error -71
[ 1506.613995][T13530] usb 3-1: device descriptor read/8, error -71
[ 1506.788159][ T4246] overlayfs: failed to resolve './file0:/': -2
[ 1506.874936][ T4247] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[ 1506.874973][ T4247] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:418
[ 1506.884494][T13530] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1506.934958][T13530] usb 3-1: device descriptor read/8, error -71
[ 1507.074442][T13530] usb 3-1: device descriptor read/8, error -71
[ 1507.189462][T13530] usb usb3-port1: unable to enumerate USB device
[ 1507.285449][ T4246] overlayfs: overlapping lowerdir path
[ 1507.290112][ T4253] netlink: 72 bytes leftover after parsing attributes in process `syz.5.22487'.
[ 1507.859596][ T4259] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:15
[ 1507.861945][ T4260] rust_binder: 15: no such ref 1
[ 1507.937292][T13530] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[ 1508.108325][T13530] usb 4-1: Using ep0 maxpacket: 16
[ 1508.116323][T13530] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1508.124562][ T4280] rust_binder: Error while translating object.
[ 1508.127386][ T4280] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[ 1508.129619][T13530] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1508.134793][ T4280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20
[ 1508.148414][T13530] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[ 1508.173071][T13530] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1508.184536][T13530] usb 4-1: config 0 descriptor??
[ 1508.407677][T13554] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[ 1508.571748][T13554] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1508.580322][T13554] usb 3-1: not running at top speed; connect to a high speed hub
[ 1508.590019][T13554] usb 3-1: config 129 has an invalid interface number: 135 but max is 0
[ 1508.599168][T13554] usb 3-1: config 129 has an invalid interface number: 5 but max is 0
[ 1508.608922][T13554] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[ 1508.618170][T13554] usb 3-1: config 129 has no interface number 0
[ 1508.624702][T13554] usb 3-1: config 129 has no interface number 1
[ 1508.631037][T13554] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1508.644212][T13530] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5012.005A/input/input142
[ 1508.657272][T13554] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[ 1508.670899][T13530] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5012.005A/input/input143
[ 1508.672495][T13554] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[ 1508.718049][T13530] kye 0003:0458:5012.005A: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.3-1/input0
[ 1508.728003][T13554] usb 3-1: config 129 interface 135 has no altsetting 0
[ 1508.743835][T13554] usb 3-1: config 129 interface 5 has no altsetting 0
[ 1508.772416][T13554] usb 3-1: string descriptor 0 read error: -22
[ 1508.779390][T13554] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[ 1508.805293][T13554] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1508.838024][T13554] usb 3-1: MIDIStreaming interface descriptor not found
[ 1508.876964][T13530] usb 4-1: USB disconnect, device number 86
[ 1509.047078][ T4285] fido_id[4285]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[ 1509.183688][ T4294] netlink: 'syz.9.22501': attribute type 33 has an invalid length.
[ 1509.204469][ T4294] netlink: 4 bytes leftover after parsing attributes in process `syz.9.22501'.
[ 1509.324486][ T4298] 9pnet_fd: Insufficient options for proto=fd
[ 1509.429908][   T36] kauditd_printk_skb: 375 callbacks suppressed
[ 1509.429929][   T36] audit: type=1400 audit(2000019030.795:282427): avc:  denied  { read write } for  pid=1558 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1509.471162][   T36] audit: type=1400 audit(2000019030.795:282428): avc:  denied  { read write open } for  pid=1558 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1509.534400][   T36] audit: type=1400 audit(2000019030.795:282429): avc:  denied  { ioctl } for  pid=1558 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1509.563094][   T36] audit: type=1400 audit(2000019030.879:282430): avc:  denied  { read } for  pid=4316 comm="syz.3.22507" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1509.586382][   T36] audit: type=1400 audit(2000019030.879:282431): avc:  denied  { read open } for  pid=4316 comm="syz.3.22507" path="/dev/binderfs/binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1509.612335][ T4321] netlink: 12 bytes leftover after parsing attributes in process `syz.9.22509'.
[ 1509.612361][   T36] audit: type=1400 audit(2000019030.879:282432): avc:  denied  { create } for  pid=4316 comm="syz.3.22507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1509.642090][   T36] audit: type=1400 audit(2000019030.879:282433): avc:  denied  { write } for  pid=4316 comm="syz.3.22507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1509.662299][   T36] audit: type=1400 audit(2000019030.879:282434): avc:  denied  { read write } for  pid=4316 comm="syz.3.22507" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1509.686298][   T36] audit: type=1400 audit(2000019030.879:282435): avc:  denied  { read write open } for  pid=4316 comm="syz.3.22507" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1509.712874][   T36] audit: type=1400 audit(2000019030.879:282436): avc:  denied  { ioctl } for  pid=4316 comm="syz.3.22507" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1509.776058][T13554] usb 4-1: new full-speed USB device number 87 using dummy_hcd
[ 1509.939363][T13554] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1509.957769][T13554] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1509.972792][T13554] usb 4-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00
[ 1509.982512][T13554] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1509.992331][T13554] usb 4-1: config 0 descriptor??
