last executing test programs:

6m33.295170875s ago: executing program 1 (id=20):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1, 0x3}) (async)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x8, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x8a, 0x2}, @flat=@weak_binder, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

6m33.294843476s ago: executing program 1 (id=21):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

6m33.294651606s ago: executing program 1 (id=22):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000240)={0xf1e5b21b, 0x800000, 0x0, 0x1f7, 0x3})
write$UHID_INPUT(r1, &(0x7f0000000500)={0x8, {"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", 0x1000}}, 0x1006)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r2, 0x4068aea3, &(0x7f0000000040)={0xdb, 0x0, 0x1b40})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'vlan0\x00', 0x0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000000)={0x1})

6m33.293576895s ago: executing program 1 (id=23):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0x8)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0)

6m33.267598026s ago: executing program 1 (id=24):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x408000)
copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x3, r0, &(0x7f0000000080)=0x2bdc, 0x9, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f00000000c0)=@other={'unlock', ' ', 'none'}, 0xc)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0xb, @loopback, 0x7}, 0x1c)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000180))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cgroups\x00', 0x0, 0x0)
r3 = geteuid()
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
r6 = getuid()
r7 = getuid()
statx(r1, &(0x7f0000000300)='./file0\x00', 0x100, 0x4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000540)=0xe8)
lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}, 0x6000)
statx(r1, &(0x7f0000000700)='./file0\x00', 0x800, 0x80, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, <r12=>0x0, <r13=>0x0})
statx(r1, &(0x7f0000000840)='./file0\x00', 0x2000, 0x20, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, <r14=>0x0, <r15=>0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000980)={<r16=>0x0, <r17=>0x0, <r18=>0x0}, &(0x7f00000009c0)=0xc)
newfstatat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, <r19=>0x0, <r20=>0x0}, 0x100)
fsetxattr$system_posix_acl(r2, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000ac0)={{}, {0x1, 0x4}, [{0x2, 0x0, r3}, {0x2, 0x3, r4}, {0x2, 0x4, r6}, {0x2, 0x2, 0xee01}, {0x2, 0x11cff4e4eb2b1234, r7}, {0x2, 0x2, r8}, {0x2, 0x1, r9}], {0x4, 0x2}, [{0x8, 0x6, r10}, {0x8, 0x2, r11}, {0x8, 0x2}, {0x8, 0x7, 0xffffffffffffffff}, {0x8, 0x7, r13}, {0x8, 0x7, 0xffffffffffffffff}, {0x8, 0x0, r15}, {0x8, 0x6, r18}, {0x8, 0x3, r20}], {}, {0x20, 0x2}}, 0xa4, 0x0)
r21 = socket$nl_generic(0x10, 0x3, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000b80), 0x80600, 0x0)
r22 = socket$inet6_udp(0xa, 0x2, 0x0)
close_range(r22, r0, 0x2)
r23 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0)
statx(r1, &(0x7f0000003180)='./file0\x00', 0x4000, 0x40, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, <r24=>0x0, <r25=>0x0})
syz_fuse_handle_req(r23, &(0x7f0000000c00)="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", 0x2000, &(0x7f0000003680)={&(0x7f0000002c00)={0x50, 0x0, 0x8e, {0x7, 0x2b, 0x10001, 0x8088040, 0x0, 0x9, 0x80000001, 0x7, 0x0, 0x0, 0x20, 0xffffffff}}, &(0x7f0000002c80)={0x18, 0x0, 0x2, {0x81}}, &(0x7f0000002cc0)={0x18, 0xffffffffffffffda, 0x21, {0x7}}, &(0x7f0000002d00)={0x18, 0x0, 0x80000001, {0x7}}, &(0x7f0000002d40)={0x18, 0x0, 0xd0, {0x7}}, &(0x7f0000002d80)={0x28, 0x0, 0xc, {{0xf1400000000, 0x2, 0x1, r16}}}, &(0x7f0000002dc0)={0x60, 0x0, 0x7fff, {{0x10000, 0x3, 0x7, 0x9, 0x2, 0xfde, 0x3ff, 0x7}}}, &(0x7f0000002e40)={0x18, 0xfffffffffffffffe, 0xd4a, {0x5}}, &(0x7f0000002e80)={0x18, 0xb, 0x2, {'}}\\*\\!*\x00'}}, &(0x7f0000002ec0)={0x20, 0x0, 0x7, {0x0, 0x10}}, &(0x7f0000002f00)={0x78, 0x0, 0xfffffffffffff819, {0x4af7, 0x0, 0x0, {0x5, 0x2, 0x8000000000000000, 0x30000000000, 0x7, 0xfffffffffffff801, 0xf, 0x7, 0xc5e6, 0x0, 0x200, r9, r5, 0xb8, 0x2}}}, &(0x7f0000002f80)={0x90, 0x0, 0x0, {0x6, 0x1, 0x7, 0x8, 0x4, 0x61c197ae, {0x2, 0xfffffffffffffc27, 0x542e, 0x8, 0x1, 0x7fff, 0x4, 0x7, 0x10000, 0x6000, 0x6, r4, r20, 0x1, 0x4}}}, &(0x7f0000003040)={0x110, 0x0, 0x8, [{0x5, 0x3, 0xe, 0x4, '/proc/cgroups\x00'}, {0x0, 0x8000000000000000, 0x0, 0x7}, {0x0, 0x9, 0x0, 0x4}, {0x4, 0xc, 0x1, 0x5, ' '}, {0x4, 0x5, 0x4, 0x2, 'none'}, {0x5, 0x3, 0xb, 0xfffff6a2, '/dev/ttyS3\x00'}, {0x3, 0x5, 0x1, 0x2, ' '}, {0x3, 0x9, 0x8, 0xd, '{D\xa5%]^!!'}]}, &(0x7f00000032c0)={0x160, 0x0, 0x5, [{{0x0, 0x1, 0x5, 0x6, 0x1, 0x8, {0x5, 0x101, 0x1, 0x6, 0x34c, 0x9, 0x2, 0x8, 0x3ff, 0x8000, 0x5, r19, r15, 0x60}}, {0x3, 0x1, 0x6, 0x8, 'unlock'}}, {{0x5, 0x3, 0x43f, 0x6, 0xbd61, 0x8000, {0x3, 0x3, 0x8000000000000001, 0x7, 0x40, 0x60000000000000, 0x2, 0x80000000, 0x4, 0xc000, 0x2, r17, r25, 0x5, 0x2}}, {0x1, 0x34c7, 0x11, 0x0, '}(+\xee{3%)^:-+\':&\\}'}}]}, &(0x7f0000003440)={0xa0, 0x0, 0x0, {{0x5, 0x3, 0x7, 0x8, 0x2, 0xf2, {0x2, 0xe, 0x9, 0x9, 0xc, 0xfffffffffffffffe, 0x8001, 0x9, 0xffffff01, 0x4000, 0x7, r14, r5, 0x8, 0x2}}, {0x0, 0x1}}}, &(0x7f0000003500)={0x20, 0x0, 0x7, {0xffff, 0x8, 0x7, 0x101}}, &(0x7f0000003540)={0x130, 0xffffffffffffffda, 0x3, {0x7, 0xa94, 0x0, '\x00', {0x2, 0x2, 0x5, 0x80000001, r8, r15, 0xc000, '\x00', 0xea1, 0x7, 0x8, 0x3, {0xaa, 0x9}, {0x80000001, 0x3}, {0x2, 0x9}, {0x0, 0x7}, 0x4, 0x5, 0x40, 0x76}}}})
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000003740)=@md0, r12, &(0x7f0000003780)={0x9, 0x5, 0x10000, 0x13, 0x2, 0x6, 0x3, 0xffffffffffffffff, 0xffffffff})
stat(&(0x7f0000004b80)='./file0\x00', &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r26=>0x0})
sendmsg$netlink(r21, &(0x7f0000004cc0)={&(0x7f0000003800)=@proc={0x10, 0x0, 0x25dfdbff, 0x1000}, 0xc, &(0x7f0000004b40)=[{&(0x7f0000003840)={0x12cc, 0x3a, 0x2, 0x70bd27, 0x25dfdbff, "", [@generic="aca848c77fdef769400a22aa742375a9fc89083373879bd5dc6c8c752099d82196944ecc4699dc24a51847005d099282031d1cc161e64f944b0989ead8901c475dece2f91f0a443101ca4dda", @generic="e97f7f835eec8040e78865df5bd044872f78bccbc710cea80cd966e0c4298dfb6072", @nested={0x1211, 0xfe, 0x0, 0x1, [@generic="76b82f544f1ec917f7db47c02e0dd4a5c42f0e26ab506006d26788d43200024f3e9a022d00ea310b24f5e0817ba10402c1f69299446ecfc0b349fe65a1c0ceb7cac4bfd5a60826e71e69dec3d793782beb804c3fc106bda96f58f4c7a6590a5fc963a8a3fed3fd376ee2fa9dbc34ea385d9e05f497d8edbee77afcac4ac18620465e739ca12d25fc60ab0b157ef255a576306a28", @nested={0x4, 0x7c}, @generic="4f3cf324d8dcdbc51a1ce69dc5241ec8555f412f6b1b75a8a44544ddf4cd9a6b1f9fce367c8dd14c5fe0b0075532aa194be832dcbfcf6aad1ab5a3d41ede34dbf4fdf42170a9a48ca714754b0bc49ee82dcf7c8c29d41438265d255efad6ad411a0f869c9b0d6e7ec7df6e391f7654871b5ac9d7ced8749843c71a141fa1417ca438d1b931e54bf6f1ecdc45bd61d83ffe2fd42e6a9e60f6b137abb823ef733295947f9b5f2c54ac7ba0d93cce026010e26a18774aba9b3323135ed5d6536531581b7699dc5f9ef742a161138bf4da51ca01d250f57011b6f4fb23decaf82d8e774699557640407993ddde75f29360b37c4e217b80", @nested={0x4, 0x108}, @generic="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", @typed={0xd, 0x4c, 0x0, 0x0, @str='/dev/md0\x00'}, @typed={0x4, 0x85}, @generic="b4ee891aa97323caaa82ac6626ee1b366c8454a63e932d9f70b6904e92ce30b5a863d5c134073bf9321b5d66e33a6a67ed2e7ac865efe4073a9429d00c719a1dae643957d496fbd484e8ccfd8ec158e682cb50da6cd74e1526293246a312e57509158cb95419a3a8"]}, @generic="0697ceb58391153c7ef66ad830a3fcc789ea1269ad35f0737add2c588f45b2da4248af0680677f4427cabb2781df992b3c790ad9684a3565ca"]}, 0x12cc}], 0x1, &(0x7f0000004c40)=[@cred={{0x1c, 0x1, 0x2, {r16, r12, r26}}}, @rights={{0x18, 0x1, 0x1, [r21, r2]}}, @cred={{0x1c, 0x1, 0x2, {r16, r24, r18}}}], 0x58}, 0x4000)

6m32.987458911s ago: executing program 1 (id=25):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$binfmt_register(r2, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x3, 0x3a, '.^', 0x3a, '&]!/', 0x3a, './cgroup', 0x3a, [0x46, 0x46]}, 0x30)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

6m32.987292531s ago: executing program 32 (id=25):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$binfmt_register(r2, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x3, 0x3a, '.^', 0x3a, '&]!/', 0x3a, './cgroup', 0x3a, [0x46, 0x46]}, 0x30)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

6m3.147748638s ago: executing program 0 (id=333):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590fc63b5760e50b8a147a10ffe643c81b55035cc0ea76f2e4229349ee5dc03a735595b942723fad49b453e90db459982c38", 0x58})
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[])
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x1e}, @fda={0x66646185, 0x4, 0x0, 0x3e}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
setrlimit(0xd, &(0x7f0000000000)={0x7, 0x8})

6m2.238037625s ago: executing program 0 (id=335):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0xe00, 0x109002)
ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) (async)
ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
capset(&(0x7f0000000040)={0x20080522}, 0x0)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r4, 0x43403d0e, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x11, 0x1000000, 0x0})

6m1.402728982s ago: executing program 0 (id=342):
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8)
gettid() (async)
r0 = gettid()
gettid() (async)
r1 = gettid()
timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) (async)
timer_settime(r2, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x14) (async)
tkill(r0, 0x14)
timer_create(0x3, 0x0, &(0x7f00000001c0))
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
gettid() (async)
r3 = gettid()
rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8)
timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r3}, &(0x7f0000044000)=<r4=>0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r5=>0x0, <r6=>0x0})
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r9, @ANYBLOB="0303fcffffff0000000000000000b4000280040004003400038008000100ffff0000080001000100008008000100000000000800020002000000080001000200000008000100f97fffff08000100e80b00003c00038008000200020000000800027c941ee2daaecd0ea9f0000200000008000200ffc8b37f0800020003000000080002000000008008000200fdffffff0800518da7cfbc57b59f020001000000080001000500000004000400240003800800020001000000080001000400000008000100180d000008000100"], 0xc8}}, 0x0) (async)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r9, @ANYBLOB="0303fcffffff0000000000000000b4000280040004003400038008000100ffff0000080001000100008008000100000000000800020002000000080001000200000008000100f97fffff08000100e80b00003c00038008000200020000000800027c941ee2daaecd0ea9f0000200000008000200ffc8b37f0800020003000000080002000000008008000200fdffffff0800518da7cfbc57b59f020001000000080001000500000004000400240003800800020001000000080001000400000008000100180d000008000100"], 0xc8}}, 0x0)
timer_settime(r4, 0x0, &(0x7f0000040fe0)={{r5, r6+10000000}, {0x0, 0x9}}, 0x0)
r10 = gettid()
r11 = getpid()
rt_tgsigqueueinfo(r11, r10, 0xb, &(0x7f0000000000)={0x200c, 0x3, 0x4})
rt_tgsigqueueinfo(r3, r10, 0x2e, &(0x7f0000000200)={0x3d, 0xd6, 0x3}) (async)
rt_tgsigqueueinfo(r3, r10, 0x2e, &(0x7f0000000200)={0x3d, 0xd6, 0x3})
rt_sigaction(0x12, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, {[0x400]}}, 0x0, 0x8, &(0x7f0000000180))
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)={[], [{@flag='dirsync'}]})

6m1.402438912s ago: executing program 0 (id=343):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000d80)={'syz1\x00', {0x8, 0x1010, 0x3, 0x342e}, 0x22, [0x5, 0x3, 0x40000, 0x7fffffff, 0x1, 0x8, 0xc, 0x6680, 0xd833, 0xd4c, 0xc7ce, 0x2, 0x20a, 0x3656, 0x0, 0x6, 0x80000, 0x923aa1e0, 0xa4, 0x4, 0x10001, 0x8, 0x5, 0x7, 0x31, 0x1, 0x3, 0x4ac7, 0x4, 0x9, 0x7, 0x80, 0x31, 0x6, 0x10001, 0x1, 0x3, 0x2, 0x4, 0x0, 0x2, 0x2, 0x9, 0x2, 0x9, 0x4, 0x5, 0x1c, 0x2, 0x2da, 0x3, 0xa76b5e3, 0x1ff, 0x2, 0x8, 0xd, 0x401, 0x8, 0x3, 0x6, 0x9, 0x1, 0x2, 0x3], [0xb, 0x4, 0x100, 0x9, 0x1, 0x8, 0x9, 0xf1, 0x1, 0x9, 0x0, 0x18, 0x1, 0x5, 0x9c8, 0x1, 0x6, 0x1, 0x7, 0xb, 0xfffffffd, 0x2, 0x5, 0x2, 0x7, 0x800, 0x10000, 0xe92b, 0x58a0, 0x3, 0x40, 0x7, 0x8, 0x4, 0x9, 0x6, 0xda, 0x0, 0x9da, 0x2, 0x4, 0xc, 0x8, 0x40, 0x2634, 0x1, 0x6, 0x7e, 0x4, 0x2, 0x3fe, 0x3, 0x8, 0x0, 0x1, 0x5, 0x0, 0x7, 0x101, 0x100, 0x401, 0x9, 0x539a, 0xfffff800], [0x9, 0x5, 0x0, 0xfffffffa, 0x1, 0x4, 0x2, 0xf, 0x1, 0x8, 0x41, 0x4, 0x2, 0x62, 0x3, 0x9, 0x1, 0x5, 0x0, 0x5846, 0x4, 0x6d30fadb, 0x4, 0xa1, 0xac0, 0x547, 0x2, 0x10, 0x9, 0x5, 0x0, 0xb4, 0x6, 0x0, 0x0, 0x7fff, 0x1000, 0x0, 0xfffffbff, 0x8001, 0x3, 0x7, 0x38, 0x1, 0x5, 0x8, 0x4, 0x8, 0x9, 0x101, 0x4, 0x5, 0xf1, 0xfffff96d, 0x2, 0x1, 0xf839, 0x4, 0x24000000, 0x6, 0x4a35, 0x3, 0x6, 0x5], [0x0, 0x6, 0xfffffff9, 0x7, 0x3, 0x6, 0x6, 0x5, 0x5, 0x0, 0x0, 0x2, 0x4, 0x2, 0x1000, 0x4, 0x1, 0xffff, 0x8528, 0xe062, 0x0, 0xffffffff, 0xd7, 0x5, 0x473, 0x4a91, 0x7, 0xfff00000, 0x8, 0xfffffff9, 0x8, 0x0, 0x0, 0xc, 0x3, 0x6, 0x6, 0x3, 0x7, 0x9, 0x7ff, 0xfffffffe, 0x1, 0x81, 0x4, 0x6, 0x3, 0xfffff49a, 0x2, 0x5, 0x101, 0x0, 0x1, 0x9, 0x81, 0x7, 0x39b, 0x68, 0x3c, 0x8000, 0x2, 0x0, 0x11c, 0x1]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="d9", 0x1}], 0x1)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009e000040"])
fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000340)=0xc)
modify_ldt$write2(0x11, &(0x7f0000000000)={0x2, 0x0, 0x4000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000300)={[{@gid={'gid', 0x3d, r8}}]})
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xa8605e, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0xa00}}, {@default_permissions}], [{@context={'context', 0x3d, 'staff_u'}}, {@audit}]}})
close_range(r0, 0xffffffffffffffff, 0x0)

6m1.302691944s ago: executing program 0 (id=347):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x400000a, 0xfffffefc, 0x6}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a00"], 0x1c}}, 0x804)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x91d, 0x0, 0x0, 0x0, 0xffffffff})
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
write$binfmt_misc(r2, &(0x7f0000000c80)="0912d540e319ba58fd070016c3452bff07d49615b0de25edd9090a8dcf84e8ccb8c2122799ea3e6dcc644672f6032959cabbb1289fba9b721402074df384597e51736059dd1a629c9e359a90d7e3e0445cca676572a4020284c5645a5b9029dd655124215622ed69031d4ad13a1babdb7303b112a8d86ac271aa35b92f389c492c192854995153625d4a2cd283bff4a16856f9957cec5b76bf8d2cea369127abcf115716c4aac8f8156aef7a677284eb1c8642f75691bdc371855e7d937fd03e3a7e9f7acb3e1fcb0df9a3aa290a000000000000cb1870f13419ce57d272c76c0c732f", 0xe3)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00')
fchdir(r4)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2241, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100006dbd"])
r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r8)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x282404, 0x0)
pread64(r0, &(0x7f00000029c0)=""/4082, 0xff2, 0xd36)
write$khugepaged_scan(r0, &(0x7f0000000080), 0x8)

6m1.273212424s ago: executing program 0 (id=348):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xfffc, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d06, 0x3, 0x9})
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r1, @ANYBLOB="2c836ac303b4826a5a028f"])
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
lseek(r2, 0x10001, 0x0)

6m1.235911205s ago: executing program 33 (id=348):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xfffc, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d06, 0x3, 0x9})
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r1, @ANYBLOB="2c836ac303b4826a5a028f"])
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
lseek(r2, 0x10001, 0x0)

5m38.986991392s ago: executing program 2 (id=637):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffff8000)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_unlock', 0x10000, 0x0)
clock_gettime(0x0, &(0x7f0000000f00)={<r2=>0x0, <r3=>0x0})
recvmmsg$unix(r1, &(0x7f0000000e00)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f00000000c0)=""/243, 0xf3}, {&(0x7f0000000380)=""/199, 0xc7}, {&(0x7f0000000480)=""/157, 0x9d}, {&(0x7f0000000540)=""/144, 0x90}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f00000006c0)=""/90, 0x5a}, {&(0x7f0000000740)=""/232, 0xe8}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000840)=""/232, 0xe8}], 0xa}}, {{&(0x7f0000000a00), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000200)=""/39, 0x27}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)=""/47, 0x2f}, {&(0x7f0000000b00)=""/61, 0x3d}, {&(0x7f0000000b40)=""/62, 0x3e}, {&(0x7f0000000b80)=""/25, 0x19}], 0x4, &(0x7f0000000c00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000cc0)=""/125, 0x7d}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/25, 0x19}], 0x3, &(0x7f0000000dc0)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x40000061, &(0x7f0000000f40)={r2, r3+10000000})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffff8000) (async)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_unlock', 0x10000, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000f00)) (async)
recvmmsg$unix(r1, &(0x7f0000000e00)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f00000000c0)=""/243, 0xf3}, {&(0x7f0000000380)=""/199, 0xc7}, {&(0x7f0000000480)=""/157, 0x9d}, {&(0x7f0000000540)=""/144, 0x90}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f00000006c0)=""/90, 0x5a}, {&(0x7f0000000740)=""/232, 0xe8}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000840)=""/232, 0xe8}], 0xa}}, {{&(0x7f0000000a00), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000200)=""/39, 0x27}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)=""/47, 0x2f}, {&(0x7f0000000b00)=""/61, 0x3d}, {&(0x7f0000000b40)=""/62, 0x3e}, {&(0x7f0000000b80)=""/25, 0x19}], 0x4, &(0x7f0000000c00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000cc0)=""/125, 0x7d}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/25, 0x19}], 0x3, &(0x7f0000000dc0)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x40000061, &(0x7f0000000f40)={r2, r3+10000000}) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)

5m38.926645803s ago: executing program 2 (id=638):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1006, 0x0)
r0 = socket$inet6(0xa, 0x800, 0x1)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x5, 0x1d) (async, rerun: 32)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback, 0xffffeff9}, 0x1c) (async, rerun: 32)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket(0x11, 0x3, 0x8)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000001c0)={0x4000d, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e000000200"/88], 0x290) (async, rerun: 64)
getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180), 0x10) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r3, &(0x7f00000012c0)={0x8, {"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", 0x1000}}, 0x1006) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, &(0x7f00000005c0)={0x0, 0x3938700}) (async)
syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
fstat(r3, &(0x7f0000000300)) (async)
write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) (async, rerun: 32)
ioctl$TCFLSH(r4, 0x400455c8, 0x0) (rerun: 32)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x6, &(0x7f0000000140)=0x7fffffff, 0x4)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
syz_io_uring_setup(0x3bad, 0x0, 0xfffffffffffffffc, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0xfeffffffffffffff, 0x8, 0x0, 0x0, 0x1e, 0x10, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523720fd4002002cfc03d81a8ca55b39c01802c4dae4162e43ac61b7ad3300", [0x2, 0xa]}})
r6 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) (async, rerun: 32)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) (async, rerun: 32)
memfd_secret(0x80000)

5m38.448946233s ago: executing program 2 (id=646):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44084) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea76a6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1b3ac0686db46783f45fe6aa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563eeff2fdfad8a775f0a4b15f63f5c4851df9aef747ace240cec55ce1659c08d38714245835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe8a4edde1c5397c761a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d0580729c8638502410837253d6ac316ee9c6a24eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850bddcd4b35b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000025d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e947cc15e0957a98a843911c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fc0e796afead2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f6f4bc29e7dbfae6788549e600000000271cd7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dccee1a480d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a5e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbee3f263a16cb565b61690b5804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb32d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca4d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"}) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

5m38.362191374s ago: executing program 2 (id=648):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_io_uring_setup(0x44d0, &(0x7f0000000500)={0x0, 0x1ff5f, 0x2, 0x0, 0x295}, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000200))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000280)={0x60, 0x2, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x7f924cda415610b9, 0x2, 0x1})
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901)
close_range(r0, 0xffffffffffffffff, 0x0)

5m38.360160944s ago: executing program 2 (id=650):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5m38.240456367s ago: executing program 2 (id=654):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'geneve1\x00'})
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010007, 0x0, 0xffffffffffffffff}]})
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0x0, 0xf0, 0x40, 0xfd, 0x7, 0xd4, 0x0, 0x4, 0x7, 0x6}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x40, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0xeeef0000, 0x3000, 0xd, 0xf, 0x43, 0x46, 0x2, 0xd, 0x6, 0x3, 0xfc, 0x1}, {0x100000, 0x0, 0x3, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6e, 0x1, 0xfb, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x100000, 0x5}, {0xdddd1000, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x9, 0x0, 0xeeef0000, [0x4, 0x401, 0x8, 0x10800000000000c5]})
close_range(r0, 0xffffffffffffffff, 0x0)

5m38.183220718s ago: executing program 34 (id=654):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'geneve1\x00'})
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010007, 0x0, 0xffffffffffffffff}]})
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0x0, 0xf0, 0x40, 0xfd, 0x7, 0xd4, 0x0, 0x4, 0x7, 0x6}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x40, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0xeeef0000, 0x3000, 0xd, 0xf, 0x43, 0x46, 0x2, 0xd, 0x6, 0x3, 0xfc, 0x1}, {0x100000, 0x0, 0x3, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6e, 0x1, 0xfb, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x100000, 0x5}, {0xdddd1000, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x9, 0x0, 0xeeef0000, [0x4, 0x401, 0x8, 0x10800000000000c5]})
close_range(r0, 0xffffffffffffffff, 0x0)

3m38.106053826s ago: executing program 5 (id=2851):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1f, 0x0, &(0x7f0000000040)="0f6fbf0e8295de9056927eec1785b89452352f9289b4116117af413f7f7899"}) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0xf44)
openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async, rerun: 64)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (rerun: 64)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67526ff5705f69643dea3a8877a62a62d1896475ac531853f5185a4dbbbf5b4b8b3ae6b1ed5ef169046776caefc44f1652c3a9649ce495213a73f96499376bdd39d6afdbad534de664af24401a2a6875bf77bf80967be61bf5abcc0fcd29d3c65abd2763e517d308b72b1300076b4f2759e36df545da78cd6266665df3ae34901b56b07830bf6eccb92d", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020) (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0)
write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) (async)
syz_fuse_handle_req(r3, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0xb, 0xfffffffffffffff9, 0x0, 0xfffffffd, 0x400000, 0x0, 0xc000, 0x0, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r3, &(0x7f0000004280)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r5, {0x7, 0x2b, 0xa32, 0xffffffff08a00022, 0x3ff, 0x5, 0x9, 0x4, 0x0, 0x0, 0x80, 0xb}}, 0x50) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) (async)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x5000, '\x00', 0xc94}) (async, rerun: 64)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 64)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000100)=ANY=[]) (async)
syz_fuse_handle_req(r7, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x4, {0x7, 0x29, 0x7, 0x12510421, 0x0, 0x9, 0x1, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x48, 0x0) (async)
syz_fuse_handle_req(r7, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x101, 0xa, 0x0, {0x1, 0xfffffffffffffffc, 0xbdd7, 0x400, 0x10000, 0x80000000, 0x9d1e, 0x4, 0x8, 0xa000, 0x0, 0x0, 0x0, 0x7fffffff, 0xc0ac}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m38.000901988s ago: executing program 5 (id=2852):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x0)
mkdirat(r1, &(0x7f0000000080)='./file1\x00', 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x62, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvfrom$inet(r3, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
inotify_init() (async)
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x0) (async)
mkdirat(r1, &(0x7f0000000080)='./file1\x00', 0x48) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) (async)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x62, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
recvfrom$inet(r3, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) (async)

3m37.867167081s ago: executing program 5 (id=2855):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x240, 0x9b9a}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x42bb, 0x155f, 0x6, 0x5, 0x100025cc, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x6, 0xbbf, 0x4a732f64, 0xc, 0x9, 0xd, 0x2, 0x10, 0x6, 0x1, 0x2, 0x3, 0x7, 0x81, 0x28000, 0x5, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0xa], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x4, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xfeff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x4, 0xf1, 0x4, 0xab00000, 0x40000005, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x8, 0x3, 0x4, 0x6, 0x7, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xf0b, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x240, 0x7, 0x5, 0x0, 0x800, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0x4, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0xa6, 0xfc, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x8, 0x8, 0x5], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xffffbff9, 0x40, 0xff, 0x5, 0x7fbfffff, 0x7, 0x0, 0x10, 0x81, 0x4, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x9, 0xfffffffb, 0x4, 0x80, 0x9, 0x4, 0x463f, 0x4, 0x8, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[], 0x214}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000"], 0x24, 0x0)
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0xff}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x7fffffffffffffff, 0xfff, 0x0, 0x180, 0x1, 0x9, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x800, 0x0, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
unshare(0x20040600)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xc1)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000000c0)='-\'\'%\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='}\x00')
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r10, @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYBLOB="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"/305, @ANYRESHEX=r8])

3m36.89785627s ago: executing program 5 (id=2872):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r2 = gettid()
syz_open_procfs(r2, &(0x7f00000002c0)='net/snmp\x00')
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901)
syz_usb_connect(0x5, 0xbf3, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x18, 0x4a, 0x50, 0x20, 0x1435, 0x918, 0xe35c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe1, 0x4, 0x7, 0x80, 0x90, 0x4, [{{0x9, 0x4, 0x5, 0x3, 0x3, 0x3f, 0xac, 0x4f, 0x8, [@generic={0x37, 0xa, "c5eb6f9cdb1ead84ec0eb173266117a2df55a5ca577767b7dda5aa6fb51d2835674ad4449b61a7137716fc42a0f7e458db21fefe71"}], [{{0x9, 0x5, 0x2, 0xc, 0x10, 0x2, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x4}, @generic={0xa4, 0x2, "1eb288664e6539170d8db0cf7d1d835ec27ed06d88c9d50def2f5282218eee15d2665e2cb96f5530d517120a7700aa6e05f76a6ee0305fdfccf46a437d5c82e28768b181aa8adcfc39efb60e4c910fc33e32aa9ca66ad8eb17da7cf30e2ac78cb73d1fde5172c9de03c17599aa322ab38f6dfaa39ddba8d9095cb8f5bdc4e579ffe3e97ee9f4e73eb5ff403c39db9ac805f2c383b55fb625d7cbbde6b9829a6a777b"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x80, 0x1, 0x3}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x3e, 0x3, 0xed, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x4c, 0x6baa}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x9}]}}]}}, {{0x9, 0x4, 0x16, 0xfc, 0x9, 0x5a, 0xa7, 0xd4, 0xc0, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "126ed38a65"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x6b, 0x9, 0x1}, {0x6, 0x24, 0x1a, 0xd, 0x11}, [@country_functional={0xa, 0x24, 0x7, 0x8, 0x3, [0xff99, 0x7]}]}, @hid_hid={0x9, 0x21, 0xb, 0x0, 0x1, {0x22, 0xe9}}], [{{0x9, 0x5, 0x9, 0x0, 0x400, 0xf4, 0x45, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x1, 0x8d, 0x8}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0xe, 0xb, 0x3}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x1, 0x95}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x0, 0xb, 0x2}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x89, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1000}]}}, {{0x9, 0x5, 0x9, 0xf, 0x20, 0x80, 0x81, 0xa, [@generic={0xdb, 0x23, "87762bbf92da2abfd8a12327805e3462d6c8652f6e28699443eaf5e9a9ab68627de65f47c297eb4af0fa1cca9e3420121338263b27e51ac2c39e2aa3da951f59bb099b16cad6d26d030aee9800318c1623a9a162cd87d37fb201c381259003da1bef78c49c8d8f0928e394ff212a2d06877236b28ab39da08b984d87a5d24492db815fe4e5952e289257876d269555d3cf0fbb32009db6336e5a8f182e0331e2c10f5d2a324a01638aba371561416247b07c34dd21a5a528c2ccae748a00766db3b4373f2e7fc205e8721b24680ad0a73fc26832d473037528"}]}}, {{0x9, 0x5, 0x89, 0x0, 0x40, 0x0, 0xfd, 0xff, [@generic={0x7f, 0x23, "8e6c4d32559dd66606c23f7a9e57f656662e65b4a8663316bbafbb2c2d6d1f7354d30327ad6d1a995028ebe47cc148d7ba46a1b356864eb784a954025fe8b52be3962dd3f9f1eb648c7584da1c3ebcbd9fca22d0b6725ff375b3e3f8a89d4423fb56ac1a845f9ee6077ac9b059d796f580aef8311ffd3f23726de01239"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x4}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x58, 0xfb, 0xe4, [@generic={0xbe, 0x9, "d7867437bd59396166b5bb7d4097c1c23d67ae3fe1b924dc536fe42d6fb5d49832e6cfca8ee407a7de101745ba1c8b312c9f9f723716142fe43ce1eaf0bea4a410e962a8c247273815800122f31037d00e43018912e64892b8e1e5348be808abc114d7e88ccbd316263d169811d7eb14ce044a09af43400e8f049112ff758d445e19bd07b4a692bf3a84ad3eaf9d34d01ea3ffb883c68f4c4e25fd43be1bf102a0ea35e5e1875d09f7ceee9147ef8c5dd3937acb2236d1516ac4cc24"}]}}]}}, {{0x9, 0x4, 0xc, 0x3, 0x7, 0x87, 0xc8, 0xe1, 0xd8, [], [{{0x9, 0x5, 0x0, 0x2, 0x400, 0x40, 0x7f, 0x10, [@generic={0xea, 0x23, "5b1e4cd6568b15c5f1066157fcfb9e0bdc6f9f1cd0004a6e83c08c2d7858e5591c538862f3bd3c29a3d5ec95914c23e13f7e70584baefffc5c72e6b7594243f9fdd9e66b3199472ca6fc7ed2e1a9d47d93dcbb3cf2b0eb5675f0341258c420a1d7410a2d20889b258bfde1de10d1ab335d85eabeba62046d727e9c185f082dae38bfa33a941a945033e4e576439d90d45a8a50e6199746651c16f21e706c29ea97365c38b771045b903d0981037340d61f8989cec6ec7df49a244a57b6495169fb9c371935253b0d059bc38f8481009464725fbd36e78515fb2f11b74618b6a512a9ce92369067f3"}, @generic={0x9d, 0xe, "eeb98c255c03838143bdd90e5a8d29b3046a1f05d2d38c40aee784329446f3e16263981586b062acbb72b559881cf8de2f4edd7f2f09b669300950f771ebbb26283136c239e2dc1a881789f8474073073099f65d9255749c7efa198b811202d4b6ca078eecf769235ff771073a3afb907e0f212439d98ed99d108d0b98ccfbdefb10a371e3dc06dcbc4cbf1e46bf108ded82623d2d9e9074224716"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x400, 0x7, 0x20, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xff}, @generic={0x19, 0x21, "671c41afab2108dca2cf0b6c8e31de35cfb35e564cbe4d"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0xa, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x72, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x2}]}}, {{0x9, 0x5, 0xc, 0xf, 0x40, 0xe6, 0xd3, 0x1}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x7, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xd6}]}}, {{0x9, 0x5, 0x6, 0x3, 0x10, 0xa6, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb, 0x7}]}}, {{0x9, 0x5, 0xf, 0x2af0fa0e2ee2ce19, 0x400, 0x10, 0x7, 0x0, [@generic={0xed, 0x0, "25d6a4b418938678ba2e13993c699dd90a4778eb9cf131ca67f32e24a4e43a288b9a86082d169b7da7e5dbfbefb7a1a8dd207a1b405f559bbe47ddf2891d731a4ccbc7c84de165e68c76c34af96ea7737aa93c10ce6a6ef3c9c9d9c6a2778876f1ebea5f68cf0788894c8f418589c6d2ffb99f6560f0b9691e9de1d11c64a2caef0f208a7facb80283fbeed84f54d2915846f4d8cf8e484f35082312a5f2c18a18270e7bad79cddf1ad789fab67525de9c5bfbdbed781bea20aff120a44e496846ac790b3a8ec03aa12991df71d1e902ba6d0260c919e700957f821315df9b9c07979085b537ffbcf3cb32"}, @generic={0x91, 0xd, "72e7ee07b5646ae0c20770fdd0aed06c00309b6cb66decddfafd25dd3ae5527534283bda9d47b95de755cfa9045b55f2d93a09af46dc7dd73eec8e53f45dae95083f51d65780aeb8f1e62276101a96d80f14ac2763b4834bdb4547848f5cfb77e9d1298435f1f905f4282e3e5ad1d1f6fa5db45c1e855e9964767b1c0964b2b3e4e3f2587cf75b51afacd12f2fdb16"}]}}]}}, {{0x9, 0x4, 0xb7, 0xbf, 0xc, 0x88, 0x59, 0xab, 0x2, [], [{{0x9, 0x5, 0x7, 0x10, 0x10, 0x2, 0x2, 0x6, [@generic={0xda, 0x1, "4ad257a4b70117bae2a8ed9ac8e3200b8905868c006708e218fc854daae2056404619b51c5e247e3235d2306fbe2c1941d5bdcb443117107e13cfb20994ee0dff74e2af5a3788d7bfcdfb8ef69ce84811845bbc8e806db38f47067ddf072aae2444f08d8567e4a0982b8e8d07e10210f45d80d58fb86b7ea48549d77e7cae085f5403d976737e19035fea042bce60067a9a96a47d62ddd145f62a014ebb72f0aface829ef483361eeeaa6601b0907c57a23f640592415ec50748a14abc93eb8e7fc312b4823d49b0a3a8a3eabbe1fb7f70ff61d35640664e"}, @generic={0xcd, 0x1, "b1c3dafc2dc82e746d03b54931026fee40c684d08afd30f0e53dd5c31af3925782c0b9adb03317627851e2b25bacd41fe7e53d8add8ce2628c0029d3da74a8a3685d1dccabad070ba6d8298ebe66875d892a15371a757ba317dfcb710ae35363ffc7e9033292f963099c47c8adbf1125b4f05aeeb25a993ab4ca5647a06c38f4ade88d5424a13a1ce0e92a016b1ce57999b7c74f340b3d25ea31482a080fda58906b116553864fec2efd9c01df42e90b6f4de2169456ffe326b4a4d5081c0e144b0add9ddae40e330d151c"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0xcc, 0x4, 0xd}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x6, 0x9, 0xe}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x4, 0x10, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xfffa}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x6, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x8}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x4, 0x4, 0x3}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0xb, 0xff, 0xbb, [@generic={0xac, 0xc, "7cffab73922f4421cdf2dc4763eb8e9ca2dc19478f8170857dde7bf92d6cdeafe8da5e13730eef4df53925ed4dd7d6fd51e516924b4cec237fc0fe96ebc94012dee3fb2ccc40a47bec57e811300342f348a5d2585c67db845e037c92db12f3a921d4ff019b4543131ff362dd7b41378547a251c23fffa98fdf955185c4b7e06413c226102a2326da7bd32c820ccbfafb3593b4bb568619be7acb2809e34c2d732e30e7d8715d8285f758"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x8, 0x5, 0xa, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x4}]}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x0, 0x3, 0xbf, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7a}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x81, 0x1, 0x9, [@generic={0xed, 0x24, "6cf8b7f4fb7feb8f8c4163e57c35d0720cbfab313113ed80187956bcd67fe427fe5cb3472a216c058de7e3459b7e1ff41a3cb61766fd64253620e2facc8cd9c89676802a2a8b35b8543cc213db3e1e6a8425716abf85eb5cab8545f1c403b908b4171909253d3c481959ba20c97b6c2039e3800a54de37bddff54667ac5b710b21f67295aa24bc1610952d2bfaf309abbfceb2486b9c1ff33ca23add91f171b6a2db0536c2e3d991132c6ef3a17c3e97e0b7aeb778954ce94020462ccfb9cb2dcf78fe38580c51c030d5d81ea7e900e1b15aa4060e7f86ea379ab1fb132cde552fefc4dd86f9d3b3a3e0f7"}, @generic={0x89, 0x22, "a05dc3e37a24368b1df587db19ce13b79c58102b5a976b1beb4bdd65f0cc6131dde14857c28dde277977c881bc968c7fa9c71ddc2d92f65c52e8a3c088a3eab49b595b25aff9d68cb59ef8e6fa78783f32aa421058ce57f4e2fb68d11cdcb569e307a5cc6d3d9bde13d61b3ec8f963bbc3f0843dccc1bf486c02ee26e0e330eb458c320936444e"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x5, 0x6}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0x81, 0x9, 0x60, [@generic={0x17, 0x2, "91bfce427d61ec527545845af87303e70511c4646b"}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x8, 0x8, 0x3, 0x10, 0x1}, 0x144, &(0x7f0000000400)={0x5, 0xf, 0x144, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x2, 0x1}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x8001, 0xf00, 0x2, [0xff00cf, 0xf0, 0xff000f, 0xff4100, 0xc0cf]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "705ed46e4bd42bd4ee48095787ddb564"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "4915d65919bbeb215717a1b082fee008"}, @generic={0xf0, 0x10, 0x4, "4f3edaaf42771ce55bde24c26f0c56bce4897710b2c90566a3c8263007fd7b058446270d408a3efb86bc570455ada4364184eb358ee428c0347fb7b05bace1cbef16d7ac53956449df25d2b0502924942202c0e893a4d93d824e77ac8bf6f1c2763313985d109a5f9e57c193a498f725201cf1c61f8f00a7e427075fd777bf08efe81b7b0be9600f8f8b3631331d80c1feb546da3b9fedb49f46718aaeb9b5c237d61af823ca6324d7064e5d0ab30a974ca16a65c2ab6fb910f133d1718ca7306daadd3381d4f68d9402c87558b7d12bb779f7035a8b35c303d4f54a1e7e7dac4e4e72aa898a9c2538a90bf9dc"}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x414}}, {0xb1, &(0x7f0000000140)=ANY=[@ANYBLOB="b103345a628b22f1307044877dd08484bfbcd4a680785b113472746c19cefa6badfda905ff78cd41f27d77972dd10292dc053bca1789c015ab116ac6997cf9bc3ac8ba98d6a75eab02b7298ad22cf6df07d93ef3fedcbd18fad0d9f76f23e0fc7980e038c180433a78ef1b47b9553453d7fd0bf2822c20b7bb517fe0c995a6c7ad0c1db42f9656ff0bd2a71ced6757624690b3cb83e5b2855088aae7cf0e959669ab63405fead2c7c796"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1001}}]})
close_range(r0, 0xffffffffffffffff, 0x0)

3m35.190931683s ago: executing program 5 (id=2897):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20040, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0)
r2 = userfaultfd(0x80801)
stat(0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0)
r3 = syz_usb_connect$cdc_ncm(0x2, 0x86, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902740002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000042413060c241b02000100074300000508241cff0f0005000905810300020000000904010000020d00000904010102020d000009058202ff"], 0x0)
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x202, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000100)={0x897, 0x0, [{0x0, 0x8, 0x6, 0x1, 0x6, 0x9ecb, 0x8}]})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x3, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f0000000280)=ANY=[@ANYBLOB="12015003020000402505a1a440000102030109023ba601010020c60904000703020600040524060000052400cc000d2491715cc566cf0f0108000000a11d78fff10905820210000c09030905030200040f0405"], 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f000001a000/0x4000)=nil, 0x4000}, 0x1})
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe)
r5 = getpid()
syz_pidfd_open(r5, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x488a82, 0x7c)
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x24020000)
r9 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)