[ 1510.679467][T13554] usb 4-1: string descriptor 0 read error: -71
[ 1510.706138][T13554] uclogic 0003:5543:0045.005B: failed retrieving string descriptor #200: -71
[ 1510.715417][T13554] uclogic 0003:5543:0045.005B: failed retrieving pen parameters: -71
[ 1510.725309][T13554] uclogic 0003:5543:0045.005B: failed probing pen v2 parameters: -71
[ 1510.738195][T13554] uclogic 0003:5543:0045.005B: failed probing parameters: -71
[ 1510.745860][T13554] uclogic 0003:5543:0045.005B: probe with driver uclogic failed with error -71
[ 1510.759942][ T4409] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1510.771430][T13554] usb 4-1: USB disconnect, device number 87
[ 1511.240236][T13554] usb 3-1: USB disconnect, device number 31
[ 1511.551499][ T4444] rust_binder: 31: no such ref 0
[ 1511.568653][ T4444] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1511.577331][ T4444] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[ 1511.653603][ T4449] SELinux: security_context_str_to_sid () failed with errno=-22
[ 1512.099299][ T4472] devpts: called with bogus options
[ 1512.218407][ T4434] overlayfs: overlapping lowerdir path
[ 1512.674618][ T4491] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1512.680411][ T4491] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[ 1512.784649][ T4497] overlayfs: failed to clone lowerpath
[ 1512.804784][ T4497] overlayfs: failed to clone lowerpath
[ 1513.449973][ T4510] overlayfs: failed to clone upperpath
[ 1513.594398][ T4524] binder: Unknown parameter 'context����[7�'
[ 1513.711645][ T4534] netlink: 'syz.9.22576': attribute type 46 has an invalid length.
[ 1513.750454][ T4535] 9pnet_fd: Insufficient options for proto=fd
[ 1513.983484][ T4548] devpts: called with bogus options
[ 1514.042232][ T4549] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[ 1514.417611][ T4581] can0: slcan on ptm0.
[ 1514.672360][T13551] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[ 1514.811521][   T36] kauditd_printk_skb: 561 callbacks suppressed
[ 1514.811541][   T36] audit: type=1400 audit(2000019035.827:282998): avc:  denied  { search } for  pid=4608 comm="sed" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1514.846964][T13551] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1514.862365][   T36] audit: type=1400 audit(2000019035.856:282999): avc:  denied  { search } for  pid=4608 comm="sed" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1514.870690][T13551] usb 4-1: config 0 has no interfaces?
[ 1514.913006][T13551] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[ 1514.916854][   T36] audit: type=1400 audit(2000019035.856:283000): avc:  denied  { read } for  pid=4608 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1514.935583][T13551] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1514.948243][   T36] audit: type=1400 audit(2000019035.856:283001): avc:  denied  { read open } for  pid=4608 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1514.982670][   T36] audit: type=1400 audit(2000019035.856:283002): avc:  denied  { getattr } for  pid=4608 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1514.995208][T13551] usb 4-1: config 0 descriptor??
[ 1515.056726][ T4620] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1515.058789][   T36] audit: type=1400 audit(2000019035.865:283003): avc:  denied  { ioctl } for  pid=4579 comm="syz.3.22592" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1515.089564][   T36] audit: type=1400 audit(2000019035.865:283004): avc:  denied  { ioctl } for  pid=4579 comm="syz.3.22592" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1515.090094][ T4620] audit: audit_lost=344 audit_rate_limit=0 audit_backlog_limit=64
[ 1515.124517][   T36] audit: type=1400 audit(2000019035.865:283005): avc:  denied  { ioctl } for  pid=4579 comm="syz.3.22592" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1515.171659][ T4626] overlayfs: failed to clone upperpath
[ 1515.202359][ T4629] netlink: 'syz.9.22606': attribute type 1 has an invalid length.
[ 1515.263523][T13551] usb 4-1: USB disconnect, device number 88
[ 1515.326303][ T4581] can0 (unregistered): slcan off ptm0.
[ 1515.672914][ T4655] netlink: 9 bytes leftover after parsing attributes in process `syz.9.22615'.
[ 1515.683593][ T4655] gretap0: entered promiscuous mode
[ 1515.703994][ T4655] netlink: 5 bytes leftover after parsing attributes in process `syz.9.22615'.
[ 1515.723793][ T4655] 0��{X��: renamed from gretap0
[ 1515.731309][ T4655] 0��{X��: left promiscuous mode
[ 1515.740308][ T4655] 0��{X��: entered allmulticast mode
[ 1515.747763][ T4655] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[ 1516.120546][ T4674] netlink: 'syz.2.22619': attribute type 32 has an invalid length.
[ 1517.302338][ T4714] 9pnet_fd: Insufficient options for proto=fd
[ 1517.343573][ T4716] tipc: New replicast peer: 139.255.255.255
[ 1517.349737][ T4716] tipc: Enabled bearer <udp:s>, priority 10
[ 1517.357841][T13551] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 1517.526728][T13551] usb 3-1: Using ep0 maxpacket: 16
[ 1517.542919][T13551] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9
[ 1517.563594][T13551] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[ 1517.590873][T13551] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[ 1517.599969][T13551] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1517.624902][T13551] usb 3-1: config 0 descriptor??
[ 1518.083808][T13551] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5012.005C/input/input144
[ 1518.109254][T13551] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5012.005C/input/input145
[ 1518.151785][T13551] kye 0003:0458:5012.005C: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.2-1/input0
[ 1518.284332][T13554] usb 3-1: USB disconnect, device number 32
[ 1518.396291][ T4731] fido_id[4731]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1518.507445][ T4735] fuse: Bad value for 'group_id'
[ 1518.526852][ T4735] fuse: Bad value for 'group_id'
[ 1518.542616][T13554] tipc: Node number set to 3610800279
[ 1518.796954][ T4757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22652'.
[ 1519.039149][ T4779] tipc: Started in network mode
[ 1519.044072][ T4779] tipc: Node identity b9, cluster identity 4711
[ 1519.050514][ T4779] tipc: Node number set to 185
[ 1519.101452][ T4782] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1519.164794][ T4781] tipc: Disabling bearer <eth:syzkaller0>
[ 1519.226611][ T4784] can0: slcan on ptm0.
[ 1519.493802][T13554] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 1519.667657][T13554] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1519.690840][T13554] usb 3-1: config 0 has no interfaces?
[ 1519.707488][T13554] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[ 1519.727457][T13554] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1519.759930][T13554] usb 3-1: config 0 descriptor??
[ 1519.987059][T13554] usb 3-1: USB disconnect, device number 33
[ 1520.055728][ T4784] can0 (unregistered): slcan off ptm0.
[ 1520.181235][   T36] kauditd_printk_skb: 739 callbacks suppressed
[ 1520.181263][   T36] audit: type=1400 audit(2000019040.860:283744): avc:  denied  { search } for  pid=4818 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1520.230294][   T36] audit: type=1400 audit(2000019040.888:283745): avc:  denied  { search } for  pid=4818 comm="rm" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1520.295593][   T36] audit: type=1400 audit(2000019040.888:283746): avc:  denied  { search } for  pid=4818 comm="rm" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1520.358526][   T36] audit: type=1400 audit(2000019040.888:283747): avc:  denied  { getattr } for  pid=4818 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=22178 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1520.393611][T13554] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 1520.425878][   T36] audit: type=1400 audit(2000019040.888:283748): avc:  denied  { search } for  pid=4818 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1520.485176][   T36] audit: type=1400 audit(2000019040.888:283749): avc:  denied  { search } for  pid=4818 comm="rm" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1520.517973][ T4831] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1520.524597][ T4831] audit: audit_lost=345 audit_rate_limit=0 audit_backlog_limit=64
[ 1520.535486][ T4833] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1520.542135][   T36] audit: type=1400 audit(2000019040.888:283750): avc:  denied  { search } for  pid=4818 comm="rm" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1520.594933][T13554] usb 3-1: Using ep0 maxpacket: 16
[ 1520.608647][T13554] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid maxpacket 1560, setting to 1024
[ 1520.628257][T13554] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1520.655532][T13554] usb 3-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1520.679397][T13554] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1520.713468][T13554] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1520.727199][T13554] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1520.755335][T13554] usb 3-1: Product: 掻㥵乍躿⛚磌熥䱇㿴陴⩛瘶Ꞙ秧롗勲燒賨ኟꏐ孏䇘铞ᎄ屑ᭊᮅ穁崤犌ŷ愈괡䌼㴮ᐓ꺗ᮐ懌샚懵彮奷逴㢹钋섍凶ٜ鋙腃妗恎ต焣犐丈姳幤沥䲡⥺虐Ⅽ돥穈⋿럶䱗싣ᇕ耾쯣츿磛浠돋莓谓쟓篪膦꫄잚툙
[ 1520.799327][T13554] usb 3-1: Manufacturer: 䰊
[ 1520.803990][T13554] usb 3-1: SerialNumber: 妲增濕蠢唡瀀馯䈓䮭뮛龜枯떴ꉷ̆挭瓤ℽ嫜ᑾ絅뒿㻉㪍쪨婒ꁃ
[ 1520.848841][ T4816] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1521.121870][ T4865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22678'.