3m35.095280285s ago: executing program 5 (id=2900):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000240)="26b2a8dd3bb50b8ceb62f430e5885746b5fd58b5a47a2bf28b373c8660a05cf8181b4b7a61b8ce127e9a2c0e92dea9379d5ca6b58c15037915bb4319621bdbead01cade5fc0535760d2286578af05881b83e2c2007508ed17ff1e44b5f91fd57e1077aaaf77b6741f58c4e426bb9b1ac269ddb81ba7c1d6ee457f1bb8ceb4e8a69db85ebb1df95fec7f3b5bd95dd726c920792e9a54f1641d5578f4347df0d583f76f962383980e8c6a1c123a70212d089e9b35900b052f0ee59eed7cf1e133398f5f5bd78d5c9820ee007f32894a57377a97af57c6d6dd108231b10a94c67f18552a65b870b7a9afcdfb72b57b81b1e424f739df21dfeebfaca906901b2626cfa482aabcc62b510255ee5010b4c1b260471011275c7f242659df63a8de398c2b0dfa67422e519853a439752898451f9f02defd4ae71ecc8aadd28d21a339d35cb425e109a5452d01d1ca2fc9cd2572a1252582d4b179876cc489b1b3fe4767d0356c29e6e0b891991f1dd5acc3c3e35f9d0048ed0e28b9771295729aeb5a1e262ec2fcbb545c3e24799bc424924294928312b42be902842083b4d7383ed289b307b66c8568277b3c17fea747ee49b750d83dd7ea1f18a5eae198451bd2968f823e03a4656cbbb154145465ddc7bcdd0c7b1d07366c0a4090e4023fd98d0f77d3949d7788bf0b31c52c7704bbfd681c4691d16ef610708ad2ae5af88301c5b0451ae9f292f16aa44230e53874a432be156fc74c9690983928aff88c8d817c86913fdc8425cf2cc43297e89321dfbbba3f4f1b8bcb602a17f1f5918c0657a9e0230f2722f2aca5f2f931c8c91dca589c02a711db5b7ca36f3a49282c4ec3b447ddcbb2f94e257a384d8c17980a3962b2c7b5c0b661899fd1451ce783dfb29355650454b65479ef40a319e37e90757ec3e3e08a2bbe0b9bed99d8bb31e5d240ffa66d5162748f30635658f92d864dc6ee1d95d9b6e19e554f6a4a5cb4a067b3c7d7d882ed4f908337febfd5cf00a6fd68e95fe62f5c374399f6d3201d3482a0637ac4d9d8253fbbf6bfdc3feb9db0a3d8a85cb337dc7a1328973e20bb82bcc2ec03a637f4f29e1efcf4fec09568a42ece4ee0508a0da8206989d12e522a65e76c4d64bbaec9f328b927391f2b15c7e8b3f138ef345afcac4d566448f327f84ed41f69b4d40c8309d9d5ed6846f788198e151a48f654d29b659f923858d443e118409541cea176cda5c518a938d10086148efdecda55cd4990922cffc06633c59db0c21d12e4b311e3858e82001c24c2225844019f9d633679ee75a70521da58cb8809c193c0f3389dcf540884ff0b44f224cbe03623ee16ad37e00abd1bdda5972379bfb097aa2ffe5e881ff988644b1364d8117feb6859fa4a942260aa6ac51387bc4c9173b8656813929744af772742e69d78f5b127b3ec8a64a3781a603a56e05eb948a003e54f3095e56899dc6413c4317e12141b3409ee8d33dc77ff33b10c5294c5e6b969848dee370c19e732f3e75a6bf21ad433c99d3978f8a8254fcc589eb067e3663e6179cd7904e080048565f0d8aae47d0dec7830d5eb48cd386ea8ff0cebf7bf86eda674cabd0d06f2068817d1d85f39bff655bda536ca5d9727545b8202a982818c388ab0219021fdf4dcdc5de8731edb03e9170a8867b614e5317f76f44c33563fabb73eb4cf8a766b6299e52d00646262e6e7704748a35322cdd7c52e6bae2654295f7804f68e807d5ce420213a278b751b360bffbc1bb9a027b98e65e9dab8fd143e02c2e6192eb8f411d80aad0fa5ff40ced48d26e076cda037ffed74f19b1a35839239b5d14e57fcba05aad705435f998d5a85c05d944bfc472ecda2974332b9b44c448365682d00e271f0fd2a436057adfb7b8eca4abdb8c1329121d6dae395dd1506a95c0de8191bd69cd1f68ec5af9a88fbb1a37c082b9df5cb390379f2db48c63e9f779b875ef9891a84181900bec4d6f512e4633f6b43b6abcb87e2e72f74d8cb0ea3019860339fdcff45dfe7e0817de819eef61d6e91b05a6b8ce8b0e1416e0210813429ff7a75cbd6e7a8f5c1e41012f8b092c6f0b45896a3de1a278b80104157dec7e210aab22aebb54ec881291fee48bc1c413f6a0704e45c1b00f39d4618147e4e11f429592bc92044a772bb33349d3ee4b6c2c5a5a8fdd5ad65434943c3987be2ab99807e23db8b9ec30a3030be076b7871c1bc7a9d4506f3a1e7b986d2ea1b60f9240db71a360c919dc6dc24f6af5878efd95d83f5a9529266f2fef29af2b60d214b21b6e3b8e5b3555849453f66e3b2fe46c2547690b745cf6b850312d825c73049a9a009d66d0d58801f254e2dc32897d9f3bf6fc3fd9ca6fef5d0f0dc55e85a99d735d1800f418010986d80f04e7f5a37109b73432db749b569966e781e646c0e373c94d7797960e1b73cb6cf58ffed290c567d7b5dc54f7a9c911d19fab72aded28cb7c063c46fd530b6ea9efef61c4da2bd5bad7d317743314ab01046b0f92d9d428a13bf5ff427fe25bdce29637f916b2da55f2f5ff05ea17002bf139a5740b7f2b60d6048844cc3909c76eb9ea0735ebed9c201efb8228245373c97d8c565e1ddb4c4d07c1ee7e3a942eea3cb88b2b263a0e4eef9b5cbc99f0b1fde017d01b15820f55f51d325c77c298b6973ad694b1f3bd5440fe8e8ea72fb10b53bbfb84c7d2b7be416df5cb60ad3607c71b387687752a119afb71cdc53b8a395e0398a5be4ac9a175df444ea715fbb2703911bcc6867a85ae2d76d25af06ed0e3688660dad6d69c1f356d43e655811e4169ff9f3f275a8417c44a9b7f5cc3e6ae05ed6a226da85946e84144191b4018d2a226e957e583fb34af3d4bdfbb59da087565fdd7faca17d652208c129549f16541f8addf7be170c6041459600364f025362ea0726f48cf82521d47eb478c341da8b0ba94e96942787d4046d04e86b3ecdbf4b3579aa8f00ca70e132609df358d9183f6cf6b200dfd16fac3e0bcdb13cc5bfb20bde3cc139967c70fefe3c39f484c442b75a5606a2b4952c799b04957e151d3dd76eeac764170a1929a88a668926fd6c22e9c2327f85fe88d388f4eed175a5c13e82bd6f42a7669341d2f3012c75c9871e419e0f3c7e50e347856415b8584eb2d2a0214d5bb03b10a26505ea9ffc7d5aca844e24af916eebe7513d8dd9145049aa0dd8e2a5a9fc53cef6239f56f2ba429601ead8223b5d89e5326e09f9d7c409a466fe5781435b9c324efc040cface76eb40b2da68b71a8baf2f916303726256c772cf27806d5208724cdf9f4eef7c7f3084a25242479fbe759bde637a7cb96d98510f0a68876d04cb47a3e7614b0b51f8812727b0881da22bf270d4a44206a581e71a7150c4096dc1fbd9e724ac572adfa13d6c2129e51df101bd5fd45bc57c356d67b65f270168bd0601e0241e887becb130fcb72c398c6e50d5123f5e8cef49d7ae92ae8e7de2221677a8aa6a285824ef679c68f87330224ce2c11299878adf4f454d510fa4286f6110dd9965c189c21e85654d44992593ad75bb264fa4c9c7f600224b8eee14e6bac1aa0f9c9bc8c10caee2826cc6d8a787a9b98f908d062732ac0226268047fb44fd950d8ae380620c1f594a68a0813b492bfa3a8560dc1458ba84ddbf9b58f0f7317589a36c66493d1b1093c50719fe4e7b3a7f9dc61e961b0a36b0d65bd14029ad5b9dacdb4edbf090c2455c6c1af080e5447ec7aad8d1a532a48ce280decb70918738b3dcd49d3ffe16e1a2099f7e083aec3a97866e51d43e2581530e53d269c4ff2a6f576ecadc018f4e233b6e7da57130bdd369bdf5973031b7280d7bfcfc443dfb578de9d60be87e741e3aabedffd7b46e6a1c342661b0a122d579623e6e86e745e6ec3ee53545e9a1f63c1db363f68ee2a693a8f8bcd5f97c575db2ce1e03fee213bbd7a38a288fb83a07b1adeb99932fa55dda4b7e6be199f8f008abaa88c63f59179b47c541d8707709c7cd5f5aa5ed5c4dc63093596b09858952e64133cbe6b7d02b60528d6a263c9b72aa3e751a99e9fd1664121fc0ba9018d61011edd23d29d05c2080e33c721e503113be23973351a68fb5da582205a0e89e69fc84e24f3d4e8629847f9b6ba77e2ffe6ce394f99b1a94576c677e7433aa8bdc4d9779cbb706c6e2f426806d111173ffb0cd4f7be3ccffcfc9e66a16ab2806b6118ce28bc935624f1cbef0c9c4da396e6dc0e87ff20d0fd0e07d49327d8c0c97c7d70c50b584fbe563cde1cb17f36a73ebbe6b331b6321ac5ceba510a35ee913c5542a9d7b12805a29a99d25a5d3bc13a330435d6f0305bf522cc71e261c39d82584440d47fd82b9b31ad4ea0d2922558e6bab6fb6d3f6da9eb2a2e824af6928ee2ce41baee61fd4b5f896bf92bb1cf06c0c5a1b9b81a8216084c8e90451823d6be884a735a2be130304a22d8168c06db9cb6d62ba30079ecc831952f2564b760153311226d2188bc523928aa63223e785e6cf67a01962eed4195d5b06f06f272fe27d38660153c1727cfb438b5d98da5778070791c5ace1fd3ae756c8f261ad9d1c6aec5722a8e0609c3bb672c628879b65fbba3692070781c13bd34a93a5b9fff4f9ac4cd6aa3fdf076eeb4c0cfa14d2a41193e723d6d013995f34c97bd5d438eae8ca9a8a2dfdadec39c84c11cc9e9506020e072908178a6b60c53321c0b857d12b9adb58d90197c090e558d20a29bfd9f2ae297c23f47a544daa537f5780ec75b1824be5c92c20785499143252dd2f6d1f8aaf47deccbabf74ee0d55793b046aee7dc763353249f03cf2f0c60f6dd6ff082a051ffe2c8ef4ae9b1d8a046af67ffab68a4587ccd0a503906cca13aac0b7309d5fed12abd5303d2803f928651b51dd8747db79c56c3e3f89e6799a9dac3a7c57257c6575e133379b6c616dbab839b530e7ede62dc529acf5a6fa061fd1244fbc82d6e883388291ecaf1130151c8da538f8bccb9b871d2ce3417a9212ad94fe94c6e13e06975d8ba285d7e937ac4c6fd89aae06db06940670463d6b86a18856cc978a49f7e407f2e4f042d7ee1b7791cb33697824c68b2535af6c803e7940512da7db39c98ed1030e615569c200bc3ab833156187c25c1f659dcde3434f47a8cce56d821617c58907f80d5628214a0a8aad3fa2087647d52ac1c9692c6b57b85d70cd12875f110e631f3a9e34f21afc401797d9a13753deabb43fef92d691efb19a7120167f838d283fc5f2f1d7b4c2ef736fb1c8a47befcfd320f98461756d6908f00cea4a252733db78b6f67620e1a209e39f788a8360b8f42ccf1776259c6f70ef7ca2b0ee8caf4bf27017730236669eab62ada6db1d381ec2f8c60bebf555425bab9fa4d46823d3b0a1b1f51add64961aa2a073929116f02ea230bfb354019e47800415edeacf72a7daf8930c64adff306aba841fbe75bb18da73441721c86d3a70f9e6025e7fc95516703372fcae04421b08d0edbc5f1b6b6a3c66225011dc19f575111180e8d173922c2e28123347036b3ff2418dd529c49beb2e335801a3a5473c73d71d084c8271c10d86f283a659deaa57fff6673519645e0ee4c915cc3b8c440584fe222b1bc0cc0888142b9753ad409ed41ca16a92a3126ee73f7237523c6c781959fd255c5c0dff4ff324dc3e2246da77281809ead68df57e4ae6c1f8001e6d292e8e42f897b59770ec26b508ac5d57b47ee9696f9d40ceb39f9653a14737ede3f3213147381417d9633d30cc1107dde46e5ead6e4e4dec617202e10b9093e3bb2dfd785dd96a6a64f44bef7465552dc2e391c978c7ac1ce2b8f774d7b3934d15fc6d96eb3de6f0e9402a8538c6081712e5affa5b67b4153217b38f3248b2565c804226f4a31688d5fafacfe2e4fc191791c7164cfa33a474f4a9cd90fb5f37f5268e1801a2a762b00e8b7b2bda1db7a90ccc74ccc0fb015eb49a6ed0236d8b6b0e67bcaeeb750a499cfc3b2dc34e9024ea9bf00e5f0013a15509992979b50617dc14aeb0bac46c6961eca1e96ab2b45d342bc68e88b765a79d73f1eec58167e8ea4752981fd898f1ce528e9ba947723bd4d2ce228b6e5787227697d52f2bd0d4ecbebf5c6164f5819313060579ebb3ddb3c6423adb999975427c2d3da65b3cf52849c75464b46ede138be670742b175474222a47755f8006d4752b6c271643aa622f8439903abe53595792e7856a6e5a5e1b309fa139c2e64e927620c87aec8f36b9509c1d5cdee296bdde21d2cc54e7738070d93552d9ecd799325fe6fae9f3d7046ef1459d401922e3da284b7f6ef67ae196f274f6ce94887bb5ec25c0101618d6118b4cf47e0dfcb8dc89e8f44b47ba19c326db51a75a5b790620a2e460110dbc0f923a7d3825e4ac1d04597c0693fd05d93aabe907b47b1581f915de89c16580ae484f864e583b43ddc0991d716e401f60b6f62ebd52178a9e0adfbecc706dfffe8eee93f67ba2c9da4515bdfffd764741527ec04c3503da653271f2051ddad922ae38cae98c9a2eba5f8470d2551d2224add25a32b9c4d573f69ed15445d2b72ab20d1cd07c2d897dd7c97edab293db9f217a5eee5de9ad08da2f734e617b9f5268a3b91336237f5e9738a65f4adde4279eea09ce40e577b97eb5c67772e4ebee5a33afc7de28c70d97a514cdcd95908d26ad62800900a7cb9dcb88955b5401ccd4d965d00ebf0da48bf43cd2f5b61331894f523685b17beb253c3f50db89e11e664d6427a2551b5bfb2cbbfbf1e8240909d5eef23ccfa23d185391713d1205078be21e99063ff6316c06cd77969dda4d7f3350d4f2f29a23f12e14788fd60cbe4c3c00685a5e42b861597fd3b70c5e0e4d9f02355b754bf353fa2bd5dc0225080c26eb39be11a5b3cfe5264f39399167ab55ae7286f09c1d7fd0fc69bc9c7fca34867b5bf11c43612d3e010d2918a0d9b620549402f2c56e9cf3aa53b7614337f0867fe08170ffb272c5d340f237cdca3e023d2e65b250acf4f265ab8794a5388c5358d7e1cccbf82d99dd1aeba50f3363b9c3b6ac43542334bde8cf2ffd29da1d516bb5d950938f410829e2e37684916e1eac5c2ea1352e7cf6d0bc19bf16bf4ee61e44cd339fadcdf18126c46c0aba43c927510f3b876b32f606bfd2f657254e9715f8151099da8897c287ec1eb9077c72a0a31171f5e2672c16d3907caf659a73a15ec1bbdf240cf5796c22a99933999dd36ab3c354736b45b990e1631be048cad72829f782504ccff0cfc2e1eb5fb3e52e9fa4c3a39ec9ae7ef7b4b9e7e9a721a3f6addace5ca68d525ab9dc0d26b05333dd638bba4e40ec0a716b29172fc84a26c046dcdd0a744af3a7da0eb295a6b0d2a4e45bd6222464cae11bdb5a6c02f8ebb9c8846ca03175d4cab8b9c9531ae686029cc740c296feee12fda2cfb130808a3fd435c13bfca388ab530b8c4b546c4fc9af86596daec4569b5e82c8fd452731e27f9dffdc5713562b99fde6b59948a46f2a44ed0e539469040bb04a54fdf390f589c6491f1057b3d44573838dd2a1271ef8ccec3796012d2debeddb9dd0e252bf622f2671d6940f1c89b3ae38b4fcaa37103d96f4504c5654e603b80f710dc575bfdf2f4fa01741ab79057c15b627cd03e7dc24aab3ee312dd1d7e96731c28e24df9b051fa5972615858f07572d07f6a6f947fecf8acb05d220b68a4962b0bb9e2bb6341b97b0bfb18dc92764ceca8f723592c02104a020dfb9ff06bebc81ea80c68a1fa6175ab4042abd3305c1a17b72ba5491dc812def91672873fdd98632871ed0387e00a80c173b9e8c75e185149d32a9945e2f9707301c96337cd1c44cc13a9f38dc23720558c31c4cf6ff72559794c04af4deccbeddb04f267308e220963bf64d0aa830af54a91ae3ae0eb1aa3d48dde97ddd0916e3c16f4d90ef3e66f06f8c4c3d4fcfe41094708f49ac8d4e7150a74d9378a75018dba062fd1ec331776aafdb64e5e1732ab0f0ce0bd8985ec4b1374a6245b6d714a1c02ababcdc1fe22481a6ad3276662d4c9adf65e9d275afa6d57d6c3bcc6ab68234f4a1dade56c852c86c0bb4f427387bc9ea23e7361b7f518039af614141a12499b9602f95e2a969c7f31cf1056fe3b1954ecaa3db219f546a28e954964268be0296ea2765a8194d88b14869d388996d645f34511d63a602d92e795a0b29773052ce44b008556b6a0fb418a9233ed13edf3bda3db479211d00c16d40ee6321241d884fffeb3c1e2c01707c7aa387778779a241699ef4bd5d7cb8e40986539d0778cc242e98f17e630a09d62155b469ef5dba920d2ef80686c8f9eaf1965b42935d6dc470de7fbe0f5083a4b6ced2fa06b255fc35c3325bcc57ae3ef95ef58edb0b45bbff699de88afa565ab9f98b1c98255dfd6bd3eb18af00b94cbe5f94421b2828b0583c91e7cecd4754003ad8f46a206da99e75056705f9cccc481b591d4c33d96b21acbbdb4e70dfd9b6a2fccaa6a0af7f97fca9da759e62a6fb222341cbab0c808d320ff13a5989ce707aabd7f7c569b3e22e0c91613c483c136fb5b94ff7bdc1f51cbb9f5c46e4b62a19cca73057b78d1f3f8a9b0e2a20b8b8d9f2e8d0459df86c18353fbb3cb6e8b804e28dee571349e16b5df662cdedf1aa5a44eea00b778bc79c16138d85fab98c15ad9f2b83eebdb9432634280768397d2895c10012da8c6659e02295cfa52d6d06ef1e6ed0546d46c676048e5a455261659c83492d355eee56596e520962467fa8b3ae99cea9547d99a6d6b674682363c0dd5c8bd5c63d3bc2d45a94fb4e090ca27028b29a61c53d96ade29f1c60cffb5053b494dd2d7c7ccffc7006e16eb2bdcb360a1e0a3fa1f380616d0298e315808db7ae9ad16b6c4bb7dece5c2c4ba52d514f7fdc9b00e66302d1b6c6a7b5b58adb313e0cec67448238f66f69dd480d304a9831833a1b94f8109c0d2f85e646077bbaf140f9c7e72301d8e452f13711be18bdb48e2f0031c38da789a9e4161b7f0a6da09075414aaf9984ab7f141647c532e3b2530f3fd8a93b4218ecbbff44c4a58cdde1f9d89eb60ebe8033dc10116cbc09d4903bfd0830ef8b0d33572ce61bc028133be720544872e4a205fed6b005e8ed240ceb6e9efdd313b6eb0aed6bdcd335cb1765f2d7ed7f1819e0c04a8989183abcaa3677c35c33d95b139ed63f9f67e51386206ee2a3ad54bd4312b1178ece5a5a76eac9534faf2bb8c7b5105811a34a110553c63f1b9168ec5758e39d1f1baa4fd3e8dec73026c08ddf1568fa04b1a36a98055b6912f4faa0741e0bb5f063dfab6e6a8605b997affc69369980188967e4655c954d31b3ebea8dff5face904366191f0695fd3ccdc5e82c5982243e16a895f8aaf9d63d37ee1d323b296862ad265760a392378bc2ae5d7b75039b77aec33aa00c134f554ca9e5fd162296e915ccd359976e7ce4099bcaa5494c8eb6fa4da2a2e245920762f3639fa4fd4eb0e5e167a5f2111bfa669576ff3e0711a4ad78d2f8477363b03e6a13cd5b479817a62614ef613ac2b03a340114909c7b21ee93adf74c2ee2d4c666f1ab8bc43368e7643f3ea8da5a919b1e3078875228d2b519387ac49b7b9990d7dc229fb9ff0d551d3dfbeb843c8b2782f50cf8c575dec6836259a160a9a047165791d1e759c74ea65f4f9da990fc0e789bcd4ddf716442864788be6f2c5b607b6ddc7f9575b4e8375eea50e98cd9320fe736114e03aa0a2c1430d5cb507b29b388ace6ab58393513724607102a0458a458998e94d71b758df51ed4ecb6c6f2b94c31fb480745fbc6f6dc595c9558161fa14462779952982adb70d70a9f9a734fcbde17652e1a91422f93a6ff7d6c80fc92a5005bedf58aefe9bbba9d0ab3441e86b863bb5a3fdfd2a9c6f6d10717d2cd35d3c2a892f0e58545b1794d9aae993d72c215a6673bbe38976cc7d03cda84999c637aec8036ea1a23b143ed6288dcbc7d1ee487b1b6a4f6e8ef63b378acd4ff888bf95d86336907939c29695b2e0cc58efab49056f88a9027cad6d724e635f94f45f4cbddd8188608663ec7e46547e2aac7dec6cc5609e9f5f41ef26a1f16ecf6bfe200b0a955f98d9a4d41a2a268f8857670e33fbd4f076aa11c49cebd8306a4de3c86f7726fde93c7fc984079ae60e63854ee9a14162c749d7e308530c6b84cb5cafdd09ec3411cc0302c77d316beff973e3108ddb9b249e206d5476d605b7b24603ca344c2263bda8d7d3db55b9e2fcdce69be9b1ce24f8c4df129cd62a299fcbbff3309031973b5da452654c0b8ca4cf65891a8bdb8dedd20f631a34964e3bb0fa45c618861da79b259d79ecda8394061c99c661851c016c35ee8c91d52bbbc25f52b5e2f77ef2f63c764b717e8cce4d291742d5a7ef7f5d7ec1a96620eda1f962fb2448c388873f8b8abea4d27a5da092833c43c57c4b14099597f83785a31190798826f4264ba8f998cfbf7f20f9678e10e05c793f5781f8accca245d047d3be6c10541b2610c02c6e916d3db9776c6964e4519cf2e30708c954ef2492d3418c552dd9b5db4320dab8be6ac3394cb4b3fb1b9d5222c6ca9bd06aae2fef510e541db1209cde21fae56507020e80862d0b875d958346c42ebb781955ab337be61a68534281100247904b81b86aed49544c2452ecffaf6cc116f9d3c7362fc2cc390ab2ad29928b6e8bf90a4f21442fb213dbeeea4b8f481792fc6579b608e3a9c4fbe2755010d7ab3cd122de7a40a1f7780350a31d83ee5006ade36854cbc8e8c648259b29f2f7042719ab4d4d4d1f0c5fe6b717d23a5504335922f84ea8b20c78a5f1ddf6009089ea221353c01963fb8cabd3d795831c86d084660fa7f7d08f3ff15780c5b301ee27ab8d98fb358b90e92de4c96687c37e327ac1f0f23208c41a36e67cc22356df854f2dc309c110cfae51c5cc69051d22477caa1d2a2f276ccfbe907b263bd79ad4c5f6ea2687466f325ff2b1a736fff687c14d477c4c744e9c82be5b8ebfb69db2b312ff540ec8cadfcba9b609cae7e54ff347ed3d2649f9214600870ecba27f98943b4fb72f93b5ecb6d64dc1c7b2e8c2f2cf1006e39a237c5818014df9281feb6e522f6cb2d5ca35aeada09a58d5a6bdc9a75cf81a1c51faa8a3824a58d192a27be9fee5098b2e71d0d3f12917d50667415e418b790e0942260f4d2589c57aa1bd36017bd2bece963f0776f9f76cc66876c3f88f8bdbc35e329ecb56887948fd2c05d49c664509a682c6ff60350070bfd111be86ad2eee8c0d76b851fdb75f08e11fa47b5fd29b57568abbf91d3760652d475558bce2a1393688c9e2b4ae06cb072c294e1396b58db00b09ba8dbdc047a1684cca6e5b04cb52a40dd7b7f72c55292e7af0f3b8dda380d45b4e71c6cf57179247923750551ffd955f815cfbc29dfe5e0b2689eafdf44ce362b9c5864e4003326b2f183df7d39de7632bf3b2a85dca04cda08d10a5bad9ed9b481227e39804c3fd52d8a8f03288e13eb09c9075e23f82123a416e58864d95a321a719f88c8633201eb7d5c429348dfd83b476510f71808f95ab3b11d521004acc6d9168771736ec0a5f7c73ca78a46787c19299a79b453e49317353d6bee5b", 0x2000, 0x0) (async)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4)
recvmmsg(r3, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10000, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) (async, rerun: 32)
ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f0000000040)={0x2, 0x10000, 0x5, 0xc18aaa7c744b6fd8, 0x47e15ce3}) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x1) (async)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
readv(r7, &(0x7f0000003440)=[{&(0x7f0000002200)=""/75, 0x4b}], 0x1) (async)
r8 = syz_io_uring_setup(0x2720, &(0x7f0000000400)={0x0, 0xa975, 0x1, 0x20000, 0x20f, 0x0, r7}, &(0x7f0000000000), &(0x7f0000002240)) (async, rerun: 64)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 64)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x3b, 0x5a, 0x3d, 0x40, 0x1de1, 0xc102, 0x56c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc0, 0xc, 0x40, 0xe, [{{0x9, 0x4, 0xa2, 0x5, 0x0, 0xb1, 0x5, 0xc, 0x14}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="050f05000b"]}) (async)
syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0xe016, 0x27, 0x2, 0x0, 0x0, r8}, 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'nr0\x00', 0x8000})
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0xfffffffffffffffe)

3m35.035648756s ago: executing program 35 (id=2900):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000240)="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", 0x2000, 0x0) (async)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4)
recvmmsg(r3, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10000, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) (async, rerun: 32)
ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f0000000040)={0x2, 0x10000, 0x5, 0xc18aaa7c744b6fd8, 0x47e15ce3}) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x1) (async)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
readv(r7, &(0x7f0000003440)=[{&(0x7f0000002200)=""/75, 0x4b}], 0x1) (async)
r8 = syz_io_uring_setup(0x2720, &(0x7f0000000400)={0x0, 0xa975, 0x1, 0x20000, 0x20f, 0x0, r7}, &(0x7f0000000000), &(0x7f0000002240)) (async, rerun: 64)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 64)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x3b, 0x5a, 0x3d, 0x40, 0x1de1, 0xc102, 0x56c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc0, 0xc, 0x40, 0xe, [{{0x9, 0x4, 0xa2, 0x5, 0x0, 0xb1, 0x5, 0xc, 0x14}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="050f05000b"]}) (async)
syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0xe016, 0x27, 0x2, 0x0, 0x0, r8}, 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'nr0\x00', 0x8000})
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0xfffffffffffffffe)

2m35.103730334s ago: executing program 7 (id=4027):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0x4, &(0x7f0000000bc0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="000125bd7000fbdbdf250300000008000300000000002400068008000300ac1414bb08000600120000000500020081000000060005004e230000050005000700e2ff07000300f09300000500050006000000040001803e4a1b271ba738699e98581045fcc1e532561705f4eaf00b58091270a016aa094fd9823a358b082ff9047785b755226a97833c0f267bc5e9b8232125357f5376e06a66fa5a23c3d9249f50671d6eed1adac1d83d9369d073de90001f08550f278fcd21c1bebd0231549ae6db80444c32601603107df3bf47a0a7f9db0ad7a142d62966d4e891c85861ae715782", @ANYRES64=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x4000091}, 0x4004084) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000100)={0x7, 'veth1_to_batadv\x00'})

2m35.050678444s ago: executing program 7 (id=4028):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x3b, 0x5a, 0x3d, 0x40, 0x1de1, 0xc102, 0x56c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc0, 0xc, 0x40, 0xe, [{{0x9, 0x4, 0xa2, 0x5, 0x0, 0xb1, 0x5, 0xc, 0x14}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="050f05000b"]})
readv(r0, &(0x7f0000002600)=[{&(0x7f0000000280)=""/260, 0x104}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x2)

2m34.579983744s ago: executing program 7 (id=4029):
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)={[], [{@flag='dirsync'}]})
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000300), 0x0)
r1 = geteuid()
mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030312c73746174733d676c6f62616c2c73746174733d676c6f62616c2c61707072616973655f747970653d696d617369672c6673757569643d65303739393235612d300033612d006200332d370b62662d61396432356139622c666f776e65723d0c875b6512b93598", @ANYRESDEC=r1, @ANYBLOB=',\x00'])

2m34.566173874s ago: executing program 7 (id=4030):
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x100000001, 0x400080)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) (async, rerun: 32)
ioctl$EVIOCSABS20(r0, 0x40044591, 0x0) (rerun: 32)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20)
r3 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0xa2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2182, 0x0)
ioctl$RTC_EPOCH_SET(r4, 0x4008700e, 0x7) (async)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x14, 0x1a, 0x1, 0x70bd28, 0x4, {0x2}}, 0x14}}, 0x800)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x369a02, 0x109)
fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f00000023c0)='fscrypt:', &(0x7f0000002400)='./file0\x00', r6) (async, rerun: 64)
ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000000)) (async, rerun: 64)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') (async)
ioctl$EVIOCGPROP(r0, 0x80404509, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (rerun: 64)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

2m34.496349035s ago: executing program 7 (id=4031):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020400020e00000000000000fddbdf250500060000000e000a004e2000000000fe8000000000000000000000000000aad2670000000000000200010000000000c900ba040000000005000500000000000a"], 0x70}}, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2)
ptrace(0x10, r1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
socket$unix(0x1, 0x3, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x200200, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="7d0be4cd", @ANYRES16=0x0, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0x4010}, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf252c00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x2000c800)
ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
socket$key(0xf, 0x3, 0x2)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6)
kcmp(0xffffffffffffffff, r6, 0x1, r5, r5)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
sendmmsg$sock(r5, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x11, 0x20000000)
sendmsg$key(r0, &(0x7f0000000040)={0x40000000, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES8=r2], 0x80}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0)

2m34.477344215s ago: executing program 7 (id=4032):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0xa)
r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
fchdir(r2)
sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240080a4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4c2f}, 0x6e, 0x0}}], 0x2, 0x40008004)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)
pipe(&(0x7f0000000040))
close(0x3)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = getpid()
rt_sigqueueinfo(r5, 0x10, &(0x7f00000001c0)={0x18, 0xc89, 0xd})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00')
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1fc, r7, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf3e, 0x42}}}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="c0d9e8dc66e9", {0x3}, @value=@ver_80211n={0x0, 0x4, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x20, @val={0x8c, 0x18, {0xe28, "798746aa66b8", @long="4c1e4d68ba7f233aae4b7a897c34891b"}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x163, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @device_b, @broadcast, @initial, {0x1, 0x1}, @value=@ver_80211n={0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0xa90c, 0x43, @default, @val={0x1, 0x5, [{0x1b, 0x1}, {0xc, 0x1}, {0xb}, {0x48}, {0x9, 0x1}]}, @val={0x2d, 0x1a, {0x0, 0x2, 0x1, 0x0, {0x2, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x9, 0x5}}, [{0xdd, 0x47, "7191eeb498e0868cfdddebe0d62a97fb84827166064a2d2b06f41040ead1ac7ae0e4e768b260cea3346e4e31ef22d5e4a8c55bb1ee758bf9bab9355e841a0060bb9826624b4dfc"}, {0xdd, 0xcf, "1f0b7c7494f0402afad37d48c8f16b4d6848be0659215bb79b8ae0bdaac7e8ebd536c2cde121223dafcbff6f6b9555802a65192c33010c7ed8533a599d6abe1c57fa1756a0d9f6c3f2d6b59814052b494e5a3537cd3d434ae2897b0976e00443553d389d3b2da0f2254d21e5f602da6c13e68b3a582929e9971aa24d0778fb81de8529d6abe85cca2ee422e7301c0d1a03bda0cd7f599d396f21e812add427bad0ceaaaf7d4302e2e857535ff1cd5d72f8e29b13f191e2709303ac594333b29d7f304e7ab7ccdb5208085611c60fbd"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x1, 0xd, 0x1, 0x6, 0xc, 0x9, 0x5]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x4, 0x1, 0x7fff, 0x81, 0x4, 0x6, 0x5]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000050)
fchdir(r6)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000000)='./file0\x00', 0x84000584)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0)

2m34.404168117s ago: executing program 36 (id=4032):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0xa)
r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
fchdir(r2)
sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240080a4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4c2f}, 0x6e, 0x0}}], 0x2, 0x40008004)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)
pipe(&(0x7f0000000040))
close(0x3)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = getpid()
rt_sigqueueinfo(r5, 0x10, &(0x7f00000001c0)={0x18, 0xc89, 0xd})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00')
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1fc, r7, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf3e, 0x42}}}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="c0d9e8dc66e9", {0x3}, @value=@ver_80211n={0x0, 0x4, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x20, @val={0x8c, 0x18, {0xe28, "798746aa66b8", @long="4c1e4d68ba7f233aae4b7a897c34891b"}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x163, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @device_b, @broadcast, @initial, {0x1, 0x1}, @value=@ver_80211n={0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0xa90c, 0x43, @default, @val={0x1, 0x5, [{0x1b, 0x1}, {0xc, 0x1}, {0xb}, {0x48}, {0x9, 0x1}]}, @val={0x2d, 0x1a, {0x0, 0x2, 0x1, 0x0, {0x2, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x9, 0x5}}, [{0xdd, 0x47, "7191eeb498e0868cfdddebe0d62a97fb84827166064a2d2b06f41040ead1ac7ae0e4e768b260cea3346e4e31ef22d5e4a8c55bb1ee758bf9bab9355e841a0060bb9826624b4dfc"}, {0xdd, 0xcf, "1f0b7c7494f0402afad37d48c8f16b4d6848be0659215bb79b8ae0bdaac7e8ebd536c2cde121223dafcbff6f6b9555802a65192c33010c7ed8533a599d6abe1c57fa1756a0d9f6c3f2d6b59814052b494e5a3537cd3d434ae2897b0976e00443553d389d3b2da0f2254d21e5f602da6c13e68b3a582929e9971aa24d0778fb81de8529d6abe85cca2ee422e7301c0d1a03bda0cd7f599d396f21e812add427bad0ceaaaf7d4302e2e857535ff1cd5d72f8e29b13f191e2709303ac594333b29d7f304e7ab7ccdb5208085611c60fbd"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x1, 0xd, 0x1, 0x6, 0xc, 0x9, 0x5]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x4, 0x1, 0x7fff, 0x81, 0x4, 0x6, 0x5]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000050)
fchdir(r6)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000000)='./file0\x00', 0x84000584)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0)