[ 1521.151203][T13554] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[ 1521.171857][T13554] usb 3-1: USB disconnect, device number 34
[ 1521.459434][ T4879] __vm_enough_memory: pid: 4879, comm: syz.2.22681, bytes: 18014402804453376 not enough memory for the allocation
[ 1521.812224][ T4906] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[ 1521.812251][ T4906] rust_binder: Read failure Err(EFAULT) in pid:468
[ 1522.038178][T13527] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1522.219908][T13527] usb 3-1: Using ep0 maxpacket: 32
[ 1522.230217][T13527] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[ 1522.244217][T13527] usb 3-1: config 0 has no interface number 0
[ 1522.256116][T13527] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[ 1522.267103][ T4938] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22702'.
[ 1522.276755][T13527] usb 3-1: config 0 interface 196 has no altsetting 0
[ 1522.288420][T13527] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 1522.298038][T13527] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1522.307007][T13527] usb 3-1: Product: syz
[ 1522.311291][T13527] usb 3-1: Manufacturer: syz
[ 1522.315914][T13527] usb 3-1: SerialNumber: syz
[ 1522.327256][T13527] usb 3-1: config 0 descriptor??
[ 1522.339099][ T4903] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1522.360768][T13554] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[ 1522.540634][T13554] usb 4-1: Using ep0 maxpacket: 16
[ 1522.548527][T13554] usb 4-1: config 8 has an invalid interface number: 207 but max is 1
[ 1522.556762][T13554] usb 4-1: config 8 contains an unexpected descriptor of type 0x2, skipping
[ 1522.565511][T13554] usb 4-1: config 8 has an invalid interface number: 231 but max is 1
[ 1522.575723][T13554] usb 4-1: config 8 has no interface number 0
[ 1522.582955][T13554] usb 4-1: config 8 has no interface number 1
[ 1522.591074][T13554] usb 4-1: config 8 interface 231 altsetting 124 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[ 1522.603489][T13554] usb 4-1: config 8 interface 231 altsetting 124 has a duplicate endpoint with address 0x1, skipping
[ 1522.614987][T13554] usb 4-1: config 8 interface 231 altsetting 124 has an invalid descriptor for endpoint zero, skipping
[ 1522.635952][T13554] usb 4-1: config 8 interface 231 altsetting 124 endpoint 0xB has invalid maxpacket 512, setting to 64
[ 1522.647527][T13554] usb 4-1: config 8 interface 231 altsetting 124 has a duplicate endpoint with address 0x3, skipping
[ 1522.659515][T13554] usb 4-1: config 8 interface 231 altsetting 124 has a duplicate endpoint with address 0xA, skipping
[ 1522.671151][T13554] usb 4-1: config 8 interface 231 altsetting 124 has a duplicate endpoint with address 0x1, skipping
[ 1522.684205][T13554] usb 4-1: config 8 interface 207 has no altsetting 0
[ 1522.691203][T13554] usb 4-1: config 8 interface 231 has no altsetting 0
[ 1522.714198][T13554] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice=3a.56
[ 1522.723326][T13554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1522.731349][T13554] usb 4-1: Product: Ч
[ 1522.785257][T13527] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[ 1522.794506][T13527] ipheth 3-1:0.196: probe with driver ipheth failed with error -22
[ 1522.964684][ T4980] fuse: Unknown parameter ''
[ 1523.017485][ T4903] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[ 1523.018292][T13551] usb 3-1: USB disconnect, device number 35
[ 1523.121387][ T4984] overlayfs: failed to clone upperpath
[ 1523.843240][ T5019] SELinux:  policydb table sizes (8,9) do not match mine (8,7)
[ 1523.851007][ T5019] SELinux: failed to load policy
[ 1523.995300][ T5021] rust_binder: validate_parent_fixup: new_min_offset=25, sg_entry.length=0
[ 1523.995329][ T5021] rust_binder: Error while translating object.
[ 1524.004284][ T5021] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[ 1524.011603][ T5021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107
[ 1524.358095][T13551] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 1524.529085][T13551] usb 3-1: Using ep0 maxpacket: 32
[ 1524.536729][T13551] usb 3-1: config 247 has an invalid interface number: 58 but max is 1
[ 1524.546198][T13551] usb 3-1: config 247 has an invalid descriptor of length 0, skipping remainder of the config
[ 1524.557306][T13551] usb 3-1: config 247 has 1 interface, different from the descriptor's value: 2
[ 1524.567301][T13551] usb 3-1: config 247 has no interface number 0
[ 1524.574506][T13551] usb 3-1: config 247 interface 58 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[ 1524.586385][T13551] usb 3-1: config 247 interface 58 altsetting 1 endpoint 0x6 has invalid maxpacket 512, setting to 64
[ 1524.598939][T13551] usb 3-1: config 247 interface 58 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[ 1524.610962][T13551] usb 3-1: config 247 interface 58 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[ 1524.623005][T13551] usb 3-1: config 247 interface 58 altsetting 1 has a duplicate endpoint with address 0x5, skipping
[ 1524.634765][T13551] usb 3-1: config 247 interface 58 altsetting 1 endpoint 0xF has an invalid bInterval 247, changing to 11
[ 1524.654014][T13551] usb 3-1: config 247 interface 58 altsetting 1 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[ 1524.665780][ T5031] overlay: ./file0 is not a directory
[ 1524.669340][T13551] usb 3-1: config 247 interface 58 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[ 1524.683044][T13551] usb 3-1: config 247 interface 58 altsetting 1 has a duplicate endpoint with address 0x5, skipping
[ 1524.694798][T13551] usb 3-1: config 247 interface 58 altsetting 1 has 13 endpoint descriptors, different from the interface descriptor's value: 15
[ 1524.708928][T13551] usb 3-1: config 247 interface 58 has no altsetting 0
[ 1524.720941][T13551] usb 3-1: New USB device found, idVendor=257a, idProduct=2606, bcdDevice=f2.5d
[ 1524.732044][T13551] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1524.741662][T13551] usb 3-1: Product: 瓲䄺궕谁†☿乚ጥ굲䷓┞㛩웍ൠ撶滋냽쟼彯穾嬆铈廣㸶饒䪴茤ￗ㿕᲋샳碫軃棰⫊火隦ݮ쬦쨽쓌쩕춱ᾣ潋﵄뭥⇹㊾遤튏醺兣鉕㸠俑ꩳᖘ䤍Ệ矟㝊뛹喇젹栟㝊돳杣ꮺ쓳늇쳬성ଂ醨꒠鹀箟䇸ⱂະ审뎈ഡ㲦吕蕬뫰ﴓ
[ 1524.773027][T13551] usb 3-1: Manufacturer: 걍喹铀඾緋⭍ພ㈍㰏㙶䂧칌徐✺綏輐ﰁඳ㥏౶ᆰ瞕㈊ຠㆉﮏ⚆ᅒ酅杓꫆㓝㯻艞㾣奂緙㮟ퟙ䝤훊햘앯旘ȭ螉㰪Ϫ걛
[ 1524.794195][T13551] usb 3-1: SerialNumber: 龍셲䜉ṷ燐㪿嵼ࠌ㗿痽蔙䎋딵䞉呙嚊必嗃Ĭ僩꒹ꦞ베變૽蛀扙⏴꣩ǵ۶蟫䎙깡াɼ柨찮犎戀া罄崙
[ 1524.813926][T13551] usb 3-1: rejected 1 configuration due to insufficient available bus power
[ 1524.825642][T13551] usb 3-1: no configuration chosen from 1 choice
[ 1525.273743][T13554] usb 4-1: unknown interface protocol 0xd3, assuming v1
[ 1525.299772][T13554] usb 4-1: cannot find UAC_HEADER
[ 1525.309568][T13554] snd-usb-audio 4-1:8.207: probe with driver snd-usb-audio failed with error -22
[ 1525.331029][T13554] usb 4-1: unknown interface protocol 0x9a, assuming v1
[ 1525.339412][T13554] usb 4-1: cannot find UAC_HEADER
[ 1525.362834][T13554] snd-usb-audio 4-1:8.231: probe with driver snd-usb-audio failed with error -22
[ 1525.397039][T13554] usb 4-1: USB disconnect, device number 89
[ 1525.474868][ T5059] netlink: 'syz.9.22741': attribute type 5 has an invalid length.
[ 1525.482881][ T5059] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.22741'.