2m28.198591429s ago: executing program 6 (id=4102):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, r2, 0x0, 0x0, 0x3fde36c1, 0x0, 0x3, r2}])
read$char_usb(r2, &(0x7f00000008c0)=""/82, 0x52)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
write(r4, &(0x7f0000000200)="89", 0xffe3)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil})
r6 = socket$inet(0x2, 0x3, 0x2)
sendto$inet(r6, 0x0, 0x0, 0x20000870, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f00000001c0)="0f20e035000001000f22e00f0966b8cd008ed0c4e279dbcbf30f1ee98fe978cbd90f01cbf36c0f017001b9800000c00f3235001000000f30", 0x38}], 0x1, 0x44, 0x0, 0x0)
r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(r7, 0x7709, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_GROUP_ASID(r9, 0x4008af7c, &(0x7f0000000180)={0x1, 0x5})
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1}, 0x7, 0x44, &(0x7f0000000380)="ed069510882c5b23b10a219ad637b02d5b6316c20d96d3821adcdf438fa5b14bd1d403482d0f657e0f35d4c71cdba052ab911759d18b8c76a5ec383fe7f535c4c49d386bd14be35753a288c751165e5c3bea363cad5ef4597cbfc68a2dc97ff230398bf1434122bb7b670b5fed", 0x6d, 0x800, 0x9, 0x0, 0x1aebf446, 0x6, &(0x7f0000000400)="83ea799e5b17e9bc4af8d9dfe1c8fa1eca7f9dad3aafc8994b22213527e81c8331a67a059ea5318bff89195fd0a16693a7934c6a9ec62275b649f6f50e2ee5cab3a295e64aebb544d5cf5816f9937ba9d413e56398bfa59e5b786ea8b9ffd2018d95cd3f87a6"})
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x400000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r10 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc))
prlimit64(r10, 0xd, &(0x7f0000000140)={0x4, 0x8d}, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
socket$inet6_tcp(0xa, 0x1, 0x0)

2m27.10067864s ago: executing program 6 (id=4119):
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
lseek(r0, 0x0, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
pipe2$9p(&(0x7f0000001900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
truncate(&(0x7f0000000240)='./file0\x00', 0x648)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x92)
read$FUSE(r4, 0x0, 0x0)
sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x110}}, 0x4000)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x2710, @hyper}, 0x10)
connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
connect$vsock_stream(r5, &(0x7f0000000340)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r6, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00')
chmod(&(0x7f0000000100)='./file0\x00', 0x24c)
lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
recvfrom$inet6(r6, &(0x7f0000000000)=""/114, 0x85e3dbeac2ac4db6, 0x0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0)

2m27.064531271s ago: executing program 6 (id=4120):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
r6 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "d55104295b231482655659fe372d803695a5e16a5208de8ad7ec7ad6d780ae6ac89be5dd8d480e18df7a4b8e402cc4c12d74fde4f0b8a36ed948996ff8e7066c", 0x29}, 0x48, 0xfffffffffffffff8)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000)=[{&(0x7f0000000e00)="9715f3d23af836aecd87c8021cdb7df61e1f49f7d5c66c69eea7a98611397e4bbf7b51d4c5082146f6f35a11255975450009b9f2ba7111075e90ec0e4dd428b2054f1e9c7beb5b8cd4c8c58defff1e0f3e4a25f24b22096e023d9d7d0fe36a78a19d91de517a66e97619ffc40f726bd4937b504899bfaaf5bb99088f9adcee4e5c361631375e72e47682034ce1f5386eea004baccbaee2545a4380c8b6e83474070465d9749a4786f3b53b334169e10a849981f290931835c0d44418103e69ff7d7e03a2f4598a80cb667847bb34bf5dabeabf9419ff33ee6ceab67bad2900a6a59a4b1a05e45073afe69c592feb5655adfc9a48d2dbafb3a338f752656f089c0a289509363a79993d68a2c21bd60ab3b9c0ed8b93c757b4dd1653214736500b213c430e965aca5e811dac0f12f5511b46d4a86bc7a602451b9e1262608918967462a8ec7c36b7cfce77308676f35b0b348e1c4ed7684708a091c8f83fa9a02283f84e2e2060cff56b7fb591757305cdeb749ed230799f805fc10ad594f1df8e95ec2c2aad25895333b692a6f1f464c542d01f5fd83ff7eee08d7561c72ca13c3a4002c9fe8cb6b3406ab99ee485e5701a868917eecf42b9ae5d161fd93f16456080e0af1cc2d9733f98bf9e2cceead6ea3671e5e359d194b0ab54abe0580088f67427a5667ce89612645d2364d2df98d5c65ffb1c240173201af96f64fce3196c4092732daafdd0a727cf585b87ac2bce8006b96afefea669471d0d2a858d8e59dff9e3c9b77c02a62b7dbb6bdacf854e8cf3e0e4b03e5da15f87c019ffaf71b8d4ce87a38b95da3a8057dc57dcb324b7883264c01ff3e5b6144dc504b5c2f321276156460e1715906993e5d3bda0be42cdef24f58cc9be9d1505c6caf4bfc4483d4963db51bf9573b9d2302e0a36e0974edee69bbe2de8e41fc5df7a19a66a15606c9b4a34cbccb6a51b6560e53cdf8760324deb08fbb9f1dee8c9824ffe870eac64db9154b8b9d3ae2126924413aac1b1c8796fc6b8940d48285a7b1b1c460d0068a844553d4716b3f836a119c6eb894220f35348d043da922d140c9947e69d3ba0d39563abf5285b4e3ad8450767b2ee33230745dfbea4ec3fdf97c4872aaad122fa12f57fc90de28fd841eae23879187312e2fca5e9ec5ca72be46b81742099a6f8c43424ee443eb8b7ac6f555d6d521da063533e391231d3bd4b5f79bd4c4c92699e39b9314d58d7689b0e697bb30eb3f51d9dc3f42be38adb1b24c8c1fa85db867ec0eb4adb4a2417bb1c100699f1a8110add96da34861c33b947a1ab43403b5b1d528efb5f14a53cd3d624daf831ae4404923d6c5d7f9e5a0e0108bfd7d58e52adbafe6738a66f5e3c881ceafcac7e955431d4187bdd83b61772d2a996eedb769ff91aeb4b9fee194edfe05e172d6041e83b431dd58c14bf624256002b8b0c1f7f0afb11ae9431129af209626c27528ea3d81d59523f7b2779ee8b68e8929e4fe6e0b91e57648a6cae819b71601cb70553e4893075618d70304272d9aca1bdda8fcb93b84d4a800cfec304563b7f95c31dc6a744083dad1db38f88c19dffc64a4a6123e560e28a2f45f88b483d5306fd679de022786a6602ee289dc25badf27cac9aa06920a99ef5b5ebaa174eee66c037bd1d8caa630b3d176b8dc8da67784c9d9fb7d05b8c63730f6d6b583475a4fb7a11384410add9a9f296ca46025a88f4521ba7cdd5f1647118afc04a8dc7f984df77799b7c3e6c3a52fb4d6527460f59e613c648d14e0db2c04e526af875d57735cce2fe0b117e6832f449f5bf83c8aa75b308fac3f0f175a49f21dd615dd9f7277bc4ecef965db4619879170ed102e4e25c92f00774650d6b8d984c19b10c0d159f74c6667fbe0587cbc8a872c9c4fb5b902ca0e36e972e89f72dfc1ccd941122600e6d4b7b5f8ca545aaa191db532b26c8bcd0a057778563baf73bafd023cd90291fc8d2a0c121f3cc22361a604e19f2e767ed050843a7ecd16116dbcfc0d47951838cc5c8d48361375fcab0f4e62bf55cac61ca631ab7ad6cc9fa1af807db9fdcd9ca022f4aaed3892ab8a5c7de43353342859de81675b75b127d55b54fa6921610d3b160cc8096e070bbd0694e7844cac254e5a15628566301e656d05719377deefbceed81c7f961f996aa34d1f2cac3c74213b04d523f57cf42276ec7cc3db21f667a614b0076ac5ff9b3efaf87b225e2fd925ff5993c7e8276c38d665615b7740dce8b2a7d7f3e372f3bf427ab07308bc06554980ce5682adfd5d20aad379fae012cf82dfa71dff8588728ec141c1d72bc017d8df97fafa817c8e36af60344210e0f1b7ef074ee22dfce4d2009ad4947762c5c0d70a38f3e8352d165a1fd7b17dd4e937874e95faa0db899a9509f0c0ad1d746d4d246658d9a4a46b703f29da1b59f7880ce47362e67fae143513cc3c239ac8c5e8fa75fd1680cabc446e01556bbf003eb049d551e6e2b4732fb40327f317c4f55826c40f7bea9372a863661576cb8f0de6d94e42bdc4dce1df5b9ef4d4a873161903465ba2d0c4f304b040207d8f0ed5a3fe8099ed29daf6219e8e47ff557dfd363af36f7ecc1ac748ffe2bc15e3bff9a48958ae3aabcd3e74d6adcff455bdc3deacbd2a92fa5106c5c77e92e96d1e4bdcb012e5de9629e7c7f60409a71f11e6dd29992bc59b56120148fe00962535e31ee91f9c6b6e9cac84d52953529827428e97e0d3a3b90da5b35a8220faef6ea61943b6b37b04c17cdc0322a1bfb4be6c1016b175cc7db4caacbb1ae7a554c36d37a18f1071f769d71deccae6d410c16fee3883f71de381daed37b5c8c94d96eae525cc995ebc95ac5b62e47025bc333abd8d5ff6cfa3dec1bac4dc3bf45f951d2b7b9cc0ba8b38f621fe2e2c322d0d2a88cda5dde46d555a9bdd192b95079d1e034195f1e60f4eb92657f4687a4c10662129bfb87f387ec55f430f9b830552460694320f2c7561025b859c180a6ff9127f1ab9770397b14ed1fca59d7cd33dca3374cc5685464760336203f2c41471f36fc23d1718558296aba3280a614d33c1fe47ef98c6f4965e8d23972dd9cc148f76e6d136f8a444f20dd04c6a204b4adf2a728b53d7530b885636633e375028ef747fc654b0d8256c40560e12b48f379e133e1646fe4efc861c6e9236b7bd3d92f522ac008cf03e0947523eebd7c5c8a0772d1ab1e3f2c58265b1dc3d2b8f0e7de51e19a4de8bd2efbc332462451ee3ba89438800d2493e73cbbb95794968bcd23191d476755ee6b9355bc8397639a50a0f0c208c4d82718a6e68093cc66ddd8618794ebc82a0bb931737bd50278a7ac0b0067ba69b33abae89627b02a3480aba7cca93bdf9bfe80965c1ab02e3897deffbbd5d673be089809a60e18a35fff956cd89d07f375a394c2073827171c2fa15f1f06c1a30e34bb43539eb275fef4a6a0cf1b76e54d1cbdf4e6fefad1199b5b918df850be2c5e2c9d8bb9030cfde0f297bd7ad1e5e2869c15fd4d94c9b559c05af8755a4faeabffd62545fa531d66614b7bc69dbd25450fdcf0a7f385bed904c8c14bf177f19acb2de60a591740f1857486800ce6af1a888ecf7e2d71c8a3527b1abd194b99ff8aef2eed4e417038b03d14ac9447e8703eb3ed6a33ade1cd5e483c0a2466ddf35f4a60032ac4a3799833292f33e7fcf6d5eb22420c27a6d58b2abd512ad69185d16f60ba7e31c5ac5284e0ffd3b4a79f5566355ae6f5238653626198b4e3932b61a0783eded2fe0b406ada18b31d4913b255db39c8691d30dfca8637bb67e76036f9414ec0ccd92291b4fb1b8db42bfb8ab0744c57e3ca23540fe3ef0d3d3c5d42754ea87ea1d1aac34d3c24698a39404b4b68e491d140da8429e483e325495989d3353c79d611d490bd7ec9e7dfa7d816b908a5eb0f265a8546ca74520d068a2de21563848f4607d17335d5bb7bbb41bba832adad5dcbede32d9c3bbd821768a0ebf40261a274579a99787f0826cdf0c48f500f189635e91ae31e781b7837b0d1059c10d5af80bafdb172fc13f469be87d56e4ec1a6212e810a05d44d7313541d3109e515c5188db3dd0c589e1293c08194a2a6dfd0200054e7bc610cf7478edb111f8dee7c81f1a96d80a8ff0ad2febfb65cfcd6416d4eac302de2dd8c4461ba98d56f052e46f592675e71ffe673a092a97517503874852d911bb58440efe5e320d724768b6375ca21b81fcfa83cbcf49e8ffed6b739afaa7e2213982792d14af2598187f0d1d5465dc6eb7658c9dd1c900b5d549605b334b0c3406cf614621c6958ba1ae903ccfa5461405aa02ac37f14e010349e2ba2985f6b8693e7d9e7de466235b9ab3ebd85a1a76e20a008b47d9d3889cc16fc34b2920fd2cfb7d2cdc6e9d44a6336fd963596a9bc3540be478cc2ac909693898583befc6373048e35ec6ee0c7650198a6a2078a12bbfd8d9be2ecaf3657de686b08cd9a25a338111eafaf81f0e75008d03d689351a9f4688542c97b533ad04ae039e578a40eddfd32491fba86c17abb0582d65f60cad983194ddcdbe296ac03d22050b98848916b4410f264f34915e4c7090e90ef692cdf454c197bbd1a9a11b7d82bb96d0362d49e5d6ddd6dd1d5c2791a8497d630e13a4426262b21eaa421b19fcd9482535eb8ffd75edecc2a2db897672fcb51f598f19f1290b5af9ee40c58dcde446f7e96fd6c38cdbc5fb20548eeefd583d510cc272532472af307fa85c3e769248a946afa9187b3d9b260deeb8df1305cf7b2768fe886cf8ec059899083dcff0afcc93bcbeb29a225311fdd9b5af8b993b8df2f464ade1e1b8e2431ee7bd33f434894d3652d87d6ef10d9cc350204814da34c7128d6aeffbf99871c3a23b45be0afc9e0a53a8bdfda5002bb8a4792ace28b99789b8507b76d7c2de2a83c1088aaadd4dd2da04b56c2f0a7af39b7b02ca8589adc51ecd8b39844c3691639afc6709ce7b1babb566ca66a3a9b8bbb2458d4b977d5619355b969b3af3e246fa9476774627442f5ddfc953150319ab319fe3f9469c6ff4aa84c762f059eb2e62883e45091e47dd5c0e9b42c3b015ad77995fd1318ba53f10ac8cc9316ebb5f36d12e81cfca29d72178cc8b1e3d8cfcc20ad559ae35d48162293112d4866911f3db571c9edc7d9ab51de8aa8a95d568ad83e40659cf3ff4b0009b35acf4b7f34ba643f269fb91725904054d53962ee741c7bae63e89d87e3cac05fbc27d500e89514541d5a1e3eefbf824a22cf84b36fb95e1716f0872732fc376f70e48b400e058f0f569028ad87f3e77fd37dc5894a449b9a66aa6179108dfa8d1ace101a42854b524c90acfb009c59a38094cc3a53a1431719914f36fd84d2bfe13a847cc5a19cfde2967507abb310402b2d6a44a74508a8314ee68e90d2b8df2bdd5304ba03d2878725d40a0f3d0d40bf44e965bcf5b9724d7c7129caef3ba7cec64db9320332020076ec59b05ee8369e69d965d07705e819fe37e7c49842adb256058a6f9ab430a9f99c5d1f74015f3b5a01fdf84e09066661df66ec3b078e288cb6b533691cadbefc9a603818bd68655f18396f093e3a4ff2c7de496cba345bcfbf25d6de410642cee22f0e96a472bf9a1262f219f10b0694e906c5bf4d42a4ac60078f6fc45ae151bc7350d422698f4d80e639c79947ef85d6728ba60f75a3046c415d8a87e32f39108f00e67d0b66e604121fc3d3ee9ebeb982a9005bf32a9dcef0efaf82f2e1f93789c1dc5e23c29cc4cb0e718428965b32fa0f62208c6e0ed6a6542ff0b57c0f7b87", 0x1000}], 0x1, r6)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x1c, r5, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x1a4, r8, 0x500, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x9c, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x718373f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x127e13c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31ac6609}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x31f8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x27ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c622dbf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a910956}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18c4cb0a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4df2f966}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x644e3a17}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc55c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3cab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5608}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32b23fab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20b646a4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8144}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd297}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xa8, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ffa2055}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a90200b}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x585f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fe4598a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c9f4cd7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x640fbfd5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31471194}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ad65436}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74a44367}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x622aea87}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5893}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d7d17ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4391907b}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x804}, 0x2000000) (async)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x1a4, r8, 0x500, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x9c, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x718373f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x127e13c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31ac6609}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x31f8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x27ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c622dbf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a910956}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18c4cb0a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4df2f966}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x644e3a17}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc55c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3cab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5608}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32b23fab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20b646a4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8144}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd297}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xa8, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ffa2055}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a90200b}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x585f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fe4598a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c9f4cd7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x640fbfd5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31471194}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ad65436}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74a44367}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x622aea87}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5893}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d7d17ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4391907b}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x804}, 0x2000000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})

2m26.946551654s ago: executing program 6 (id=4121):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(r1, &(0x7f0000000240)='./file0/../file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x70)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1)
sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x3}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008041}, 0x0)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000180)=0x8, 0x4)
recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x45833af92e4b38ff, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

2m26.885111505s ago: executing program 6 (id=4123):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1802, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2000, 0x800, &(0x7f0000000280)) (async)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async)
r2 = fcntl$dupfd(r1, 0x0, r1)
sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) (async)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x4c, 0x14, 0x905, 0x70bd25, 0x25dfdbfb, {0xa, 0x6, 0x3, 0x0, {0x4e26, 0x4e23, [0x0, 0x2c000000, 0x6, 0x1], [0xfffffffe, 0x5, 0x1, 0x8a67], 0x0, [0x3, 0x1002]}, 0x4, 0xffffffff}}, 0x4c}, 0x1, 0x0, 0x0, 0x26004801}, 0xc810)
r4 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x8, 0xa, 0x4, 0xd, "c5294a4bb5094a02adeb1d0d58bcd7f8c6c55dfc99da2c36c90346129381b62d4048538d2777a0f69d8e552db63110ac623b2fc8808577d8270dc882876ddd4d", "1c27a9de147ca09c85091129d34cd2b961d43b49d60588720a7208ebbbe18f18", [0x4f, 0x9]})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x3, 0x3b4f, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x68, 0xe0, 0x5, 0x2f, 0x0, @private=0xa010102, @private=0xa0100fd}}}}) (async)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x40, @dev}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x2, 0x4e22, @multicast1}, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x240})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0)
ioctl$TIOCMGET(r7, 0x5415, &(0x7f0000000040))
close_range(r0, 0xffffffffffffffff, 0x0) (async)
r8 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000)
setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f00000000c0)=0x7, 0x2)

2m26.801009356s ago: executing program 6 (id=4125):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x385400)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffc, 0x0, 0x6, 0x1a, 0x4, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a93a55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x7]}})
copy_file_range(r1, &(0x7f0000000000), r0, &(0x7f0000000080), 0x7, 0x0)

2m26.751653607s ago: executing program 37 (id=4125):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x385400)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffc, 0x0, 0x6, 0x1a, 0x4, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a93a55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x7]}})
copy_file_range(r1, &(0x7f0000000000), r0, &(0x7f0000000080), 0x7, 0x0)

4.649554078s ago: executing program 3 (id=5935):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x100000000001f, &(0x7f00000005c0)=0x1, 0x4)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

4.598576369s ago: executing program 3 (id=5937):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000012c35b400304106098c6000000010902120001000000000904"], 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000080)="1015053da9dddd249ad99df72c7464f9", 0x10)
getsockopt$inet_tcp_buf(r3, 0x6, 0x21, 0x0, &(0x7f0000000380))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x158, r2, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfc, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x13c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0xd8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xac, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x4, 0x0, 0xfff9, 0x1ff, 0x1, 0xfff4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x1, 0xe, 0x1, 0x1, 0x400, 0x4, 0x6]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x7, 0x1b, 0x17, 0x1b, 0x16, 0x2, 0x3, 0x18, 0xc, 0x12, 0x6c, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0x5, 0x6, 0xfff9, 0x0, 0x3, 0x1600]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4, 0x3, 0x3ff, 0x6, 0x8001, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xd, 0x8000, 0x9, 0x6, 0x5, 0x5, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0x8}, {0x0, 0xa}, {0x1, 0x6}, {0x3, 0x5}, {0x6, 0x9}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x7, 0xa}, {0x4, 0x3}, {0x0, 0x3}, {0x6, 0x2}, {0x1, 0x5}]}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x158}}, 0x20000000)
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x444ae6d1, 0x70}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x80d0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
futex(0x0, 0x10d, 0x0, 0x0, 0x0, 0x0)
fcntl$getownex(r6, 0x10, &(0x7f0000000000)={0x0, <r8=>0x0})
r9 = syz_open_procfs(r8, &(0x7f0000000200)='personality\x00')
exit(0x0)
readv(r9, &(0x7f0000000040)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1)
ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000740)={"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"})
close_range(r0, 0xffffffffffffffff, 0x0)

4.238825386s ago: executing program 4 (id=5941):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x14, r1, 0x132c5eba3bb8d9cf, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x44080)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x54, 0x0, 0x0, 0x80}, {0x6}]})
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x20, &(0x7f0000000000)={0x60, 0x14, 0x1, 0x2}, 0x8, 0x9, 0x1fd, 0x0, 0x0, 0x0, 0x0})
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0})

3.393680013s ago: executing program 4 (id=5943):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
openat$kvm(0x0, 0x0, 0x0, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000080)="2009ba4d", 0x4}], 0x2)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 64)
syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0) (async)
pipe2(&(0x7f0000001040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0) (async)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write$P9_RGETLOCK(r5, &(0x7f00000000c0)=ANY=[], 0xffffff6a) (async)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x84000)
tee(r4, r7, 0xfffffffffffffc01, 0x0) (async)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r8, 0x29, 0x5, &(0x7f0000000000)=0x800, 0x4) (async, rerun: 32)
tee(r4, r7, 0x60000000000, 0x0) (rerun: 32)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xa, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800240, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async)
ioctl$KVM_NMI(r3, 0xae9a) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x400, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0xfffffffffffffffd]}) (async)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9b, 0x3, 0x80, '\x00', 0x3}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
r9 = socket(0x10, 0x2, 0x0)
write(r9, &(0x7f0000000500)="1c0000001a009b8a14e500"/28, 0x1c)

3.337424784s ago: executing program 4 (id=5944):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000280)) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0xff, 0xffffffff, 0xfffffffd, 0x7, "ff00"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000001c0)={0xffffef01, 0x6, 0x5, 0xc, 0x0, "65abe401feff800000000000006564db6600", 0xfffffffe, 0x100}) (async)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240)=0xd) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="ffff00c200", @ANYRES16=r4, @ANYBLOB="01072cbd7000fedbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) (async, rerun: 64)
syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) (async, rerun: 64)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r6, &(0x7f0000002240)={&(0x7f0000001d00)={0xa, 0x4e24, 0x21f, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6e58d6bf43a1c5bc55e1ad00a27264129a1772e2ab34a28321e000003e0000003b00000000000000"], 0x18}, 0x4080)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
fchdir(r7) (async)
mount$9p_unix(&(0x7f0000000780)='./mnt\x00', &(0x7f0000000040)='./mnt\x00', 0x0, 0x291095, 0x0)
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r8, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x4000)
accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) (async)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000340)=[@dead_binder_done, @acquire], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205dad1d02a2a4524d5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f6282e980021d25789ea8edc9"})

3.278727935s ago: executing program 4 (id=5945):
prctl$PR_SET_VMA(0x21, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x737f0c77864b77b9, 0x410)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500100001a00130400000000fbdbdf25fe8000000000000000000000000000bb7f00000100000000000000000000000000004be64e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414110000000000000000000000000000000f32000000fe8000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000fffffffffffffffffcffffffffffff070800000004020000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f5000000000000000010000000000000040000000a000101000000000000000060001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000004000000000b45a9af75938f5795dc473f9dadeee5248b03d"], 0x150}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.278360065s ago: executing program 4 (id=5946):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
flock(r0, 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x240, 0x9b9a}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x42bb, 0x155f, 0x6, 0x5, 0x25cc, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x6, 0xbbf, 0x4a732f64, 0xc, 0x9, 0xd, 0x2, 0x80, 0x6, 0x1, 0x2, 0x3, 0x7, 0x81, 0x28000, 0x5, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0xa], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xfeff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x4, 0xf1, 0x4, 0xab00000, 0x40000005, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x8, 0x3, 0x4, 0x6, 0x7, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xf0b, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x240, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0xa6, 0xfc, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x8, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fbfffff, 0x7, 0x4, 0x10, 0x81, 0x4, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x3, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0x9, 0x5337, 0x26d, 0x9, 0xfffffffb, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x8, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010000"], 0x24, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x8000, 0x209, 0x1, 0x354, 0x3, 0x0, 0x0, 0x1}}, 0x50)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x0)
getdents64(r5, &(0x7f0000000040)=""/40, 0x28)
ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f0000000140)={0xaf, 0x10001, 0x5, 0x7, 0x81, 0x7})
capset(&(0x7f0000000380)={0x20080522}, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0xff}})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x7fffffffffffffff, 0xfff, 0x0, 0x180, 0x1, 0x9, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x800, 0x0, 0x4, 0xbdb], 0x1, 0x1c4213})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x9, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc9, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_4={0x3, 0x1, 0x6, "0082714e"}]}}, 0x0}, 0x0)
r8 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

1.621235048s ago: executing program 3 (id=5947):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda')
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000280)='/dev/ashmem\x00')

1.601965098s ago: executing program 4 (id=5948):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400c050}, 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x88000, 0x0)
pidfd_send_signal(r1, 0x1e, &(0x7f0000000480)={0x8, 0x1, 0x436}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000290000000400000011000000fcffffff1300000000000000290000000b"], 0x30}}], 0x1, 0x40000)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00')
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000080)=0x4)
ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000900)="00214717a70700000000030600710a5eeb9d04710400bbf3e76880000000005c786d17fd49a037f173c0c6b84caec25c498ee297621db8d58baa300100fddd1a788ef1d0967fc8bfc1d63d577690", 0x4e}], 0x1, 0x2, 0x4000004)
preadv(r2, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/197, 0xc5}], 0x1, 0x1, 0x3)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc\xbe\xb6\xa7w\x9d\xf1\xe5V\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8)
write$binfmt_format(0xffffffffffffffff, 0x0, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0xd37f, 0x0, 0x368, 0x3, 0x3}}, 0x120)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x468a82, 0x0)
r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0)
setpriority(0x2, 0x0, 0xd2f4)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r6 = socket(0x11, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'gre0\x00', <r8=>0x0})
bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29ffffffff000000009f0001140000002f0600ac141414e0000003808a8972ba0b72e61082b1a3d206"], 0xdd12}], 0x1}, 0x0)
poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x5}, {r5, 0x9}], 0x2, 0x7ff)

1.53867919s ago: executing program 3 (id=5949):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f0000000040)={'bond_slave_0\x00'})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000000004000000000060000000000000001000040"])
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r8 = socket$inet(0x2, 0x3, 0x4)
prlimit64(0x0, 0x9, &(0x7f0000000040)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0)
brk(0x689d80000000)
syslog(0x2, &(0x7f0000000000)=""/41, 0x29)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
write$tun(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="00005f3e965a817943a01f717c3dd3236005bbbbbbbbbbbbaaaaaaaaaa060000000008004599001400680000090490780a010101e0000001770b5a2a9e825a2abcf3db7ead98b1bb41d5ca5b3eb90354b41838dd1f0e48c16abe625c93bb079baa53e06fffed284d9e0c2922a3b4e6d56c1974a46eb3fb051e5e31e08465a368aae72eaf774e71525545504ca069d2ac0ae4672e4e407a9695c9557677a98867402205c4d0eb6b0a"], 0x2a)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2777fd2b9d4030109029b0001000020000904c4e301fffd0180090582"], 0x0)
r10 = syz_open_procfs(0x0, 0x0)
read$FUSE(r10, &(0x7f0000000980)={0x2020}, 0x2074)
bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)

438.710361ms ago: executing program 9 (id=5967):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
mprotect(&(0x7f00001d3000/0x3000)=nil, 0x3000, 0x3000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000)
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x6, &(0x7f0000000480)=[{0x0, 0xbe63, 0x9}, {0x5, 0x75b2d368, 0x8}], 0xaaaabbc, 0x8000e5})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0xa, 0x3, 0x87)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={@private1, 0x18, r5})
r6 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0xa)
fchdir(r7)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x2e, 0x5, 0x915}})
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched_retired(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=@newtclass={0x180, 0x28, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc}, {0x1b, 0x8}, {0x0, 0x8}}, [@c_atm={{0x8}, {0x54, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x3, 0xfff2}}, @TCA_ATM_FD={0x8, 0x1, r7}, @TCA_ATM_HDR={0x36, 0x3, "c9cacd83c4b400374ce62ca0d07d83cf49bd6c41164a30481a0fcd05a03084352bf916fee7886a06ced98f57d0794ab36a28"}, @TCA_ATM_FD={0x8}]}}, @c_atm={{0x8}, {0x9c, 0x2, [@TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_FD={0x8, 0x1, r8}, @TCA_ATM_HDR={0x13, 0x3, "69d42566bd8373812a54f8b38dcc19"}, @TCA_ATM_HDR={0x39, 0x3, "8440d88c76e8cec3b5fcd5f6a9cf7a93c595ff04a0fe9d1fc59828cf17afafbb14c730900babe080e29a94a66aa7b0ea1f8ace18b3"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x6, 0xe}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffff, 0xc}}, @TCA_ATM_HDR={0xb, 0x3, "5c2bf2a695c34a"}, @TCA_ATM_HDR={0x1b, 0x3, "03535de9e6ef4e243f3781bf155a6a06c505f25add1745"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x4}}}, @c_atm={{0x8}, {0x24, 0x2, [@TCA_ATM_HDR={0x6, 0x3, "73ec"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xb, 0xffe0}}, @TCA_ATM_FD={0x8, 0x1, r9}, @TCA_ATM_FD={0x8, 0x1, r10}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x6}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040800)
r11 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)

437.421011ms ago: executing program 9 (id=5970):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x2, [0xa1b, 0x3]}})
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002a00010a000000000051e63490f45f0008"], 0x24}}, 0x0) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fedb1cab19ff3776bc339900090000001d000000"], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x4040000)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000080)=0xd, 0x4) (async)
bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x2000077d, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async, rerun: 64)
sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) (async, rerun: 64)
recvmmsg(r4, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) (async)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2)

382.371892ms ago: executing program 9 (id=5972):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
pipe2$watch_queue(&(0x7f0000000380), 0x80)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0xed}})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x1000, &(0x7f0000f9a000/0x1000)=nil})
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)=@x86={0x10, 0x5, 0x7, 0x0, 0x7, 0xc, 0x9, 0x7, 0x1, 0x43, 0x7, 0x23, 0x0, 0xcd, 0x4000004, 0x7, 0xf, 0x23, 0xc, '\x00', 0x3, 0x7fff})
ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000140)=0x10000)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000040)={0x7, 0x0, [{0x7, 0x5, 0x1, 0x0, @msi={0x9, 0x4, 0x5ba, 0xbb59}}, {0x55, 0x2, 0x0, 0x0, @msi={0x7, 0x8, 0x7, 0x6}}, {0x4, 0x1, 0x1, 0x0, @sint={0x3, 0x10000}}, {0x7, 0x5, 0x0, 0x0, @msi={0x7f, 0x8001, 0x3a800000, 0x8}}, {0x80000001, 0x4, 0x0, 0x0, @sint={0x3ff, 0x5}}, {0x0, 0x3, 0x0, 0x0, @msi={0x4, 0xfffffffb, 0xffff8000, 0x80000000}}, {0xa, 0x4, 0x0, 0x0, @sint={0x8, 0xc5}}]})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x2)

382.041662ms ago: executing program 9 (id=5973):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000)
r1 = syz_open_dev$usbfs(0x0, 0x7, 0x2000)
ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000380)={0x7})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{}, "ba44c40e5a46049a", "d347f33ee4e4e04f9a3374d2b68cd42b", "1900"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

380.533832ms ago: executing program 9 (id=5974):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', <r6=>0x0})
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000040)=0x48c2, 0x4)
setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4)
sendmsg$can_raw(r7, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r6}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba7ca62a"}, 0x10}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0xf0, 0x1c, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x200}, {}, {0xfffffffe}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r8 = userfaultfd(0x801)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
r9 = gettid()
process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000100)=0x1)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202})
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

309.546114ms ago: executing program 9 (id=5975):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33)
write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x82801, 0x0)
write(r2, 0x0, 0x0) (async)
syz_usb_disconnect(r1)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

158.764736ms ago: executing program 3 (id=5977):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0xffffffff94278000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50)
r3 = geteuid()
r4 = getgid()
fchown(r0, r3, r4)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}], [], 0x6b}})
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00')
r6 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0)
sendfile(r6, r5, 0x0, 0xffffffff)

157.397756ms ago: executing program 8 (id=5978):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffffffffff93, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/4096, 0x0, 0x1, 0x20003f}, @flat=@weak_binder={0x77622a85, 0x1, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0})

141.168697ms ago: executing program 3 (id=5979):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}})
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000000)={0x0, 0xdddd0000, 0x0, 0xffffffffffffffff, 0x100004})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
fcntl$setstatus(r5, 0x4, 0x42800)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0xe}, 0x8, 0x0, 0x200, 0x400, 0xcd8, 0x86620090})
ppoll(&(0x7f000000e200)=[{r5, 0x20}], 0x1, 0x0, 0x0, 0x0)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)

130.067337ms ago: executing program 8 (id=5980):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x64a00, 0x0)
ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0))
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305828, 0x0)
write$tun(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r3})
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r4})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfef, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @fda={0x66646185, 0x0, 0x2, 0x10}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})

70.649318ms ago: executing program 8 (id=5981):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x502, 0x0)
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000080))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r2], 0x108}}], 0x1, 0xc040)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x1d, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

70.345278ms ago: executing program 8 (id=5982):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x400, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(0xffffffffffffffff, 0x40000000)
r2 = syz_clone(0x82280780, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setresuid(0x0, 0xee01, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
pipe(&(0x7f0000000600)={<r5=>0xffffffffffffffff})
io_setup(0x2, &(0x7f0000000500)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x2, r5, 0x0, 0x0, 0x20000000}])
fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000580)='!\a', 0x0, r1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
r7 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r7}], 0x50, 0x0, &(0x7f0000000740)="8883f5f7cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da3f1872e006c7f8aab8148a0e021b5cf4690a761ba22fd7fca4f6c2d70eccab5995aa7eeb1ca60f45334c9"})
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/wake_lock', 0x202, 0xc4)
copy_file_range(r8, 0x0, r8, 0x0, 0x2, 0x99)
setns(r3, 0x24020000)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/custom1\x00', 0x802, 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r9, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r10, 0x0, 0x20, &(0x7f00000001c0)={@loopback, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x6)

21.446019ms ago: executing program 8 (id=5983):
timerfd_create(0x4, 0x80000)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3)
r1 = eventfd2(0x5, 0x80000)
epoll_create1(0x80000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x0)
syz_clone3(&(0x7f0000000040)={0x206361100, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000100)="670f7848a60f0119f30fbda07350000067660f3880531d0f08660fc73066ba4200b808000000efc4e1785aaa00000080f4b91e0800000f32c744240200e00000c7442406000000000f011424", 0x4c}], 0x1, 0x2, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd9000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000080)={0x2, 0x100000, 0x8, r1, 0x9})
r5 = syz_open_dev$usbfs(&(0x7f0000000200), 0x0, 0x10480)
ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x6)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c)
connect$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)
r10 = fcntl$dupfd(r9, 0x0, r9)
sendmsg$SEG6_CMD_DUMPHMAC(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x50}, 0xc141)
sendmsg$inet6(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000880)="b1", 0x1}], 0x1}, 0x10)
setsockopt$inet6_tcp_int(r10, 0x6, 0xc, &(0x7f00000003c0)=0xfffffff8, 0x4)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)

0s ago: executing program 8 (id=5984):
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="41468e06", 0x4}], 0x1, 0x0, 0x0, 0x11000000}, 0x4000001) (async)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="41468e06", 0x4}], 0x1, 0x0, 0x0, 0x11000000}, 0x4000001)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r5, 0x8010aebb, &(0x7f0000000040)={0x4000, 0x18000})
ptrace$cont(0x9, r0, 0x0, 0x0) (async)
ptrace$cont(0x9, r0, 0x0, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x400001, &(0x7f0000000180)=ANY=[@ANYBLOB="726c6f675f70616765733d313834363532392c00b6481b674e8421e6e34124c0ebb762a5a923b71fb7d3ff0184789861cf392cac00000000000000"]) (async)
mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x400001, &(0x7f0000000180)=ANY=[@ANYBLOB="726c6f675f70616765733d313834363532392c00b6481b674e8421e6e34124c0ebb762a5a923b71fb7d3ff0184789861cf392cac00000000000000"])
rt_tgsigqueueinfo(r0, 0x0, 0x37, &(0x7f0000000300)={0x2c, 0x101, 0x4}) (async)
rt_tgsigqueueinfo(r0, 0x0, 0x37, &(0x7f0000000300)={0x2c, 0x101, 0x4})
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup(r6) (async)
r7 = dup(r6)
socket$inet(0x2, 0x1, 0x0) (async)
r8 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40)
connect$bt_sco(r9, 0x0, 0x0)
r10 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000540)=[@code={0xa, 0x75, {"c42160c2ae00600000da0f0fc6900f35b9da0a0000b800000000ba000000800f30420f0172c367420f01c548b80001c0fe000000000f23c80f21f8350c0080000f23f84438e348b85f510000000000000f23c80f21f835040070000f23f866ba400066ed"}}, @uexit={0x0, 0x18, 0x8000000000000001}, @in_dx={0x82, 0x20, {0xbf93, 0x1}}, @out_dx={0xaa, 0x28, {0xd5b9, 0x2, 0x9}}, @uexit={0x0, 0x18, 0x8000000000000000}, @cpuid={0x14, 0x18, {0x8, 0x400}}, @uexit={0x0, 0x18, 0x1}, @in_dx={0x82, 0x20, {0xeac2, 0x1}}, @uexit={0x0, 0x18, 0x8}, @cpuid={0x14, 0x18, {0xff, 0x7}}, @uexit={0x0, 0x18, 0x686}, @out_dx={0xaa, 0x28, {0x9347, 0x1, 0x1}}, @cpuid={0x14, 0x18, {0x9, 0x8}}, @code={0xa, 0x5f, {"44f4660f388134063e430f0f4a5bb6b8010000000f01d948b87bb0ffffffffffff0f23c00f21f83501000b000f23f8440f01c20f08b805000000b924b100000f01d966ba4000b000ee660f388112"}}, @wr_crn={0x46, 0x20, {0x2, 0x60c}}, @rdmsr={0x32, 0x18, {0x1a0}}, @uexit={0x0, 0x18, 0xffffffffffffff5a}, @wr_crn={0x46, 0x20, {0x0, 0x6}}, @in_dx={0x82, 0x20, {0xa3bd, 0x4}}, @out_dx={0xaa, 0x28, {0x6c33, 0x4, 0x4da90d75}}, @wr_crn={0x46, 0x20, {0x0, 0x1ff}}, @in_dx={0x82, 0x20, {0x1544, 0x4}}], 0x31c})
ioctl$AUTOFS_IOC_CATATONIC(r10, 0x9362, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc814}, 0x40001) (async)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc814}, 0x40001)
write$P9_RWSTAT(r9, &(0x7f00000000c0)={0x7, 0x7f, 0x2}, 0x7)

kernel console output (not intermixed with test programs):