[ 1525.506464][ T2000] udevd[2000]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.231/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1525.558218][   T36] kauditd_printk_skb: 1023 callbacks suppressed
[ 1525.558240][   T36] audit: type=1400 audit(2000019045.883:284627): avc:  denied  { read write } for  pid=5058 comm="syz.3.22742" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1525.595356][   T36] audit: type=1400 audit(2000019045.920:284628): avc:  denied  { read write open } for  pid=5058 comm="syz.3.22742" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1525.633189][   T36] audit: type=1400 audit(2000019045.949:284629): avc:  denied  { execmem } for  pid=5058 comm="syz.3.22742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1525.656646][   T36] audit: type=1400 audit(2000019045.949:284630): avc:  denied  { execmem } for  pid=5058 comm="syz.3.22742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1525.729855][   T36] audit: type=1400 audit(2000019046.051:284631): avc:  denied  { read write } for  pid=1558 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1525.754231][   T36] audit: type=1400 audit(2000019046.051:284632): avc:  denied  { read write open } for  pid=1558 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1525.810975][   T36] audit: type=1400 audit(2000019046.051:284633): avc:  denied  { ioctl } for  pid=1558 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1525.843575][   T36] audit: type=1400 audit(2000019046.117:284634): avc:  denied  { read write } for  pid=5063 comm="syz.3.22743" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1525.869797][   T36] audit: type=1400 audit(2000019046.117:284635): avc:  denied  { read write open } for  pid=5063 comm="syz.3.22743" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1525.898260][   T36] audit: type=1400 audit(2000019046.117:284636): avc:  denied  { create } for  pid=5063 comm="syz.3.22743" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1526.355229][ T5086] x_tables: duplicate underflow at hook 1
[ 1527.311491][T13554] usb 3-1: USB disconnect, device number 36
[ 1527.818622][  T293] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1527.891494][ T5101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22757'.
[ 1527.981727][ T5104] rust_binder: Write failure EFAULT in pid:119
[ 1528.292204][T13528] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 1528.463229][T13528] usb 3-1: Using ep0 maxpacket: 8
[ 1528.471466][T13528] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1528.480820][T13528] usb 3-1: config 128 has an invalid interface number: 84 but max is 0
[ 1528.489137][T13528] usb 3-1: config 128 has no interface number 0
[ 1528.495725][T13528] usb 3-1: config 128 interface 84 has no altsetting 0
[ 1528.505559][T13528] usb 3-1: New USB device found, idVendor=eb49, idProduct=2929, bcdDevice=ac.d9
[ 1528.514706][T13528] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1528.522739][T13528] usb 3-1: Product: syz
[ 1528.526905][T13528] usb 3-1: Manufacturer: syz
[ 1528.531538][T13528] usb 3-1: SerialNumber: syz
[ 1528.715478][ T5114] fuse: Unknown parameter 'wp_'
[ 1528.770930][ T5106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1528.782969][ T5106] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1528.816407][T13528] usb 3-1: bad CDC descriptors
[ 1528.830668][T13528] usb 3-1: USB disconnect, device number 37
[ 1529.473195][ T5141] rust_binder: Failed to vm_insert_page(35184388861952): vma_addr:35184388857856 i:1 err:EFAULT
[ 1529.473247][ T5141] rust_binder: Error in use_page_slow: EFAULT
[ 1529.483903][ T5141] rust_binder: use_range failure EFAULT
[ 1529.490042][ T5141] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[ 1529.495707][ T5141] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[ 1529.503860][ T5141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:125
[ 1529.666270][ T5150] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1529.967883][ T5162] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22780'.
[ 1530.034788][T23689] Bluetooth: hci0: command 0x1003 tx timeout
[ 1530.035910][T17382] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1530.173752][T13528] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 1530.337109][T13528] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1530.350499][T13528] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[ 1530.361530][T13528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1530.372229][T13528] usb 3-1: config 0 descriptor??
[ 1530.760182][  T293] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1530.826420][T13528] dragonrise 0003:0079:0006.005D: item fetching failed at offset 4/5
[ 1530.834910][T13528] dragonrise 0003:0079:0006.005D: parse failed
[ 1530.842014][T13528] dragonrise 0003:0079:0006.005D: probe with driver dragonrise failed with error -22
[ 1531.044006][   T36] kauditd_printk_skb: 565 callbacks suppressed
[ 1531.044040][   T36] audit: type=1400 audit(2000019051.018:285202): avc:  denied  { read } for  pid=5157 comm="syz.2.22778" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1531.074382][   T36] audit: type=1400 audit(2000019051.018:285203): avc:  denied  { read open } for  pid=5157 comm="syz.2.22778" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1531.098323][   T36] audit: type=1400 audit(2000019051.028:285204): avc:  denied  { ioctl } for  pid=5157 comm="syz.2.22778" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1531.101246][ T5159] rust_binder: Write failure EFAULT in pid:141
[ 1531.123379][   T36] audit: type=1400 audit(2000019051.075:285205): avc:  denied  { ioctl } for  pid=5157 comm="syz.2.22778" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1531.202114][T13551] usb 3-1: USB disconnect, device number 38
[ 1531.263202][   T36] audit: type=1400 audit(2000019051.215:285206): avc:  denied  { name_bind } for  pid=5193 comm="syz.5.22792" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[ 1531.285376][   T36] audit: type=1400 audit(2000019051.224:285207): avc:  denied  { node_bind } for  pid=5193 comm="syz.5.22792" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 1531.330495][   T36] audit: type=1400 audit(2000019051.290:285208): avc:  denied  { mounton } for  pid=5193 comm="syz.5.22792" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 1531.352499][   T36] audit: type=1400 audit(2000019051.290:285209): avc:  denied  { create } for  pid=5193 comm="syz.5.22792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 1531.372640][   T36] audit: type=1400 audit(2000019051.290:285210): avc:  denied  { sys_admin } for  pid=5193 comm="syz.5.22792" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 1531.395546][   T36] audit: type=1400 audit(2000019051.308:285211): avc:  denied  { remount } for  pid=5193 comm="syz.5.22792" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[ 1531.920988][ T5223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22801'.