as an invalid length.
[  342.270946][T15358] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  342.317680][T15365] fuseblk: Bad value for 'user_id'
[  342.329408][T15365] fuseblk: Bad value for 'user_id'
[  342.335743][T15365] fuseblk: Bad value for 'user_id'
[  342.341051][T15365] fuseblk: Bad value for 'user_id'
[  342.357781][T15370] __vm_enough_memory: pid: 15370, comm: syz.9.4927, bytes: 18014402804453376 not enough memory for the allocation
[  342.446727][T15375] rust_binder: 499: no such ref 0
[  342.928629][  T472] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[  343.079757][  T472] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  343.090872][  T472] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  343.108574][  T472] usb 4-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00
[  343.117682][  T472] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.126534][  T472] usb 4-1: config 0 descriptor??
[  343.135964][T15384] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  343.144766][  T472] usbhid 4-1:0.0: can't add hid device: -22
[  343.150827][  T472] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[  343.166642][T15388] rust_binder: Write failure EFAULT in pid:1201
[  343.243815][T15393] __vm_enough_memory: pid: 15393, comm: syz.4.4936, bytes: 18014402804453376 not enough memory for the allocation
[  343.276137][T15398] random: crng reseeded on system resumption
[  343.346886][   T31] usb 4-1: USB disconnect, device number 41
[  343.526549][T15411] veth1: entered allmulticast mode
[  343.654027][T15406] binder: Bad value for 'defcontext'
[  343.993640][T15419] rust_binder: 440: no such ref 0
[  343.998758][T15419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:440
[  343.999596][T15419] fuse: Bad value for 'rootmode'
[  344.038734][T15426] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  344.099559][T15428] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  344.106025][T15429] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  344.113224][T15428] rust_binder: Failed to allocate buffer. len:1144, is_oneway:false
[  344.113240][T15429] rust_binder: Failed to allocate buffer. len:1144, is_oneway:false
[  344.186587][T15445] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  344.204519][T15445] 9pnet_virtio: no channels available for device ./file0
[  344.212143][T15445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1229
[  344.230453][T15448] rust_binder: inc_ref_done called when no active inc_refs
[  344.250674][   T36] audit: type=1400 audit(2000000377.790:1151): avc:  denied  { create } for  pid=15449 comm="syz.9.4956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  344.258326][  T472] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  344.358306][T15410] veth1: left allmulticast mode
[  344.394422][T15463] rust_binder: 15457 RLIMIT_NICE not set
[  344.415720][T15469] rust_binder: Write failure EFAULT in pid:1239
[  344.435447][  T467] rust_binder: 15455: removing orphan mapping 0:4240
[  344.438274][  T472] usb 4-1: Using ep0 maxpacket: 8
[  344.453323][T15476] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[  344.453534][T15476] rust_binder: Error while translating object.
[  344.463602][T15476] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  344.466996][  T472] usb 4-1: unable to get BOS descriptor or descriptor too short
[  344.470624][T15476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:528
[  344.482879][  T472] usb 4-1: unable to read config index 0 descriptor/start: -71
[  344.512777][  T472] usb 4-1: can't read configurations, error -71
[  344.519758][T15482] fuse: Bad value for 'fd'
[  344.529342][T15480] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4965'.
[  344.538297][T15480] bridge_slave_1: left allmulticast mode
[  344.544035][T15480] bridge_slave_1: left promiscuous mode
[  344.549813][T15480] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.557757][T15480] bridge_slave_0: left allmulticast mode
[  344.564021][T15480] bridge_slave_0: left promiscuous mode
[  344.569812][T15480] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.587951][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[  344.658355][  T468] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  344.808228][  T468] usb 5-1: Using ep0 maxpacket: 8
[  344.815288][  T468] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  344.825630][  T468] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  344.837101][  T468] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  344.846330][  T468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.854413][  T468] usb 5-1: Product: syz
[  344.858633][  T468] usb 5-1: Manufacturer: syz
[  344.863252][  T468] usb 5-1: SerialNumber: syz
[  345.255071][T15530] netlink: 182 bytes leftover after parsing attributes in process `syz.8.4981'.
[  345.272302][T15531] rust_binder: Write failure EFAULT in pid:1239
[  345.272775][T15469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  345.287742][T15469] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  345.302047][  T468] cdc_ncm 5-1:1.0: bind() failure
[  345.308203][  T468] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  345.315005][  T468] cdc_ncm 5-1:1.1: bind() failure
[  345.322621][  T468] usb 5-1: USB disconnect, device number 68
[  345.341718][T15538] SELinux:  Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped).
[  345.351702][   T36] audit: type=1400 audit(2000000378.891:1152): avc:  denied  { relabelto } for  pid=15535 comm="syz.4.4983" name="416" dev="tmpfs" ino=2238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  345.378810][  T472] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  345.386881][   T36] audit: type=1400 audit(2000000378.891:1153): avc:  denied  { associate } for  pid=15535 comm="syz.4.4983" name="416" dev="tmpfs" ino=2238 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0"
[  345.458640][   T36] audit: type=1400 audit(2000000379.001:1154): avc:  denied  { write } for  pid=7296 comm="syz-executor" name="416" dev="tmpfs" ino=2238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  345.485106][   T36] audit: type=1400 audit(2000000379.001:1155): avc:  denied  { remove_name } for  pid=7296 comm="syz-executor" name="file0" dev="tmpfs" ino=2243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  345.488890][T15542] netlink: 'syz.4.4985': attribute type 1 has an invalid length.
[  345.512643][   T36] audit: type=1400 audit(2000000379.001:1156): avc:  denied  { rmdir } for  pid=7296 comm="syz-executor" name="416" dev="tmpfs" ino=2238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  345.520258][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4985'.
[  345.576355][T15547] rust_binder: Error while translating object.
[  345.576389][T15547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  345.582612][T15547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1249
[  345.599098][  T472] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.605086][T15549] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  345.608516][  T472] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.619836][T15549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1253
[  345.628834][T15550] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  345.647654][  T472] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  345.647694][T15550] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1253
[  345.657101][  T472] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  345.657131][  T472] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.661614][  T472] usb 4-1: config 0 descriptor??
[  345.795170][   T36] audit: type=1326 audit(2000000379.331:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.4.4990" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd0298eec9 code=0x0
[  346.002017][T15573] incfs: Error accessing: ./file3.
[  346.007318][T15573] incfs: mount failed -2
[  346.104867][  T472] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving
[  346.116204][  T472] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  346.419446][  T467] usb 4-1: USB disconnect, device number 43
[  346.639287][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.639319][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.645879][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.645914][T15603] rust_binder: Error in use_page_slow: ESRCH
[  346.652428][  T694] Bluetooth: hci0: command 0x1003 tx timeout
[  346.662737][T15603] rust_binder: use_range failure ESRCH
[  346.664852][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  346.671119][T15603] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  346.676401][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.676421][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.676439][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.676454][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.676470][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.676487][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.683207][T15603] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  346.690829][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.705587][T15603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1266
[  346.710129][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.754779][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.761313][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.767856][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.777703][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.784186][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.790721][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.797272][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.803878][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.810469][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.816925][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.823453][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.829941][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.836966][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.843755][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.850479][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.857016][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.863559][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.870045][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.876503][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.882998][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.889469][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.895929][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.902438][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.908934][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.915387][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.921882][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.928366][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.934811][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.941291][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.947771][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.954312][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.960876][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.967337][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.973876][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.980597][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.989283][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.995889][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  347.002472][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  347.009098][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  347.015629][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  347.022158][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  347.029222][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  347.035741][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  347.042531][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  347.049222][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  347.055803][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  347.062335][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  347.068846][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  347.075508][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  347.081979][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  347.088468][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  347.094895][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  347.101355][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  347.379449][T15638] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  347.386611][T15638] rust_binder: Write failure EFAULT in pid:534
[  347.691361][   T31] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  347.847969][   T31] usb 10-1: Using ep0 maxpacket: 8
[  347.858442][   T31] usb 10-1: unable to get BOS descriptor or descriptor too short
[  347.875495][   T31] usb 10-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  347.897444][   T31] usb 10-1: config 1 interface 0 has no altsetting 0
[  347.905963][   T31] usb 10-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.40
[  347.915215][   T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.923388][   T31] usb 10-1: Product: у
[  347.927626][   T31] usb 10-1: Manufacturer: 됕硾ډń칐Ⲷ䥅ꗕ擆ꊓⲍ鏭틫뤨㥍跓ꦝ˦沺홈貴䎬䉬琌賯ꦃ剂쓚ࡓ헥币깨᧽ܢ묇욹蔞橩䲸⩦綁뜱㿚⤰杒뼊Ⳕ⺩껋譒᥉䘧刂딩㽇갳য拶书昶촰ᶑ虈䩬窠嚬꼗쉷⾑䃰툲䕥⾑㐩鳥윲㍖㫑ⳅ㡯㈮㨐흲뜫ꔱ︻沭ｇ췖낚엀ꏳȄ浧薏筕栗넍꾠㝕彌拟푇
[  347.963111][   T31] usb 10-1: SerialNumber: ࠊ
[  348.772871][   T31] usbhid 10-1:1.0: can't add hid device: -71
[  348.779058][   T31] usbhid 10-1:1.0: probe with driver usbhid failed with error -71
[  348.788294][   T31] usb 10-1: USB disconnect, device number 23
[  349.122816][T15697] overlayfs: failed to clone lowerpath
[  349.129091][T15697] bridge0: port 3(veth0_to_team) entered blocking state
[  349.136160][T15697] bridge0: port 3(veth0_to_team) entered disabled state
[  349.143828][T15697] veth0_to_team: entered allmulticast mode
[  349.155353][T15697] veth0_to_team: entered promiscuous mode
[  349.349494][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5042'.
[  349.370414][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  349.437944][T15722] fuse: Bad value for 'fd'
[  350.195430][T15732] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  350.203093][T15732] tipc: Disabling bearer <eth:syzkaller0>
[  350.280844][T15735] rust_binder: Write failure EFAULT in pid:456
[  350.293914][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5049'.
[  350.425679][T15745] veth1: entered allmulticast mode
[  350.482210][T15746] veth1: left allmulticast mode
[  350.880488][T15750] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5053'.
[  351.109780][T15763] bpf: Bad value for 'uid'
[  351.446600][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  351.446870][  T694] Bluetooth: hci0: command 0x1003 tx timeout
[  351.478256][T15775] netlink: 'syz.9.5062': attribute type 2 has an invalid length.
[  351.497714][T15777] random: crng reseeded on system resumption
[  351.525535][T15777] netlink: 'syz.9.5063': attribute type 4 has an invalid length.
[  351.576551][   T31] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  351.693002][   T36] audit: type=1326 audit(2000000385.232:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15790 comm="syz.8.5067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b1438eec9 code=0x0
[  351.716635][   T31] usb 4-1: device descriptor read/64, error -71
[  351.778438][   T36] audit: type=1326 audit(2000000385.322:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15797 comm="syz.4.5069" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd0298eec9 code=0x0
[  351.956453][   T31] usb 4-1: device descriptor read/64, error -71
[  352.196400][   T31] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  352.277136][T15803] 9pnet_fd: Insufficient options for proto=fd
[  352.326504][   T31] usb 4-1: device descriptor read/64, error -71
[  352.457244][   T36] audit: type=1326 audit(2000000386.002:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15804 comm="syz.9.5071" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb3e58eec9 code=0x0
[  352.558246][T15813] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false
[  352.566339][   T31] usb 4-1: device descriptor read/64, error -71
[  352.655174][T15823] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  352.686413][   T31] usb usb4-port1: attempt power cycle
[  352.797871][T15833] veth1: entered allmulticast mode
[  353.026228][   T31] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  353.047208][   T31] usb 4-1: device descriptor read/8, error -71
[  353.187297][   T31] usb 4-1: device descriptor read/8, error -71
[  353.400300][T15865] random: crng reseeded on system resumption
[  353.426090][   T31] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  353.447326][   T31] usb 4-1: device descriptor read/8, error -71
[  353.577097][   T31] usb 4-1: device descriptor read/8, error -71
[  353.630953][T15832] veth1: left allmulticast mode
[  353.686358][   T31] usb usb4-port1: unable to enumerate USB device
[  354.185398][   T36] audit: type=1400 audit(2000000387.723:1161): avc:  denied  { accept } for  pid=15883 comm="syz.4.5100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  354.323570][T15887] netlink: 'syz.3.5101': attribute type 1 has an invalid length.
[  354.325682][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.331460][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.331468][T15889] rust_binder: 474: no such ref 1
[  354.331683][T15887] netlink: 'syz.3.5101': attribute type 1 has an invalid length.
[  354.338356][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.344755][T15887] netlink: 'syz.3.5101': attribute type 1 has an invalid length.
[  354.349836][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.357592][T15887] netlink: 'syz.3.5101': attribute type 1 has an invalid length.
[  354.363987][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.371799][T15887] netlink: 'syz.3.5101': attribute type 1 has an invalid length.
[  354.378251][  T472] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  354.386236][T15887] netlink: 'syz.3.5101': attribute type 1 has an invalid length.
[  354.392370][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.400232][T15887] netlink: 'syz.3.5101': attribute type 1 has an invalid length.
[  354.407777][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.415497][T15887] netlink: 'syz.3.5101': attribute type 1 has an invalid length.
[  354.422064][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.443812][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.450296][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.456762][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.463202][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.470119][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.476597][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.483016][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.489706][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.496265][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.502825][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.509442][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.515984][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.522527][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.529089][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.535689][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.542229][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.548775][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.555245][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.561778][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.568259][  T472] usb 10-1: Using ep0 maxpacket: 32
[  354.568527][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.576036][  T472] usb 10-1: config 0 has an invalid interface number: 148 but max is 0
[  354.580045][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.586709][  T472] usb 10-1: config 0 has no interface number 0
[  354.594747][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.601424][  T472] usb 10-1: config 0 interface 148 has no altsetting 0
[  354.607423][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.615585][  T472] usb 10-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=dd.c8
[  354.620635][T15888] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.627527][  T472] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.657741][  T472] usb 10-1: Product: syz
[  354.662045][  T472] usb 10-1: Manufacturer: syz
[  354.672116][  T472] usb 10-1: SerialNumber: syz
[  354.684231][  T472] usb 10-1: config 0 descriptor??
[  354.690514][  T472] pl2303 10-1:0.148: required interrupt-in endpoint missing
[  354.759261][   T36] audit: type=1326 audit(2000000388.303:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.8.5108" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b1438eec9 code=0x0
[  354.790561][T15911] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5109'.
[  354.800028][T15911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5109'.
[  354.810028][T15911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5109'.
[  354.810039][T15908] 9pnet_fd: Insufficient options for proto=fd
[  354.810524][T15911] overlayfs: failed to clone upperpath
[  354.857417][T15915] netlink: 'syz.4.5111': attribute type 11 has an invalid length.
[  354.890157][T15881] 9pnet_fd: Insufficient options for proto=fd
[  354.897181][   T31] usb 10-1: USB disconnect, device number 24
[  354.975761][  T472] usb 4-1: new low-speed USB device number 48 using dummy_hcd
[  355.127169][  T472] usb 4-1: unable to get BOS descriptor or descriptor too short
[  355.135898][  T472] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  355.144913][  T472] usb 4-1: config 1 has no interface number 1
[  355.151274][  T472] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  355.164207][  T472] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0
[  355.177050][  T472] usb 4-1: string descriptor 0 read error: -22
[  355.183305][  T472] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  355.192384][  T472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.202843][  T472] usb 4-1: low speed audio streaming not supported
[  355.403321][T15893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  355.412036][T15893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  355.420880][   T31] usb 4-1: USB disconnect, device number 48
[  355.608657][T15930] overlayfs: failed to clone lowerpath
[  355.795788][T15952] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5122'.
[  356.037389][   T36] audit: type=1400 audit(2000000389.583:1163): avc:  denied  { map } for  pid=15963 comm="syz.3.5126" path="socket:[76765]" dev="sockfs" ino=76765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  356.115461][   T31] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  356.266419][   T31] usb 10-1: config 220 has an invalid interface number: 76 but max is 2
[  356.274821][   T31] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  356.285246][   T31] usb 10-1: config 220 has no interface number 2
[  356.291640][   T31] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  356.304908][   T31] usb 10-1: config 220 interface 0 has no altsetting 0
[  356.311803][   T31] usb 10-1: config 220 interface 76 has no altsetting 0
[  356.318783][   T31] usb 10-1: config 220 interface 1 has no altsetting 0
[  356.327125][   T31] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  356.336395][   T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.344500][   T31] usb 10-1: Product: syz
[  356.348955][   T31] usb 10-1: Manufacturer: syz
[  356.353887][   T31] usb 10-1: SerialNumber: syz
[  356.377954][T15971] overlayfs: failed to clone lowerpath
[  356.385395][T15971] overlayfs: conflicting options: verity=require,redirect_dir=follow
[  356.566796][T15995] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  356.566820][T15995] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  356.572945][   T31] usb 10-1: selecting invalid altsetting 0
[  356.577464][T15996] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true
[  356.581644][   T31] usb 10-1: Found UVC 7.01 device syz (8086:0b07)
[  356.585907][T15996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  356.593756][   T31] usb 10-1: No valid video chain found.
[  356.600044][T15996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:484
[  356.619056][   T31] usb 10-1: USB disconnect, device number 25
[  356.875321][  T331] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  356.984397][T16003] netlink: 92 bytes leftover after parsing attributes in process `syz.8.5140'.
[  357.005290][T16007] netlink: 928 bytes leftover after parsing attributes in process `syz.8.5141'.
[  357.025237][  T331] usb 4-1: Using ep0 maxpacket: 8
[  357.030385][T16009] sit0: entered promiscuous mode
[  357.032454][  T331] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  357.036950][T16009] validate_nla: 26 callbacks suppressed
[  357.036973][T16009] netlink: 'syz.8.5142': attribute type 1 has an invalid length.
[  357.045295][  T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.065269][T16009] netlink: 'syz.8.5142': attribute type 3 has an invalid length.
[  357.077511][  T331] usb 4-1: config 0 descriptor??
[  357.175376][T16029] overlayfs: failed to clone lowerpath
[  357.225891][T16015] rust_binder: Write failure EFAULT in pid:581
[  357.304694][  T331] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  357.824261][T16067] veth1: entered allmulticast mode
[  357.979817][T16070] rust_binder: Error while translating object.
[  357.979881][T16070] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  357.986347][T16070] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:594
[  358.113269][T16084] devpts: called with bogus options
[  358.546074][T16096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.555514][T16096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.564186][T16097] rust_binder: 15999 RLIMIT_NICE not set
[  358.564443][T15999] rust_binder: 489: no such ref 3
[  358.566662][T16098] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  358.570868][T15999] rust_binder: Error while translating object.
[  358.575452][T16096] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  358.582098][T15999] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  358.594353][T15999] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender.
[  358.603706][T15999] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:489
[  358.658619][T16066] veth1: left allmulticast mode
[  358.665130][  T331] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  358.691253][  T331] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  358.714870][  T331] asix 4-1:0.0: probe with driver asix failed with error -71
[  358.725066][  T331] usb 4-1: USB disconnect, device number 49
[  358.794847][  T472] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  358.924854][  T472] usb 10-1: device descriptor read/64, error -71
[  359.164757][  T472] usb 10-1: device descriptor read/64, error -71
[  359.176770][   T45] rust_binder: 15998: removing orphan mapping 0:4224
[  359.367053][T16129] netlink: 'syz.4.5185': attribute type 3 has an invalid length.
[  359.375419][T16129] fuse: Bad value for 'fd'
[  359.381628][T16129] fuse: Bad value for 'fd'
[  359.390464][   T36] audit: type=1326 audit(2000000392.934:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16121 comm="syz.8.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1438eec9 code=0x7fc00000
[  359.414462][   T36] audit: type=1326 audit(2000000392.934:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16121 comm="syz.8.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1438eec9 code=0x7fc00000
[  359.415509][  T472] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[  359.448471][   T36] audit: type=1326 audit(2000000392.994:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16121 comm="syz.8.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1438eec9 code=0x7fc00000
[  359.464016][T16135] tmpfs: Invalid uid '0x00000000ffffffff'
[  359.472314][   T36] audit: type=1326 audit(2000000392.994:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16121 comm="syz.8.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1438eec9 code=0x7fc00000
[  359.504660][  T468] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  359.574873][  T472] usb 10-1: device descriptor read/64, error -71
[  359.654597][  T468] usb 4-1: Using ep0 maxpacket: 32
[  359.661153][  T468] usb 4-1: unable to get BOS descriptor or descriptor too short
[  359.669571][  T468] usb 4-1: config 6 has an invalid interface number: 210 but max is 0
[  359.677775][  T468] usb 4-1: config 6 has no interface number 0
[  359.683862][  T468] usb 4-1: config 6 interface 210 has no altsetting 0
[  359.692228][  T468] usb 4-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice=1d.40
[  359.701342][  T468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.709390][  T468] usb 4-1: Product: syz
[  359.713663][  T468] usb 4-1: Manufacturer: syz
[  359.718341][  T468] usb 4-1: SerialNumber: syz
[  359.814582][  T472] usb 10-1: device descriptor read/64, error -71
[  359.924751][  T472] usb usb10-port1: attempt power cycle
[  359.931442][  T468] ums-sddr55 4-1:6.210: USB Mass Storage device detected
[  359.958735][  T468] usb 4-1: USB disconnect, device number 50
[  360.264489][  T472] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[  360.285585][  T472] usb 10-1: device descriptor read/8, error -71
[  360.407537][T16161] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16161 comm=syz.4.5195
[  360.421214][T16161] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16161 comm=syz.4.5195
[  360.434588][  T472] usb 10-1: device descriptor read/8, error -71
[  360.442133][T16161] fuse: Bad value for 'fd'
[  360.674367][  T472] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[  360.705972][  T472] usb 10-1: device descriptor read/8, error -71
[  360.835420][  T472] usb 10-1: device descriptor read/8, error -71
[  360.864313][   T45] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  360.954407][  T472] usb usb10-port1: unable to enumerate USB device
[  361.014268][   T45] usb 4-1: Using ep0 maxpacket: 32
[  361.020666][   T45] usb 4-1: config 134 has an invalid descriptor of length 30, skipping remainder of the config
[  361.031432][   T45] usb 4-1: config 134 has 0 interfaces, different from the descriptor's value: 26
[  361.040890][   T45] usb 4-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00
[  361.050278][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.262583][   T45] usb 4-1: string descriptor 0 read error: -71
[  361.271548][   T45] usb 4-1: USB disconnect, device number 51
[  361.466689][T16212] overlayfs: failed to clone upperpath
[  361.644669][T16231] fuse: Unknown parameter '00000000000000000000005����'
[  361.684014][T16242] binder: Bad value for 'max'
[  361.705174][T16248] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  361.712580][T16248] rust_binder: Write failure EINVAL in pid:616
[  361.759443][T16260] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  361.766003][T16260] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:622
[  361.786518][T16265] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  361.795719][T16265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:624
[  361.855497][T16274] __vm_enough_memory: pid: 16274, comm: syz.3.5240, bytes: 18014402804453376 not enough memory for the allocation
[  361.871823][T16281] 9pnet_fd: Insufficient options for proto=fd
[  368.780480][T16290] netlink: 'syz.4.5244': attribute type 13 has an invalid length.
[  368.931383][T16307] 9pnet_fd: Insufficient options for proto=fd
[  368.964490][T16313] bpf: Bad value for 'gid'
[  369.242369][  T472] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  369.303567][T16344] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  369.303602][T16344] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  369.393611][  T472] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  369.411062][  T472] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  369.420844][  T472] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  369.429972][  T472] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.442523][  T472] usb 4-1: config 0 descriptor??
[  369.474354][T16359] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  369.491435][T16359] fuse: Bad value for 'group_id'
[  369.497366][T16358] fuse: Bad value for 'group_id'
[  369.497944][T16359] fuse: Bad value for 'group_id'
[  369.502895][T16358] fuse: Bad value for 'group_id'
[  369.503899][T16364] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  369.525212][T16364] rust_binder: 656: no such ref 1
[  369.530325][T16364] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:656
[  369.530364][T16358] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  369.546832][T16358] rust_binder: 656: no such ref 1
[  369.551877][T16358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:656
[  369.684430][T16382] rust_binder: Write failure EFAULT in pid:666
[  369.756224][T16389] fuse: Bad value for 'user_id'
[  369.757635][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5279'.
[  369.762558][T16389] fuse: Bad value for 'user_id'
[  369.783558][T16389] 9pnet_fd: Insufficient options for proto=fd
[  369.793518][ T1439] Bluetooth: hci0: Frame reassembly failed (-84)
[  369.805077][ T1439] Bluetooth: hci0: Frame reassembly failed (-84)
[  369.809584][T16393] bpf: Bad value for 'uid'
[  369.854885][  T472] arvo 0003:1E7D:30D4.0017: item fetching failed at offset 5/7
[  369.862684][  T472] arvo 0003:1E7D:30D4.0017: parse failed
[  369.868359][  T472] arvo 0003:1E7D:30D4.0017: probe with driver arvo failed with error -22
[  370.006660][T16398] overlayfs: failed to clone upperpath
[  371.533604][   T36] audit: type=1400 audit(2000000405.087:1168): avc:  denied  { lock } for  pid=16434 comm="syz.8.5297" path="socket:[78857]" dev="sockfs" ino=78857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  371.569459][T16437] fuseblk: Unknown parameter 'us'
[  371.660357][T16460] 9pnet_fd: p9_fd_create_tcp (16460): problem binding to privport
[  371.841700][  T694] Bluetooth: hci0: command 0x1003 tx timeout
[  371.847898][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  372.012155][  T331] usb 4-1: USB disconnect, device number 52
[  372.257132][T16491] rust_binder: 528: no such ref 0
[  372.297294][T16500] rust_binder: Write failure EINVAL in pid:532
[  372.381835][T16507] netlink: 'syz.3.5322': attribute type 6 has an invalid length.
[  372.407915][T16507] netlink: 'syz.3.5322': attribute type 4 has an invalid length.
[  372.417399][T16507] netlink: 'syz.3.5322': attribute type 6 has an invalid length.
[  372.429083][T16507] netlink: 5944 bytes leftover after parsing attributes in process `syz.3.5322'.
[  372.443897][T16507] rust_binder: Error while translating object.
[  372.443942][T16507] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  372.451295][T16506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12063 sclass=netlink_route_socket pid=16506 comm=syz.9.5323
[  372.461778][T16507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:534
[  372.891720][  T472] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[  373.021450][  T331] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  373.051427][  T472] usb 10-1: Using ep0 maxpacket: 8
[  373.057927][  T472] usb 10-1: unable to get BOS descriptor or descriptor too short
[  373.066428][  T472] usb 10-1: config 9 has an invalid interface number: 97 but max is 0
[  373.074647][  T472] usb 10-1: config 9 has no interface number 0
[  373.080828][  T472] usb 10-1: config 9 interface 97 has no altsetting 0
[  373.089561][  T472] usb 10-1: New USB device found, idVendor=8550, idProduct=03bc, bcdDevice=8d.d4
[  373.098872][  T472] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.118200][  T472] usb 10-1: Product: syz
[  373.123063][  T472] usb 10-1: Manufacturer: syz
[  373.127774][  T472] usb 10-1: SerialNumber: syz
[  373.144215][T16560] netlink: 'syz.8.5345': attribute type 1 has an invalid length.
[  373.152764][T16560] overlayfs: failed to clone upperpath
[  373.182617][  T331] usb 4-1: Using ep0 maxpacket: 8
[  373.195846][  T331] usb 4-1: unable to get BOS descriptor or descriptor too short
[  373.203776][  T331] usb 4-1: too many configurations: 81, using maximum allowed: 8
[  373.216417][  T331] usb 4-1: config 6 has an invalid interface number: 194 but max is 0
[  373.225007][  T331] usb 4-1: config 6 has no interface number 0
[  373.231149][  T331] usb 4-1: config 6 interface 194 has no altsetting 0
[  373.238748][  T331] usb 4-1: config 6 has an invalid interface number: 194 but max is 0
[  373.247039][  T331] usb 4-1: config 6 has no interface number 0
[  373.253872][  T331] usb 4-1: config 6 interface 194 has no altsetting 0
[  373.261477][  T331] usb 4-1: config 6 has an invalid interface number: 194 but max is 0
[  373.269749][  T331] usb 4-1: config 6 has no interface number 0
[  373.276080][  T331] usb 4-1: config 6 interface 194 has no altsetting 0
[  373.283710][  T331] usb 4-1: config 6 has an invalid interface number: 194 but max is 0
[  373.291995][  T331] usb 4-1: config 6 has no interface number 0
[  373.298202][  T331] usb 4-1: config 6 interface 194 has no altsetting 0
[  373.305803][  T331] usb 4-1: config 6 has an invalid interface number: 194 but max is 0
[  373.314176][  T331] usb 4-1: config 6 has no interface number 0
[  373.320321][  T331] usb 4-1: config 6 interface 194 has no altsetting 0
[  373.327833][  T331] usb 4-1: config 6 has an invalid interface number: 194 but max is 0
[  373.336130][  T331] usb 4-1: config 6 has no interface number 0
[  373.342292][   T36] audit: type=1400 audit(2000000406.887:1169): avc:  denied  { setattr } for  pid=16545 comm="syz.9.5340" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  373.366032][  T331] usb 4-1: config 6 interface 194 has no altsetting 0
[  373.376223][  T472] usb 10-1: USB disconnect, device number 30
[  373.382671][  T331] usb 4-1: config 6 has an invalid interface number: 194 but max is 0
[  373.390868][  T331] usb 4-1: config 6 has no interface number 0
[  373.398185][  T331] usb 4-1: config 6 interface 194 has no altsetting 0
[  373.405803][  T331] usb 4-1: config 6 has an invalid interface number: 194 but max is 0
[  373.414066][  T331] usb 4-1: config 6 has no interface number 0
[  373.420225][  T331] usb 4-1: config 6 interface 194 has no altsetting 0
[  373.428519][  T331] usb 4-1: New USB device found, idVendor=23f2, idProduct=0083, bcdDevice=36.ed
[  373.437723][  T331] usb 4-1: New USB device strings: Mfr=203, Product=144, SerialNumber=213
[  373.446311][  T331] usb 4-1: Product: syz
[  373.450530][  T331] usb 4-1: Manufacturer: syz
[  373.455198][  T331] usb 4-1: SerialNumber: syz
[  373.677762][T16550] rust_binder: Write failure EFAULT in pid:544
[  373.710878][  T331] usb 4-1: USB disconnect, device number 53
[  374.026078][T16636] fuse: Invalid rootmode
[  374.043627][T16642] rust_binder: 688: no such ref 0
[  374.048729][T16642] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  374.048750][T16642] rust_binder: Read failure Err(EFAULT) in pid:688
[  374.058798][T16645] syz.9.5367: attempt to access beyond end of device
[  374.058798][T16645] loop9: rw=0, sector=0, nr_sectors = 1 limit=0
[  374.078241][T16645] FAT-fs (loop9): unable to read boot sector
[  374.134601][T16658] overlay: Bad value for 'verity'
[  374.155147][   T36] audit: type=1326 audit(2000000407.707:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16659 comm="syz.8.5373" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b1438eec9 code=0x0
[  374.216193][T16669] overlayfs: failed to clone lowerpath
[  374.238697][T16674] rust_binder: 16664 RLIMIT_NICE not set
[  374.241986][   T36] audit: type=1326 audit(2000000407.787:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16663 comm="syz.9.5375" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb3e58eec9 code=0x0
[  374.290144][T16674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:697
[  374.427715][T16689] rust_binder: Error while translating object.
[  374.446929][T16689] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  374.461091][T16689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:556
[  374.520611][T16696] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  374.537520][T16696] rust_binder: Error in use_page_slow: ESRCH
[  374.537545][T16696] rust_binder: use_range failure ESRCH
[  374.543867][T16696] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[  374.549362][T16696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  374.557386][T16696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:561
[  374.577924][T16691] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.594060][T16691] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.601373][T16691] bridge_slave_0: entered allmulticast mode
[  374.607660][T16691] bridge_slave_0: entered promiscuous mode
[  374.614173][T16691] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.621290][T16691] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.628357][T16691] bridge_slave_1: entered allmulticast mode
[  374.634732][T16691] bridge_slave_1: entered promiscuous mode
[  374.644624][T16703] netlink: 'syz.4.5386': attribute type 4 has an invalid length.
[  374.653005][T16703] netlink: 'syz.4.5386': attribute type 5 has an invalid length.
[  374.660841][T16703] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.5386'.
[  374.717280][T16691] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.724359][T16691] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.731671][T16691] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.738755][T16691] bridge0: port 1(bridge_slave_0) entered forwarding state
[  374.760246][ T1439] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.767641][ T1439] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.777423][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.784628][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  374.793580][ T1439] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.800632][ T1439] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.827673][T16691] veth0_vlan: entered promiscuous mode
[  374.839085][T16691] veth1_macvtap: entered promiscuous mode
[  374.890829][T16713] rust_binder: 2: no such ref 4
[  374.895969][T16713] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2
[  374.911625][T16716] netlink: 140 bytes leftover after parsing attributes in process `syz.8.5388'.
[  374.930029][T16716] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5388'.
[  374.954286][   T36] audit: type=1400 audit(2000000408.508:1172): avc:  denied  { accept } for  pid=16717 comm="syz.8.5389" path="socket:[79597]" dev="sockfs" ino=79597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  374.981864][T16718] rust_binder: Got transaction with invalid offset.
[  374.981893][T16718] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  374.988657][T16718] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7
[  375.165792][T16734] tipc: Started in network mode
[  375.179676][T16734] tipc: Node identity , cluster identity 4711
[  375.185878][T16734] tipc: Failed to set node id, please configure manually
[  375.193086][T16734] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  375.203906][T16734] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  375.204015][T16734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  375.210574][T16734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:19
[  375.246105][T16741] binder: Unknown parameter './file0'
[  375.346307][T16745] netlink: 188 bytes leftover after parsing attributes in process `syz.8.5398'.
[  375.373237][T16747] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true
[  375.373268][T16747] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  375.381468][T16747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:564
[  375.481990][T16759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.499765][T16759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.508747][T16759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.517939][T16759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.526716][T16759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.535233][T16759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.640817][   T45] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  375.720831][  T338] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  375.791930][   T45] usb 9-1: config 0 has an invalid descriptor of length 90, skipping remainder of the config
[  375.802230][   T45] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  375.811247][   T45] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  375.820331][   T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.829349][   T45] usb 9-1: config 0 descriptor??
[  375.870792][  T338] usb 4-1: Using ep0 maxpacket: 8
[  375.877838][  T338] usb 4-1: config 9 has an invalid interface number: 23 but max is 3
[  375.886049][  T338] usb 4-1: config 9 has an invalid interface number: 166 but max is 3
[  375.894265][  T338] usb 4-1: config 9 has an invalid interface number: 72 but max is 3
[  375.902428][  T338] usb 4-1: config 9 has an invalid interface number: 67 but max is 3
[  375.910540][  T338] usb 4-1: config 9 contains an unexpected descriptor of type 0x1, skipping
[  375.919287][  T338] usb 4-1: config 9 has no interface number 0
[  375.925541][  T338] usb 4-1: config 9 has no interface number 1
[  375.931924][  T338] usb 4-1: config 9 has no interface number 2
[  375.938036][  T338] usb 4-1: config 9 has no interface number 3
[  375.944179][  T338] usb 4-1: config 9 interface 23 altsetting 5 bulk endpoint 0xD has invalid maxpacket 1023
[  375.947241][   T36] audit: type=1326 audit(2000000409.498:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16729 comm="syz.9.5393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3e58eec9 code=0x7fc00000
[  375.954243][  T338] usb 4-1: config 9 interface 23 altsetting 5 endpoint 0xA has invalid wMaxPacketSize 0
[  375.987636][  T338] usb 4-1: config 9 interface 23 altsetting 5 has a duplicate endpoint with address 0xC, skipping
[  375.998380][  T338] usb 4-1: config 9 interface 23 altsetting 5 has a duplicate endpoint with address 0xE, skipping
[  376.009126][  T338] usb 4-1: config 9 interface 23 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  376.019956][  T338] usb 4-1: config 9 interface 23 altsetting 5 has an endpoint descriptor with address 0x61, changing to 0x1
[  376.031483][  T338] usb 4-1: config 9 interface 23 altsetting 5 endpoint 0x1 has an invalid bInterval 176, changing to 7
[  376.042788][  T338] usb 4-1: config 9 interface 23 altsetting 5 endpoint 0x1 has invalid maxpacket 58874, setting to 1024
[  376.054454][  T338] usb 4-1: config 9 interface 23 altsetting 5 has a duplicate endpoint with address 0xA, skipping
[  376.065216][  T338] usb 4-1: config 9 interface 23 altsetting 5 has 12 endpoint descriptors, different from the interface descriptor's value: 11
[  376.078514][  T338] usb 4-1: config 9 interface 166 altsetting 5 bulk endpoint 0x9 has invalid maxpacket 8
[  376.088799][  T338] usb 4-1: config 9 interface 166 altsetting 5 has a duplicate endpoint with address 0x6, skipping
[  376.099557][  T338] usb 4-1: config 9 interface 166 altsetting 5 has a duplicate endpoint with address 0x5, skipping
[  376.110383][  T338] usb 4-1: config 9 interface 166 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  376.121292][  T338] usb 4-1: config 9 interface 166 altsetting 5 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  376.132298][  T338] usb 4-1: config 9 interface 166 altsetting 5 has a duplicate endpoint with address 0xA, skipping
[  376.143027][  T338] usb 4-1: config 9 interface 166 altsetting 5 has a duplicate endpoint with address 0xE, skipping
[  376.153770][  T338] usb 4-1: config 9 interface 166 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  376.164707][  T338] usb 4-1: config 9 interface 166 altsetting 5 has a duplicate endpoint with address 0x6, skipping
[  376.175572][  T338] usb 4-1: config 9 interface 166 altsetting 5 has a duplicate endpoint with address 0xC, skipping
[  376.186329][  T338] usb 4-1: config 9 interface 166 altsetting 5 has a duplicate endpoint with address 0xC, skipping
[  376.197057][  T338] usb 4-1: config 9 interface 166 altsetting 5 has a duplicate endpoint with address 0x2, skipping
[  376.207784][  T338] usb 4-1: config 9 interface 166 altsetting 5 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  376.218778][  T338] usb 4-1: config 9 interface 166 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  376.229690][  T338] usb 4-1: config 9 interface 67 altsetting 4 has a duplicate endpoint with address 0x2, skipping
[  376.240343][  T338] usb 4-1: config 9 interface 67 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  376.251258][  T338] usb 4-1: config 9 interface 67 altsetting 4 has a duplicate endpoint with address 0x9, skipping
[  376.262080][  T338] usb 4-1: config 9 interface 67 altsetting 4 has a duplicate endpoint with address 0x5, skipping
[  376.272805][  T338] usb 4-1: config 9 interface 67 altsetting 4 endpoint 0x3 has an invalid bInterval 165, changing to 7
[  376.283891][  T338] usb 4-1: config 9 interface 67 altsetting 4 has a duplicate endpoint with address 0xF, skipping
[  376.294625][  T338] usb 4-1: config 9 interface 67 altsetting 4 has a duplicate endpoint with address 0x6, skipping
[  376.305256][  T338] usb 4-1: config 9 interface 67 altsetting 4 has a duplicate endpoint with address 0xA, skipping
[  376.315896][  T338] usb 4-1: config 9 interface 67 altsetting 4 has a duplicate endpoint with address 0x3, skipping
[  376.326564][  T338] usb 4-1: config 9 interface 67 altsetting 4 has a duplicate endpoint with address 0x5, skipping
[  376.337222][  T338] usb 4-1: config 9 interface 23 has no altsetting 0
[  376.343936][  T338] usb 4-1: config 9 interface 166 has no altsetting 0
[  376.350756][  T338] usb 4-1: config 9 interface 72 has no altsetting 0
[  376.357450][  T338] usb 4-1: config 9 interface 67 has no altsetting 0
[  376.365652][  T338] usb 4-1: New USB device found, idVendor=0eab, idProduct=c893, bcdDevice=82.c5
[  376.374824][  T338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.382964][  T338] usb 4-1: Product: ꯝ匐犇Ԣ⟚쯲ቬ瑫䵃ỵ䯞闍γꁉ㧠㖊⹲㰚뀤ꈳⶱ鵪ꓬᎪ雷뷃넣賒ト쳳럢䣣煙⩈稀疥뚍曘둹喟厶迺掴숋̒앞鷻캤㟀䍍皺㿨圓ⷤ獖靁⓱쨳菿쮇‗渹蕓쭳橘湅꿆줗㵳풍湌㝨칇㗖퉾濙犎ȸ꽹슭݀繖跫뗡胪㥵趹♒ㅙ縓砖王឵ߋ瞧᧫䑴꺻倐쿟
[  376.414573][  T338] usb 4-1: Manufacturer: 咷⯦剌Ţ纘鼲抖沊눕䞾」娘斜࿜꣚ϭ
[  376.423470][  T338] usb 4-1: SerialNumber: ⃍씌㭐㗿庁蝛譄绿᳁孺⭺ᙒ爏Ȃ怷֡䊳꩜㳖鲃햰꣏▸옿蝕뚆ꏖ扑⟁锕浭컕㰓재ꉿ뻬᱁歕ᴻ菻ᰈ媐Ɗ∧쾢㦼㮴⨐䑚酲쩇꺉璲噏鿹㋘⣳麀뿔⯦৮臰忸謒呟婑䌢쾛뇨ͭ璷箍逸痒હ揜蟓
[  376.450764][T16758] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  376.670250][  T338] usb 4-1: USB disconnect, device number 54
[  377.185117][T16798] rust_binder: Error while translating object.
[  377.185157][T16798] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  377.191413][T16798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:573
[  377.233200][T16802] netlink: 'syz.3.5416': attribute type 4 has an invalid length.
[  377.250075][T16802] netlink: 3581 bytes leftover after parsing attributes in process `syz.3.5416'.
[  377.610542][  T472] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  377.645428][   T36] audit: type=1400 audit(2000000411.194:1174): avc:  denied  { mounton } for  pid=16836 comm="syz.9.5428" path="/file0" dev="ramfs" ino=81041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  377.651976][T16837] netlink: 39 bytes leftover after parsing attributes in process `syz.9.5428'.
[  377.678602][T16837] fuse: Unknown parameter 'reotmode'
[  377.750428][  T472] usb 4-1: device descriptor read/64, error -71
[  377.990440][  T472] usb 4-1: device descriptor read/64, error -71
[  377.996772][  T331] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[  378.153106][  T331] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  378.162381][  T331] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.170627][  T331] usb 10-1: Product: syz
[  378.174934][  T331] usb 10-1: Manufacturer: syz
[  378.179647][  T331] usb 10-1: SerialNumber: syz
[  378.240438][  T472] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  378.370443][  T472] usb 4-1: device descriptor read/64, error -71
[  378.455326][  T331] usb 9-1: USB disconnect, device number 7
[  378.471392][T16847] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  378.471742][T16847] rust_binder: Error while translating object.
[  378.478344][T16847] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  378.484638][T16847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:35
[  378.550556][T16852] rust_binder: 37: no such ref 0
[  378.561791][T16852] rust_binder: 37: no such ref 2
[  378.620432][  T472] usb 4-1: device descriptor read/64, error -71
[  378.730517][  T472] usb usb4-port1: attempt power cycle
[  378.801090][T16854] 9pnet_fd: p9_fd_create_unix (16854): problem connecting socket: ./file0: -111
[  378.822045][T16856] netlink: 'syz.4.5435': attribute type 4 has an invalid length.
[  378.829868][T16856] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5435'.
[  378.873594][T16862] x_tables: duplicate underflow at hook 1
[  379.080446][  T472] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  379.101610][  T472] usb 4-1: device descriptor read/8, error -71
[  379.231482][  T472] usb 4-1: device descriptor read/8, error -71
[  379.417591][T16879] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  379.470421][  T472] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  379.501534][  T472] usb 4-1: device descriptor read/8, error -71
[  379.631553][  T472] usb 4-1: device descriptor read/8, error -71
[  379.670483][   T45] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[  379.740587][  T472] usb usb4-port1: unable to enumerate USB device
[  379.821865][   T45] usb 9-1: unable to get BOS descriptor or descriptor too short
[  379.830082][   T45] usb 9-1: not running at top speed; connect to a high speed hub
[  379.838600][   T45] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  379.848789][   T45] usb 9-1: config 1 interface 1 has no altsetting 1
[  379.857034][   T45] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  379.866202][   T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.874290][   T45] usb 9-1: Product: syz
[  379.878517][   T45] usb 9-1: Manufacturer: syz
[  379.883163][   T45] usb 9-1: SerialNumber: syz
[  380.361043][   T45] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found
[  380.368964][   T45] cdc_ncm 9-1:1.0: bind() failure
[  380.375332][   T45] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found
[  380.385694][   T45] cdc_ncm 9-1:1.1: bind() failure
[  380.406043][   T45] usb 9-1: USB disconnect, device number 8
[  380.462219][T16932] fuseblk: Bad value for 'fd'
[  380.490614][T16940] overlayfs: failed to clone upperpath
[  380.508933][T16942] input: syz0 as /devices/virtual/input/input44
[  380.534204][T16947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5466'.
[  380.558032][ T1439] Bluetooth: hci0: Frame reassembly failed (-84)
[  380.699087][T16957] rust_binder: Write failure EINVAL in pid:610
[  380.743822][T16961] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  380.750585][T16961] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  380.757099][T16961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:614
[  380.770404][  T331] usb 10-1: USB disconnect, device number 31
[  380.820854][T16965] rust_binder: Fixups oob 165 172 361 173
[  380.820883][T16965] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL }
[  380.826798][T16965] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  380.835304][T16965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:721
[  380.856268][T16968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:619
[  380.925227][T16972] bpf: Bad value for 'gid'
[  380.950832][T16972] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  380.951210][T16972] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  380.957876][T16972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:55
[  381.008236][T16975] binder: Unknown parameter 'm00000001777777777'
[  381.180459][   T45] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  381.201701][T16992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16992 comm=syz.9.5483
[  381.215148][T16992] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  381.215183][T16992] rust_binder: Read failure Err(EFAULT) in pid:736
[  381.223579][T16992] rust_binder: 736: no such ref 0
[  381.235289][T16992] rust_binder: 736: no such ref 2
[  381.240497][T16992] rust_binder: 16992 RLIMIT_NICE not set
[  381.307000][  T467] rust_binder: 16991: removing orphan mapping 0:104
[  381.330401][   T45] usb 4-1: Using ep0 maxpacket: 16
[  381.337963][   T45] usb 4-1: unable to get BOS descriptor or descriptor too short
[  381.346594][   T45] usb 4-1: config 9 has an invalid interface number: 63 but max is 1
[  381.354796][   T45] usb 4-1: config 9 has an invalid interface number: 159 but max is 1
[  381.363269][   T45] usb 4-1: config 9 has no interface number 0
[  381.369378][   T45] usb 4-1: config 9 has no interface number 1
[  381.375933][   T45] usb 4-1: config 9 interface 63 has no altsetting 0
[  381.388688][   T45] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=5c.87
[  381.390417][  T331] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  381.398017][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.413515][   T45] usb 4-1: Product: syz
[  381.417886][   T45] usb 4-1: Manufacturer: syz
[  381.426559][   T45] usb 4-1: SerialNumber: syz
[  381.550414][  T331] usb 9-1: device descriptor read/64, error -71
[  381.709766][   T45] usb 4-1: USB disconnect, device number 59
[  381.721846][T16324] udevd[16324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:9.63/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  381.800444][  T331] usb 9-1: device descriptor read/64, error -71
[  382.040425][  T331] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  382.180458][  T331] usb 9-1: device descriptor read/64, error -71
[  382.440407][  T331] usb 9-1: device descriptor read/64, error -71
[  382.550525][  T331] usb usb9-port1: attempt power cycle
[  382.560399][  T694] Bluetooth: hci0: command 0x1003 tx timeout
[  382.566434][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  382.910454][  T331] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  382.931523][  T331] usb 9-1: device descriptor read/8, error -71
[  383.061491][  T331] usb 9-1: device descriptor read/8, error -71
[  383.193576][T17052] binder: Bad value for 'max'
[  383.219120][T17054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:630
[  383.242803][T17056] can0: slcan on ptm1.
[  383.291075][T17056] can0 (unregistered): slcan off ptm1.
[  383.300604][  T331] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  383.341626][  T331] usb 9-1: device descriptor read/8, error -71
[  383.448456][  T472] rust_binder: 0: removing orphan mapping 0:8
[  383.485768][  T331] usb 9-1: device descriptor read/8, error -71
[  383.610803][  T331] usb usb9-port1: unable to enumerate USB device
[  383.791291][  T329] 0��{X��: left promiscuous mode
[  383.796501][  T329] bridge0: port 2(
30��{X��) entered disabled state
[  383.810852][  T329] bridge_slave_0: left allmulticast mode
[  383.816537][  T329] bridge_slave_0: left promiscuous mode
[  383.840506][  T329] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.952349][  T329] tipc: Left network mode
[  383.978587][  T329] veth1_macvtap: left promiscuous mode
[  383.990865][  T329] veth0_vlan: left promiscuous mode
[  384.080413][T17069] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.087485][T17069] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.095292][T17069] bridge_slave_0: entered allmulticast mode
[  384.105264][T17069] bridge_slave_0: entered promiscuous mode
[  384.116235][T17069] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.125797][T17069] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.133236][T17069] bridge_slave_1: entered allmulticast mode
[  384.139684][T17069] bridge_slave_1: entered promiscuous mode
[  384.307599][T17069] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.314710][T17069] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.322053][T17069] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.329108][T17069] bridge0: port 1(bridge_slave_0) entered forwarding state
[  384.449287][T17069] veth0_vlan: entered promiscuous mode
[  384.483501][T17069] veth1_macvtap: entered promiscuous mode
[  384.544656][T17094] 9pnet_fd: Insufficient options for proto=fd
[  384.584974][T17101] rust_binder: Error while translating object.
[  384.585017][T17101] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  384.602024][T17103] can0: slcan on ptm0.
[  384.617562][T17101] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4
[  384.643471][T17106] rust_binder: Write failure EINVAL in pid:6
[  384.672981][T17108] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5522'.
[  384.689523][T17102] can0 (unregistered): slcan off ptm0.
[  384.698245][   T36] audit: type=1400 audit(2000000419.230:1175): avc:  denied  { map } for  pid=17110 comm="syz.4.5523" path="socket:[82568]" dev="sockfs" ino=82568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  384.763428][T17119] binder: Unknown parameter 'defcontext01777777777777777777777'
[  384.772227][   T36] audit: type=1400 audit(2000000419.230:1176): avc:  denied  { read } for  pid=17110 comm="syz.4.5523" path="socket:[82568]" dev="sockfs" ino=82568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  385.046860][T17150] netlink: 'syz.3.5531': attribute type 15 has an invalid length.
[  385.118565][T17161] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  385.256009][T17171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:29
[  385.306496][T17169] rust_binder: Error in use_page_slow: ESRCH
[  385.306518][T17169] rust_binder: use_range failure ESRCH
[  385.312909][T17169] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false
[  385.318484][T17169] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  385.326595][T17169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:29
[  385.340393][T17175] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 4294967295
[  385.440423][   T45] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  385.570394][   T45] usb 4-1: device descriptor read/64, error -71
[  385.637106][T17181] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  385.810390][   T45] usb 4-1: device descriptor read/64, error -71
[  386.060394][   T45] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  386.101169][T17184] rust_binder: 33: no such ref 0
[  386.106397][T17184] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  386.113636][T17184] rust_binder: Write failure EINVAL in pid:33
[  386.190469][   T45] usb 4-1: device descriptor read/64, error -71
[  386.314633][T17210] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[  386.315980][T17208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:54
[  386.327072][T17208] rust_binder: Error while translating object.
[  386.336276][T17208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  386.342560][T17208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:54
[  386.455345][   T45] usb 4-1: device descriptor read/64, error -71
[  386.466400][T17230] SELinux: security_context_str_to_sid () failed with errno=-22
[  386.532334][T17241] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[  386.563463][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5564'.
[  386.574585][   T45] usb usb4-port1: attempt power cycle
[  386.771696][T17248] rust_binder: Write failure EFAULT in pid:96
[  386.773948][T17248] rust_binder: Write failure EFAULT in pid:96
[  386.940497][   T45] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  386.975074][   T45] usb 4-1: device descriptor read/8, error -71
[  386.997142][T17264] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  387.093171][   T36] audit: type=1326 audit(2000000421.640:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17266 comm="syz.4.5570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf4678eec9 code=0x0
[  387.123717][   T45] usb 4-1: device descriptor read/8, error -71
[  387.360416][   T45] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  387.381421][   T45] usb 4-1: device descriptor read/8, error -71
[  387.511626][   T45] usb 4-1: device descriptor read/8, error -71
[  387.620471][   T45] usb usb4-port1: unable to enumerate USB device
[  387.883335][   T36] audit: type=1400 audit(2000000422.430:1178): avc:  denied  { module_load } for  pid=17272 comm="syz.8.5572" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=1461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  388.011808][T17277] rust_binder: Error while translating object.
[  388.011842][T17277] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  388.018019][T17277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60
[  388.028208][T17279] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  388.290431][T15045] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  388.298033][T17298] rust_binder: Error while translating object.
[  388.304510][T17298] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  388.310778][T17298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:666
[  388.451719][T15045] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  388.472425][T15045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  388.484118][T15045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  388.493914][T15045] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  388.506919][T15045] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  388.516100][T15045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.524699][T15045] usb 5-1: config 0 descriptor??
[  388.622468][   T36] audit: type=1400 audit(2000000423.170:1179): avc:  denied  { mount } for  pid=17303 comm="syz.8.5584" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  388.640476][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  388.646130][   T36] audit: type=1400 audit(2000000423.180:1180): avc:  denied  { mounton } for  pid=17303 comm="syz.8.5584" path="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[  388.651930][  T694] Bluetooth: hci0: command 0x1003 tx timeout
[  388.698018][   T36] audit: type=1400 audit(2000000423.240:1181): avc:  denied  { unmount } for  pid=16691 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  388.702400][T17308] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5586'.
[  388.917830][T17312] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[  388.935058][T15045] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving
[  388.951478][T15045] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  388.981903][T15045] usb 5-1: USB disconnect, device number 69
[  388.995215][T17318] fido_id[17318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  389.020657][T17320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17320 comm=syz.4.5589
[  389.092445][T17322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72
[  389.157211][T17325] input: syz0 as /devices/virtual/input/input46
[  389.160448][  T472] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  389.330365][  T472] usb 9-1: Using ep0 maxpacket: 32
[  389.337544][  T472] usb 9-1: config 1 interface 0 altsetting 7 endpoint 0x2 has an invalid bInterval 145, changing to 11
[  389.348820][  T472] usb 9-1: config 1 interface 0 has no altsetting 0
[  389.357098][  T472] usb 9-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.40
[  389.366620][  T472] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.374840][  T472] usb 9-1: Product: syz
[  389.379178][  T472] usb 9-1: Manufacturer: syz
[  389.384107][  T472] usb 9-1: SerialNumber: syz
[  389.595622][T17312] rust_binder: Write failure EFAULT in pid:133
[  389.599170][   T36] audit: type=1400 audit(2000000424.140:1182): avc:  denied  { ioctl } for  pid=17311 comm="syz.8.5587" path="/dev/binderfs/binder1" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  389.602004][  T472] usbhid 9-1:1.0: can't add hid device: -71
[  389.620388][   T36] audit: type=1400 audit(2000000424.140:1183): avc:  denied  { read } for  pid=17337 comm="syz.9.5594" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  389.650274][  T472] usbhid 9-1:1.0: probe with driver usbhid failed with error -71
[  389.676374][  T472] usb 9-1: USB disconnect, device number 13
[  389.693839][   T36] audit: type=1400 audit(2000000424.140:1184): avc:  denied  { open } for  pid=17337 comm="syz.9.5594" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  389.721685][   T36] audit: type=1400 audit(2000000424.230:1185): avc:  denied  { ioctl } for  pid=17337 comm="syz.9.5594" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  389.888975][   T36] audit: type=1400 audit(2000000424.430:1186): avc:  denied  { read write } for  pid=17069 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  389.897492][T17343] rust_binder: Read failure Err(EAGAIN) in pid:75
[  389.913367][   T36] audit: type=1400 audit(2000000424.430:1187): avc:  denied  { open } for  pid=17069 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  389.942220][T17342] rust_binder: got new transaction with bad transaction stack
[  389.943876][T17342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75
[  389.944509][   T36] audit: type=1400 audit(2000000424.430:1188): avc:  denied  { ioctl } for  pid=17069 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  389.987029][   T36] audit: type=1400 audit(2000000424.440:1189): avc:  denied  { read } for  pid=17341 comm="syz.4.5595" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  390.010044][   T36] audit: type=1400 audit(2000000424.440:1190): avc:  denied  { open } for  pid=17341 comm="syz.4.5595" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  390.034229][   T36] audit: type=1400 audit(2000000424.440:1191): avc:  denied  { set_context_mgr } for  pid=17341 comm="syz.4.5595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  390.054254][   T36] audit: type=1400 audit(2000000424.470:1192): avc:  denied  { map } for  pid=17341 comm="syz.4.5595" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  390.078324][   T45] rust_binder: 0: removing orphan mapping 0:8
[  390.083995][   T36] audit: type=1400 audit(2000000424.470:1193): avc:  denied  { create } for  pid=17341 comm="syz.4.5595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  390.105254][   T36] audit: type=1400 audit(2000000424.470:1194): avc:  denied  { write } for  pid=17341 comm="syz.4.5595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  390.308637][T17355] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  390.435426][T17391] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.435608][T17391] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507)
[  390.437832][T17393] overlayfs: failed to resolve './file0/file3': -2
[  390.442519][T17391] rust_binder: Error while translating object.
[  390.460793][T17391] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  390.465705][T17393] rust_binder: pid 17393 performed invalid decrement on ref
[  390.466971][T17391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:147
[  390.525422][T17405] fuse: Bad value for 'fd'
[  390.630402][   T45] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  390.740400][  T331] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[  390.780812][   T45] usb 5-1: too many configurations: 151, using maximum allowed: 8
[  390.795702][   T45] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  390.805025][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  390.813274][   T45] usb 5-1: Product: syz
[  390.817446][   T45] usb 5-1: Manufacturer: syz
[  390.822103][   T45] usb 5-1: SerialNumber: syz
[  390.827635][   T45] usb 5-1: config 0 descriptor??
[  390.893225][  T331] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  390.902482][  T331] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.913160][  T331] usb 10-1: Product: syz
[  390.917473][  T331] usb 10-1: Manufacturer: syz
[  390.922471][  T331] usb 10-1: SerialNumber: syz
[  391.044430][T17380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  391.053421][T17380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.063150][T17380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=17380 comm=syz.4.5609
[  391.113909][T17422] rust_binder: Write failure EINVAL in pid:695
[  391.130017][T17424] veth1_macvtap: left promiscuous mode
[  391.141809][T17424] macsec0: entered promiscuous mode
[  391.148729][T17424] veth1_macvtap: entered promiscuous mode
[  391.154782][T17424] macsec0: left promiscuous mode
[  391.207781][   T45] usb 5-1: bad CDC descriptors
[  391.213946][   T45] usb 5-1: USB disconnect, device number 70
[  391.741432][T17467] netlink: 'syz.3.5639': attribute type 4 has an invalid length.
[  391.761012][T17467] netlink: 'syz.3.5639': attribute type 4 has an invalid length.
[  391.776589][T17472] rust_binder: Error while translating object.
[  391.776630][T17472] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  391.783593][T17472] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111
[  391.808735][T17474] input: syz0 as /devices/virtual/input/input48
[  391.825721][T17477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  391.831916][T17474] rust_binder: Error while translating object.
[  391.834097][T17474] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  391.835351][T17477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.840408][T17474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:702
[  392.095319][T17489] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5647'.
[  392.114985][T17494] overlayfs: failed to clone lowerpath
[  392.122136][T17494] netlink: 'syz.8.5648': attribute type 16 has an invalid length.
[  392.130034][T17494] netlink: 'syz.8.5648': attribute type 2 has an invalid length.
[  392.137806][T17494] netlink: 64086 bytes leftover after parsing attributes in process `syz.8.5648'.
[  392.150381][  T467] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  392.300369][  T467] usb 4-1: Using ep0 maxpacket: 32
[  392.306608][  T467] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  392.315012][  T467] usb 4-1: config 0 has no interface number 0
[  392.321184][  T467] usb 4-1: config 0 interface 184 has no altsetting 0
[  392.329510][  T467] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  392.338673][  T467] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.346714][  T467] usb 4-1: Product: syz
[  392.350929][  T467] usb 4-1: Manufacturer: syz
[  392.355535][  T467] usb 4-1: SerialNumber: syz
[  392.360755][  T467] usb 4-1: config 0 descriptor??
[  392.366579][  T467] smsc75xx v1.0.0