[ 1532.145445][ T5225] incfs_lookup_dentry err:-13
[ 1532.150362][ T5225] incfs: Can't find or create .index dir in ./bus
[ 1532.156950][ T5225] incfs: mount failed -13
[ 1532.502507][ T5246] tipc: Enabled bearer <eth:gre0>, priority 26
[ 1532.511987][ T5246] netlink: 84 bytes leftover after parsing attributes in process `syz.9.22808'.
[ 1532.624267][ T5256] 9pnet_fd: Insufficient options for proto=fd
[ 1532.942591][T17382] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1532.942813][T23689] Bluetooth: hci0: command 0x1003 tx timeout
[ 1533.578311][ T5277] /dev/rnullb0: Can't open blockdev
[ 1534.085272][ T5291] netlink: 'syz.3.22823': attribute type 4 has an invalid length.
[ 1534.093231][ T5291] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.22823'.
[ 1534.131108][ T5291] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[ 1535.663248][ T5336] fuse: Bad value for 'fd'
[ 1535.669073][ T5336] netlink: 68 bytes leftover after parsing attributes in process `syz.9.22838'.
[ 1642.660286][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1642.667433][    C1] rcu: 	(detected by 1, t=10002 jiffies, g=86525, q=373 ncpus=2)
[ 1642.675277][    C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4295098672-4295088669), jiffies_till_next_fqs=1, root ->qsmask 0x0
[ 1642.688689][    C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g86525 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1642.699910][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1642.709902][    C1] rcu: RCU grace-period kthread stack dump:
[ 1642.715808][    C1] task:rcu_preempt     state:R  running task     stack:0     pid:18    tgid:18    ppid:2      flags:0x00004000
[ 1642.727561][    C1] Call Trace:
[ 1642.730872][    C1]  <TASK>
[ 1642.733867][    C1]  __schedule+0x1322/0x1df0
[ 1642.738419][    C1]  ? __sched_text_start+0x10/0x10
[ 1642.743468][    C1]  ? __kasan_check_write+0x18/0x20
[ 1642.748616][    C1]  ? enqueue_timer+0x3d0/0x480
[ 1642.753410][    C1]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 1642.759257][    C1]  ? __mod_timer+0x8ba/0xd60
[ 1642.763879][    C1]  schedule+0xc6/0x240
[ 1642.767974][    C1]  schedule_timeout+0x139/0x3a0
[ 1642.772852][    C1]  ? __cfi_schedule_timeout+0x10/0x10
[ 1642.778255][    C1]  ? try_to_wake_up+0xdfb/0x1b00
[ 1642.783216][    C1]  ? __cfi_process_timeout+0x10/0x10
[ 1642.788527][    C1]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 1642.794374][    C1]  ? prepare_to_swait_event+0x30d/0x330
[ 1642.799949][    C1]  rcu_gp_fqs_loop+0x2f2/0x12f0
[ 1642.804834][    C1]  ? __kasan_check_write+0x18/0x20
[ 1642.809993][    C1]  ? rcu_gp_init+0x1020/0x1020
[ 1642.814800][    C1]  rcu_gp_kthread+0x99/0x380
[ 1642.819482][    C1]  ? __cfi_rcu_gp_kthread+0x10/0x10
[ 1642.824714][    C1]  ? __kasan_check_read+0x15/0x20
[ 1642.829779][    C1]  ? __kthread_parkme+0x138/0x180
[ 1642.834833][    C1]  ? schedule+0xc6/0x240
[ 1642.839106][    C1]  kthread+0x2ca/0x370
[ 1642.843199][    C1]  ? __cfi_rcu_gp_kthread+0x10/0x10
[ 1642.848454][    C1]  ? __cfi_kthread+0x10/0x10
[ 1642.853071][    C1]  ret_from_fork+0x67/0xa0
[ 1642.857517][    C1]  ? __cfi_kthread+0x10/0x10
[ 1642.862136][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1642.866935][    C1]  </TASK>
[ 1642.869980][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1642.876317][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1642.881733][    C0] NMI backtrace for cpu 0
[ 1642.881749][    C0] CPU: 0 UID: 0 PID: 5320 Comm: syz.3.22833 Not tainted syzkaller #0 68071847e78a8b5e73ab1b858b320f4e6b4f981b
[ 1642.881772][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1642.881783][    C0] RIP: 0010:change_mnt_propagation+0xff/0xb00
[ 1642.881809][    C0] Code: 4e e7 ff 4d 8b 2e 48 c7 c3 28 ff ff ff 4d 89 fc 4d 8d 74 24 20 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 4c 89 f7 e8 77 4e e7 ff 4d 39 2e 0f 84 8f 00 00 00 49 81 c4
[ 1642.881824][    C0] RSP: 0018:ffffc900035379c0 EFLAGS: 00000246
[ 1642.881840][    C0] RAX: 1ffff1102b49c8ac RBX: ffffffffffffff28 RCX: dffffc0000000000
[ 1642.881853][    C0] RDX: 0000000000000000 RSI: 0000000000040000 RDI: 0000000000100000
[ 1642.881865][    C0] RBP: ffffc90003537a10 R08: ffff888157b15b6f R09: 0000000000000000
[ 1642.881877][    C0] R10: ffff888157b15b60 R11: ffffed102af62b6e R12: ffff88815a4e4540
[ 1642.881891][    C0] R13: ffff888130932110 R14: ffff88815a4e4560 R15: ffff888128313dc0
[ 1642.881904][    C0] FS:  00007f03bfdd56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 1642.881920][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1642.881932][    C0] CR2: 00007f81925a1d58 CR3: 00000001153cc000 CR4: 00000000003526b0
[ 1642.881947][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1642.881957][    C0] DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400
[ 1642.881968][    C0] Call Trace:
[ 1642.881975][    C0]  <TASK>
[ 1642.881985][    C0]  umount_tree+0xdfd/0xf70
[ 1642.882009][    C0]  ? irqentry_exit+0x4a/0x60
[ 1642.882026][    C0]  ? sysvec_apic_timer_interrupt+0x50/0x90
[ 1642.882052][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1f/0x30
[ 1642.882069][    C0]  ? __detach_mounts+0x610/0x610
[ 1642.882093][    C0]  attach_recursive_mnt+0x6df/0x21e0
[ 1642.882114][    C0]  ? __asan_memset+0x39/0x50
[ 1642.882139][    C0]  ? graft_tree+0x1c0/0x1c0
[ 1642.882157][    C0]  ? clone_mnt+0xa27/0xc80
[ 1642.882179][    C0]  graft_tree+0x157/0x1c0
[ 1642.882209][    C0]  do_loopback+0x364/0x4b0
[ 1642.882233][    C0]  ? path_mount+0x1050/0x1050
[ 1642.882257][    C0]  ? security_capable+0xcf/0xf0
[ 1642.882280][    C0]  ? ns_capable+0x91/0xf0
[ 1642.882303][    C0]  path_mount+0x582/0x1050
[ 1642.882327][    C0]  ? putname+0x113/0x150
[ 1642.882344][    C0]  __se_sys_mount+0x2bd/0x480
[ 1642.882359][    C0]  ? __x64_sys_mount+0xf0/0xf0
[ 1642.882376][    C0]  ? __kasan_check_write+0x18/0x20
[ 1642.882400][    C0]  ? fpregs_restore_userregs+0x11d/0x260
[ 1642.882420][    C0]  __x64_sys_mount+0xc3/0xf0
[ 1642.882435][    C0]  x64_sys_call+0x2021/0x2ee0
[ 1642.882464][    C0]  do_syscall_64+0x58/0xf0
[ 1642.882483][    C0]  ? clear_bhb_loop+0x50/0xa0
[ 1642.882500][    C0]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 1642.882526][    C0] RIP: 0033:0x7f03bef8eec9
[ 1642.882542][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1642.882556][    C0] RSP: 002b:00007f03bfdd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1642.882572][    C0] RAX: ffffffffffffffda RBX: 00007f03bf1e5fa0 RCX: 00007f03bef8eec9
[ 1642.882585][    C0] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 00002000000002c0
[ 1642.882597][    C0] RBP: 00007f03bf011f91 R08: 0000000000000000 R09: 0000000000000000
[ 1642.882608][    C0] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000000
[ 1642.882619][    C0] R13: 00007f03bf1e6038 R14: 00007f03bf1e5fa0 R15: 00007ffc8b880bc8
[ 1642.882634][    C0]  </TASK>