[  392.563265][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[  392.652568][T17509] IPv6: NLM_F_CREATE should be specified when creating new route
[  392.971157][  T467] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  392.982087][  T467] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  393.192245][T17485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  393.200890][T17485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  393.209308][  T467] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32
[  393.220228][  T467] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32
[  393.229852][  T467] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[  393.239320][  T467] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32
[  393.510846][  T331] usb 10-1: USB disconnect, device number 32
[  393.552827][T17558] fuse: Unknown parameter '~'
[  393.743837][  T329] Bluetooth: hci1: Frame reassembly failed (-84)
[  394.640364][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  394.640610][T17576] Bluetooth: hci0: command 0x1003 tx timeout
[  394.920968][  T467] usb 4-1: USB disconnect, device number 64
[  395.760378][  T694] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  395.760397][   T54] Bluetooth: hci1: command 0x1003 tx timeout
[  400.490717][T17594] kernel profiling enabled (shift: 63)
[  400.496939][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5676'.
[  400.506534][T17594] profiling shift: 63 too large
[  400.515274][ T1439] Bluetooth: hci0: Frame reassembly failed (-84)
[  400.527976][   T36] kauditd_printk_skb: 92 callbacks suppressed
[  400.527995][   T36] audit: type=1400 audit(2000000435.080:1287): avc:  denied  { ioctl } for  pid=17584 comm="syz.4.5675" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  400.621341][   T36] audit: type=1400 audit(2000000435.160:1288): avc:  denied  { write } for  pid=17603 comm="syz.3.5679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  400.677711][T17611] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  400.688906][   T36] audit: type=1400 audit(2000000435.230:1289): avc:  denied  { ioctl } for  pid=17613 comm="syz.8.5682" path="socket:[86324]" dev="sockfs" ino=86324 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  400.736208][   T36] audit: type=1400 audit(2000000435.280:1290): avc:  denied  { watch watch_reads } for  pid=17615 comm="syz.8.5683" path="/91" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  400.760220][T17618] overlayfs: failed to clone upperpath
[  400.766720][   T36] audit: type=1400 audit(2000000435.320:1291): avc:  denied  { setopt } for  pid=17615 comm="syz.8.5683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  400.793963][   T36] audit: type=1400 audit(2000000435.320:1292): avc:  denied  { ioctl } for  pid=17615 comm="syz.8.5683" path="socket:[86330]" dev="sockfs" ino=86330 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  400.828067][   T36] audit: type=1400 audit(2000000435.320:1293): avc:  denied  { read } for  pid=17617 comm="syz.3.5684" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  400.852382][   T36] audit: type=1400 audit(2000000435.320:1294): avc:  denied  { open } for  pid=17617 comm="syz.3.5684" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  400.878102][   T36] audit: type=1400 audit(2000000435.320:1295): avc:  denied  { ioctl } for  pid=17617 comm="syz.3.5684" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  400.903220][   T36] audit: type=1400 audit(2000000435.320:1296): avc:  denied  { ioctl } for  pid=17617 comm="syz.3.5684" path="socket:[85628]" dev="sockfs" ino=85628 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  400.936955][T17632] fuse: Unknown parameter '0x0000000000000004'
[  401.207509][T17656] rust_binder: Error while translating object.
[  401.207545][T17656] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  401.213853][T17656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:136
[  401.474639][T17663] 9pnet_fd: Insufficient options for proto=fd
[  401.557719][T17666] netlink: 'syz.3.5697': attribute type 15 has an invalid length.
[  401.605612][T17676] overlayfs: failed to clone upperpath
[  401.657664][T17678] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5701'.
[  401.920389][  T467] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  402.070351][  T467] usb 4-1: Using ep0 maxpacket: 16
[  402.076845][  T467] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  402.087549][  T467] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  402.097529][  T467] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  402.110628][  T467] usb 4-1: config 1 interface 0 has no altsetting 0
[  402.118866][  T467] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  402.128249][  T467] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.136482][  T467] usb 4-1: Product: syz
[  402.141155][  T467] usb 4-1: Manufacturer: syz
[  402.145782][  T467] usb 4-1: SerialNumber: syz
[  402.320344][  T472] usb 5-1: new low-speed USB device number 72 using dummy_hcd
[  402.362530][  T467] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 65 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  402.501423][  T472] usb 5-1: No LPM exit latency info found, disabling LPM.
[  402.509707][  T472] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  402.518474][  T472] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  402.528612][  T472] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  402.537611][  T472] usb 5-1: too many endpoints for config 1 interface 1 altsetting 4: 243, using maximum allowed: 30
[  402.548453][  T472] usb 5-1: config 1 interface 1 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 243
[  402.561560][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  402.567587][  T694] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  402.567598][  T472] usb 5-1: config 1 interface 1 has no altsetting 0
[  402.584392][T15045] usb 4-1: USB disconnect, device number 65
[  402.593476][  T472] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  402.602601][  T472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.610671][  T472] usb 5-1: Product: ॼ䣇⹬Ⰽ燔취ｷ낆ꖱﱹ킯졋䇏䕛偸衫Ꝑྶ䊛ऩ䃜炁䢨쳯Ⲋ击㷮꤮Ǥ偬굳斅魞湰Ӗ鱎ᇒݵ٠憈큏遜浪정佨緢ꗊ
[  402.628702][  T472] usb 5-1: Manufacturer: 棣㊱፩ꥋ碿ݯ켁矶矽ﭕ჻㡗柳箿淘茘ᓥ塞꿖ꡨ뷿
[  402.638861][  T472] usb 5-1: SerialNumber: ꣰佛ᡅ꛴䟆Ī⼝럱⼘끋Ȗ뀓♥脼焝뺆ᅩ狈芳︊ᒗ昛Ꮯ鞳橅䆵噆鎧龙퐀緶뫧댃ꖭ等揩죁䕁璓緰塚ﲐ阬⴫㬎㌬慵좟꤈㏐㋁栗䙈쑻賿貳䶠鋋협苭㍃悿妮ﴍ秨햘찯鍓妦⢎ꛇ斺䈭ё臛궃㛢錓
[  402.783546][T17680] usblp0: removed
[  402.871671][  T472] usb 5-1: 0:2 : does not exist
[  402.879430][  T472] usb 5-1: USB disconnect, device number 72
[  403.020347][T15045] usb 4-1: new full-speed USB device number 66 using dummy_hcd
[  403.171535][T15045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  403.184541][T15045] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  403.197600][T15045] usb 4-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00
[  403.206922][T15045] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.216291][T15045] usb 4-1: config 0 descriptor??
[  403.389666][T17698] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  403.389686][T17698] rust_binder: Read failure Err(EFAULT) in pid:144
[  403.404695][T17698] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  403.680983][  T472] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  403.826609][T15045] usb 4-1: string descriptor 0 read error: -71
[  403.840380][  T472] usb 5-1: Using ep0 maxpacket: 32
[  403.845817][T15045] uclogic 0003:5543:0045.0019: failed retrieving string descriptor #200: -71
[  403.860400][T15045] uclogic 0003:5543:0045.0019: failed retrieving pen parameters: -71
[  403.868816][T15045] uclogic 0003:5543:0045.0019: failed probing pen v2 parameters: -71
[  403.877458][T15045] uclogic 0003:5543:0045.0019: failed probing parameters: -71
[  403.885614][  T472] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  403.893925][  T472] usb 5-1: config 0 has no interface number 0
[  403.900078][  T472] usb 5-1: config 0 interface 184 has no altsetting 0
[  403.907856][T15045] uclogic 0003:5543:0045.0019: probe with driver uclogic failed with error -71
[  403.918304][  T472] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  403.932207][  T472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.940576][T15045] usb 4-1: USB disconnect, device number 66
[  403.948192][  T472] usb 5-1: Product: syz
[  403.958746][  T472] usb 5-1: Manufacturer: syz
[  403.963878][  T472] usb 5-1: SerialNumber: syz
[  403.973672][  T472] usb 5-1: config 0 descriptor??
[  403.990483][  T472] smsc75xx v1.0.0
[  404.200057][  T472] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  404.236792][  T472] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  404.254356][  T472] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  404.285686][  T472] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  404.303895][  T472] usb 5-1: USB disconnect, device number 73
[  404.610328][  T472] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  404.707666][T17740] rust_binder: Error while translating object.
[  404.707708][T17740] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  404.714060][T17740] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:759
[  404.736436][T17742] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  404.760395][  T472] usb 5-1: Using ep0 maxpacket: 32
[  404.775120][  T472] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  404.797578][  T472] usb 5-1: config 0 has no interface number 0
[  404.804531][  T472] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  404.826526][  T472] usb 5-1: config 0 interface 85 has no altsetting 0
[  404.836766][  T472] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  404.848298][  T472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.856519][  T472] usb 5-1: Product: syz
[  404.860929][  T472] usb 5-1: Manufacturer: syz
[  404.865567][  T472] usb 5-1: SerialNumber: syz
[  404.871291][  T472] usb 5-1: config 0 descriptor??
[  404.923286][T17759] PM: Enabling pm_trace changes system date and time during resume.
[  404.923286][T17759] PM: Correct system time has to be restored manually after resume.
[  405.117385][T17763] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  405.230554][T17770] incfs: Error accessing: /dev/nbd9.
[  405.235969][T17770] incfs: mount failed -2
[  405.492058][T17766] devpts: called with bogus options
[  405.529105][T17781] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  405.529275][T17781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:860
[  405.598574][   T36] kauditd_printk_skb: 37 callbacks suppressed
[  405.598596][   T36] audit: type=1400 audit(2000000696.147:1334): avc:  denied  { unmount } for  pid=12650 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  405.645671][   T36] audit: type=1400 audit(2000000696.197:1335): avc:  denied  { create } for  pid=17785 comm="syz.3.5737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  405.665883][   T36] audit: type=1400 audit(2000000696.207:1336): avc:  denied  { connect } for  pid=17785 comm="syz.3.5737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  405.719153][   T36] audit: type=1400 audit(2000000696.267:1337): avc:  denied  { nlmsg_read } for  pid=17791 comm="syz.3.5740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  405.784410][   T36] audit: type=1400 audit(2000000696.337:1338): avc:  denied  { name_bind } for  pid=17797 comm="syz.8.5741" src=3684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  405.806095][   T45] usb 10-1: new high-speed USB device number 33 using dummy_hcd
[  405.806237][   T36] audit: type=1400 audit(2000000696.337:1339): avc:  denied  { node_bind } for  pid=17797 comm="syz.8.5741" src=3684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  405.928411][T17803] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5743'.
[  405.960335][   T45] usb 10-1: Using ep0 maxpacket: 16
[  405.967232][   T45] usb 10-1: config 0 has an invalid interface number: 109 but max is 0
[  405.986931][   T45] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  405.997357][T17832] bpf: Bad value for 'gid'
[  405.997389][   T45] usb 10-1: config 0 has no interface number 0
[  406.015481][   T45] usb 10-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e
[  406.026498][   T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.034706][   T45] usb 10-1: Product: syz
[  406.039053][   T45] usb 10-1: Manufacturer: syz
[  406.043793][   T45] usb 10-1: SerialNumber: syz
[  406.049462][   T45] usb 10-1: config 0 descriptor??
[  406.079129][   T36] audit: type=1326 audit(2000000696.627:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17833 comm="syz.3.5753" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fddac98eec9 code=0x0
[  406.266547][   T45] rndis_host 10-1:0.109: More than one union descriptor, skipping ...
[  406.278476][   T45] usb 10-1: bad CDC descriptors
[  406.283774][   T45] cdc_acm 10-1:0.109: More than one union descriptor, skipping ...
[  406.293268][   T45] usb 10-1: USB disconnect, device number 33
[  406.573722][T17854] fuseblk: Bad value for 'fd'
[  406.593320][T17858] incfs: Error accessing: ./file0.
[  406.598496][T17858] incfs: mount failed -20
[  406.604734][T17858] 9pnet_fd: p9_fd_create_tcp (17858): problem connecting socket to 127.0.0.1
[  406.630345][   T45] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[  406.780360][   T45] usb 10-1: Using ep0 maxpacket: 32
[  406.786902][   T45] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  406.798019][   T45] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  406.807932][   T45] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  406.817178][   T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.826032][   T45] usb 10-1: config 0 descriptor??
[  406.948686][   T36] audit: type=1400 audit(2000000697.497:1341): avc:  denied  { write } for  pid=17863 comm="syz.3.5763" path="socket:[88126]" dev="sockfs" ino=88126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  407.068394][   T36] audit: type=1400 audit(2000000697.617:1342): avc:  denied  { read } for  pid=17867 comm="syz.3.5765" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  407.092192][   T36] audit: type=1400 audit(2000000697.617:1343): avc:  denied  { open } for  pid=17867 comm="syz.3.5765" path="/265/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  407.245728][   T45] koneplus 0003:1E7D:2D51.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.9-1/input0
[  407.295976][  T472] usb 5-1: USB disconnect, device number 74
[  407.303078][T17875] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  407.305617][T17875] rust_binder: Got transaction with invalid offset.
[  407.314018][T17875] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  407.321118][T17875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:799
[  407.391836][T17890] netlink: 'syz.3.5771': attribute type 1 has an invalid length.
[  407.409997][T17890] __vm_enough_memory: pid: 17890, comm: syz.3.5771, bytes: 18014402804453376 not enough memory for the allocation
[  407.539652][T17902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5776'.
[  407.578286][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  407.586965][T17909] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2
[  407.662610][   T45] usb 10-1: USB disconnect, device number 34
[  408.231450][T17929] binder: Bad value for 'stats'
[  408.614406][T17936] fuse: Unknown parameter 'dont_measure'
[  409.062829][T17938] __vm_enough_memory: pid: 17938, comm: syz.9.5787, bytes: 18014402804453376 not enough memory for the allocation
[  409.600396][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  409.606608][  T694] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  409.796487][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.803776][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.811173][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.818482][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.825757][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.833043][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.840491][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.847736][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.855091][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.862365][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.869879][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.877225][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.884502][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.891771][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.899012][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.906327][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.913615][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.921032][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.928274][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.935679][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.942974][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.950313][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.957539][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.964804][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.972180][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.979441][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.986754][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  409.993936][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  410.001167][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  410.008369][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  410.015613][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  410.022807][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  410.030033][T17962] overlay: Unknown parameter 'euid<00000000000000049663'
[  410.050489][T17965] overlayfs: overlapping lowerdir path
[  410.172888][T17979] random: crng reseeded on system resumption
[  410.218248][T17989] fuse: Bad value for 'fd'
[  410.566840][T18008] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  410.630301][   T36] kauditd_printk_skb: 16 callbacks suppressed
[  410.630323][   T36] audit: type=1400 audit(2000000701.177:1360): avc:  denied  { name_bind } for  pid=18011 comm="syz.4.5812" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  410.678692][T18021] rust_binder: 18010 RLIMIT_NICE not set
[  410.679652][T18010] netlink: 328 bytes leftover after parsing attributes in process `syz.3.5811'.
[  410.683171][T18023] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[  410.715754][   T36] audit: type=1400 audit(2000000701.267:1361): avc:  denied  { read write } for  pid=18024 comm="syz.3.5816" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  410.727426][T18027] overlayfs: overlapping lowerdir path
[  410.747527][   T36] audit: type=1400 audit(2000000701.267:1362): avc:  denied  { open } for  pid=18024 comm="syz.3.5816" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  410.765348][T18029] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5818'.
[  410.781193][T18029] tc_dump_action: action bad kind
[  410.788310][T18029] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[  410.801369][T18031] rust_binder: 187: no such ref 0
[  410.937606][   T36] audit: type=1400 audit(2000000701.487:1363): avc:  denied  { ioctl } for  pid=18043 comm="syz.9.5825" path="socket:[87726]" dev="sockfs" ino=87726 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  411.023932][T18051] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[  411.031280][T18051] rust_binder: 193: no such ref 2
[  411.075306][T18052] rust_binder: 18051 RLIMIT_NICE not set
[  411.110354][  T467] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  411.280375][  T467] usb 4-1: Using ep0 maxpacket: 32
[  411.286902][  T467] usb 4-1: config 0 has an invalid interface number: 196 but max is 0
[  411.295183][  T467] usb 4-1: config 0 has no interface number 0
[  411.301364][  T467] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  411.311376][  T467] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  411.321366][  T467] usb 4-1: config 0 interface 196 has no altsetting 0
[  411.329850][  T467] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  411.338978][  T467] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.347078][  T467] usb 4-1: Product: syz
[  411.351332][  T467] usb 4-1: Manufacturer: syz
[  411.355994][  T467] usb 4-1: SerialNumber: syz
[  411.366755][  T467] usb 4-1: config 0 descriptor??
[  411.502419][   T36] audit: type=1400 audit(2000000702.057:1364): avc:  denied  { bind } for  pid=18053 comm="syz.8.5827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  411.596467][  T467] ipheth 4-1:0.196: Unable to find endpoints
[  411.623340][  T467] usb 4-1: USB disconnect, device number 67
[  411.734036][   T36] audit: type=1400 audit(2000000702.287:1365): avc:  denied  { create } for  pid=18071 comm="syz.9.5834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  411.755899][   T36] audit: type=1400 audit(2000000702.307:1366): avc:  denied  { connect } for  pid=18071 comm="syz.9.5834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  411.783350][   T36] audit: type=1400 audit(2000000702.307:1367): avc:  denied  { ioctl } for  pid=18071 comm="syz.9.5834" path="socket:[87817]" dev="sockfs" ino=87817 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  411.867853][  T467] rust_binder: 18045: removing orphan mapping 0:4240
[  411.879362][T18076] rust_binder: Failed copying remainder into alloc: EFAULT
[  411.879383][T18076] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  411.886840][T18076] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  411.895177][T18076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:198
[  411.968719][T18080] rust_binder: 18079 RLIMIT_NICE not set
[  411.978267][T18079] rust_binder: Error while translating object.
[  411.984025][T18079] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  411.990706][T18079] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender.
[  412.000139][T18079] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:201
[  412.023304][T18082] netlink: 'syz.4.5837': attribute type 32 has an invalid length.
[  412.051211][T18082] __vm_enough_memory: pid: 18082, comm: syz.4.5837, bytes: 18014402804453376 not enough memory for the allocation
[  412.063406][T18083] __vm_enough_memory: pid: 18083, comm: syz.4.5837, bytes: 18014402804453376 not enough memory for the allocation
[  412.138126][   T36] audit: type=1400 audit(2000000702.687:1368): avc:  denied  { append } for  pid=18087 comm="syz.3.5839" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  412.174508][   T36] audit: type=1400 audit(2000000702.727:1369): avc:  denied  { map } for  pid=18089 comm="syz.4.5840" path="socket:[87934]" dev="sockfs" ino=87934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  412.848777][T18138] overlayfs: failed to clone upperpath
[  412.855896][T18139] overlayfs: failed to clone upperpath
[  413.250379][  T468] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  413.390485][T18160] vlan0: entered promiscuous mode
[  413.395667][T18160] vlan0: entered allmulticast mode
[  413.400873][T18160] veth0_vlan: entered allmulticast mode
[  413.401716][  T468] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  413.416646][  T468] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  413.426322][  T468] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.450586][  T468] usb 5-1: config 0 descriptor??
[  413.550747][  T472] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  413.597225][T18190] netlink: 188 bytes leftover after parsing attributes in process `syz.8.5875'.
[  413.643303][T18199] SELinux:  Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped).
[  413.662599][T18153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:221
[  413.669099][  T468] usb 5-1: USB disconnect, device number 75
[  413.711542][  T472] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  413.727693][  T472] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  413.738974][  T472] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  413.750159][  T472] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  413.763787][  T472] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  413.772910][  T472] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.781602][  T472] usb 4-1: config 0 descriptor??
[  413.786903][T18157] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  414.200502][  T472] usbhid 4-1:0.0: can't add hid device: -71
[  414.206731][  T472] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  414.215753][  T472] usb 4-1: USB disconnect, device number 68
[  414.280894][  T467] kernel read not supported for file inotify (pid: 467 comm: kworker/1:4)
[  414.345659][T18221] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  414.480586][   T45] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  414.630350][   T45] usb 5-1: Using ep0 maxpacket: 16
[  414.636627][   T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  414.646855][   T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  414.657431][   T45] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[  414.666569][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.674644][   T45] usb 5-1: Product: syz
[  414.678827][   T45] usb 5-1: Manufacturer: syz
[  414.683618][   T45] usb 5-1: SerialNumber: syz
[  414.688847][   T45] usb 5-1: config 0 descriptor??
[  414.715049][T18226] rust_binder: Error while translating object.
[  414.715099][T18226] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  414.721448][T18226] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:872
[  414.743741][T18228] rust_binder: 874: no such ref 0
[  415.239625][T18241] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.246712][T18241] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.253933][T18241] bridge_slave_0: entered allmulticast mode
[  415.260519][T18241] bridge_slave_0: entered promiscuous mode
[  415.266990][T18241] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.274183][T18241] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.281327][T18241] bridge_slave_1: entered allmulticast mode
[  415.287657][T18241] bridge_slave_1: entered promiscuous mode
[  415.348010][T18241] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.355108][T18241] bridge0: port 2(bridge_slave_1) entered forwarding state
[  415.362425][T18241] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.369460][T18241] bridge0: port 1(bridge_slave_0) entered forwarding state
[  415.394776][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.402884][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.411669][   T45] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  415.424401][   T45] asix 5-1:0.0: probe with driver asix failed with error -71
[  415.424948][  T329] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.434315][   T45] usb 5-1: USB disconnect, device number 76
[  415.439062][  T329] bridge0: port 1(bridge_slave_0) entered forwarding state
[  415.453673][  T329] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.460758][  T329] bridge0: port 2(bridge_slave_1) entered forwarding state
[  415.483417][T18241] veth0_vlan: entered promiscuous mode
[  415.496718][T18241] veth1_macvtap: entered promiscuous mode
[  415.840532][  T471] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  416.000357][  T471] usb 4-1: Using ep0 maxpacket: 16
[  416.007021][  T471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  416.017979][  T471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  416.029589][  T471] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  416.042639][  T471] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  416.051713][  T471] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.060859][  T471] usb 4-1: config 0 descriptor??
[  416.121146][   T36] kauditd_printk_skb: 21 callbacks suppressed
[  416.121166][   T36] audit: type=1400 audit(2000000706.677:1391): avc:  denied  { unmount } for  pid=17069 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  416.130944][T18285] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  416.193844][   T36] audit: type=1400 audit(2000000706.747:1392): avc:  denied  { create } for  pid=18289 comm="syz.4.5906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  416.197825][T18290] binder: Unknown parameter '00000000000000000000'
[  416.242464][T18292] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5907'.
[  416.252648][   T36] audit: type=1400 audit(2000000706.807:1393): avc:  denied  { mounton } for  pid=18291 comm="syz.4.5907" path="/proc/247/cgroup" dev="proc" ino=89412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  416.275878][   T36] audit: type=1400 audit(2000000706.807:1394): avc:  denied  { remount } for  pid=18291 comm="syz.4.5907" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1
[  416.301346][   T36] audit: type=1400 audit(2000000706.857:1395): avc:  denied  { read } for  pid=18291 comm="syz.4.5907" path="socket:[89420]" dev="sockfs" ino=89420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  416.499140][  T471] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.001B/input/input49
[  416.523871][  T471] appleir 0003:05AC:8241.001B: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0
[  416.545470][   T36] audit: type=1400 audit(2000000707.097:1396): avc:  denied  { create } for  pid=18309 comm="syz.8.5912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  416.641251][   T36] audit: type=1400 audit(2000000707.197:1397): avc:  denied  { map } for  pid=18314 comm="syz.8.5914" path="pipe:[90488]" dev="pipefs" ino=90488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  416.753590][  T472] usb 4-1: USB disconnect, device number 69
[  417.250486][T18343] netlink: 208 bytes leftover after parsing attributes in process `syz.8.5924'.
[  417.312066][   T36] audit: type=1400 audit(2000000707.867:1398): avc:  denied  { connect } for  pid=18346 comm="syz.9.5926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  417.340332][  T471] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  417.348678][T18347] tipc: Cannot configure node identity twice
[  417.388314][   T36] audit: type=1400 audit(2000000707.937:1399): avc:  denied  { setattr } for  pid=18344 comm="syz.3.5925" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  417.420741][   T36] audit: type=1400 audit(2000000707.977:1400): avc:  denied  { create } for  pid=18350 comm="syz.8.5927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  417.501552][  T471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  417.512560][  T471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  417.514390][T18353] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  417.522406][T18353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17
[  417.522614][  T471] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  417.550246][  T471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.559275][  T471] usb 5-1: config 0 descriptor??
[  417.766652][  T471] arvo 0003:1E7D:30D4.001C: unknown main item tag 0x0
[  417.773525][  T471] arvo 0003:1E7D:30D4.001C: unknown main item tag 0x0
[  417.780395][  T471] arvo 0003:1E7D:30D4.001C: unknown main item tag 0x0
[  417.787300][  T471] arvo 0003:1E7D:30D4.001C: unknown main item tag 0x0
[  417.794136][  T471] arvo 0003:1E7D:30D4.001C: unknown main item tag 0x0
[  417.800982][  T471] arvo 0003:1E7D:30D4.001C: unknown main item tag 0x0
[  417.807765][  T471] arvo 0003:1E7D:30D4.001C: unknown main item tag 0x0
[  417.815431][  T471] arvo 0003:1E7D:30D4.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0
[  418.093538][T18360] veth0_to_team: mtu greater than device maximum
[  418.093791][  T468] usb 5-1: USB disconnect, device number 77
[  418.101021][T18361] overlayfs: failed to clone upperpath
[  418.111672][T18360] overlayfs: failed to clone upperpath
[  418.243989][T18383] __vm_enough_memory: pid: 18383, comm: syz.8.5938, bytes: 21199906258944 not enough memory for the allocation
[  418.460380][T15045] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  418.611468][T15045] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  418.620836][T15045] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.629523][T15045] usb 4-1: config 0 descriptor??
[  418.635366][T15045] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  418.643183][T15045] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  418.680042][T18391] SELinux:  policydb table sizes (8,9) do not match mine (8,7)
[  418.687702][T18391] SELinux: failed to load policy
[  418.693318][T18391] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  418.941869][   T45] usb 4-1: USB disconnect, device number 70
[  418.948237][   T45] ftdi_sio 4-1:0.0: device disconnected
[  419.820353][T15045] usb 5-1: new full-speed USB device number 78 using dummy_hcd
[  419.971514][T15045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  419.982366][T15045] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  419.995209][T15045] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  420.004316][T15045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.012998][T15045] usb 5-1: config 0 descriptor??
[  420.018269][T18409] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  420.427346][T15045] microsoft 0003:045E:009D.001D: unbalanced collection at end of report description
[  420.437013][T15045] microsoft 0003:045E:009D.001D: parse failed
[  420.443164][T15045] microsoft 0003:045E:009D.001D: probe with driver microsoft failed with error -22
[  420.702042][   T45] usb 5-1: USB disconnect, device number 78
[  421.266146][   T36] kauditd_printk_skb: 11 callbacks suppressed
[  421.266166][   T36] audit: type=1400 audit(2000000711.817:1412): avc:  denied  { write } for  pid=18413 comm="syz.4.5948" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  421.297285][   T36] audit: type=1326 audit(2000000711.827:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18384 comm="syz.8.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1718eec9 code=0x7fc00000
[  421.328088][T18417] __vm_enough_memory: pid: 18417, comm: syz.3.5949, bytes: 21200395284480 not enough memory for the allocation
[  421.419993][T18424] netlink: 'syz.8.5952': attribute type 4 has an invalid length.
[  421.429562][T18426] netlink: 'syz.8.5952': attribute type 4 has an invalid length.
[  421.438332][T18424] netlink: 'syz.8.5952': attribute type 4 has an invalid length.
[  421.457883][T18428] veth1: entered allmulticast mode
[  421.500355][T15045] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  421.630354][T15045] usb 5-1: device descriptor read/64, error -71
[  421.640386][   T45] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  421.790330][   T45] usb 4-1: Using ep0 maxpacket: 32
[  421.796741][   T45] usb 4-1: config index 0 descriptor too short (expected 155, got 27)
[  421.805001][   T45] usb 4-1: config 0 has an invalid interface number: 196 but max is 0
[  421.813222][   T45] usb 4-1: config 0 has no interface number 0
[  421.819314][   T45] usb 4-1: config 0 interface 196 altsetting 227 endpoint 0x82 has invalid wMaxPacketSize 0
[  421.830035][   T45] usb 4-1: config 0 interface 196 has no altsetting 0
[  421.838302][   T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=d2.7f
[  421.847438][   T45] usb 4-1: New USB device strings: Mfr=185, Product=212, SerialNumber=3
[  421.855902][   T45] usb 4-1: Product: syz
[  421.860086][   T45] usb 4-1: Manufacturer: syz
[  421.864712][   T45] usb 4-1: SerialNumber: syz
[  421.870022][   T45] usb 4-1: config 0 descriptor??
[  421.880331][T15045] usb 5-1: device descriptor read/64, error -71
[  422.077090][   T45] ipheth 4-1:0.196: Unable to find alternate settings interface
[  422.086329][   T45] usb 4-1: USB disconnect, device number 71
[  422.120397][T15045] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  422.250366][T15045] usb 5-1: device descriptor read/64, error -71
[  422.260036][T18435] /dev/loop0: Can't lookup blockdev
[  422.286492][   T36] audit: type=1400 audit(2000000712.837:1414): avc:  denied  { map } for  pid=18439 comm="syz.9.5958" path="socket:[89743]" dev="sockfs" ino=89743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  422.309983][T18427] veth1: left allmulticast mode
[  422.310022][   T36] audit: type=1400 audit(2000000712.837:1415): avc:  denied  { read } for  pid=18439 comm="syz.9.5958" path="socket:[89743]" dev="sockfs" ino=89743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  422.429420][T18474] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5970'.
[  422.486944][T18483] netlink: 220 bytes leftover after parsing attributes in process `syz.9.5974'.
[  422.496190][T15045] usb 5-1: device descriptor read/64, error -71
[  422.610419][T15045] usb usb5-port1: attempt power cycle
[  422.640571][T18489] overlayfs: conflicting options: verity=require,redirect_dir=follow
[  422.670473][   T36] audit: type=1400 audit(2000000713.217:1416): avc:  denied  { map } for  pid=18488 comm="syz.8.5976" path="/209/file0" dev="tmpfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  422.705015][   T36] audit: type=1400 audit(2000000713.247:1417): avc:  denied  { setattr } for  pid=18491 comm="syz.3.5977" name="" dev="pipefs" ino=90973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  422.807543][   T36] audit: type=1400 audit(2000000713.357:1418): avc:  denied  { create } for  pid=18502 comm="syz.3.5979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  422.870435][T18507] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  422.897049][T18508] ------------[ cut here ]------------
[  422.902621][T18508] WARNING: CPU: 1 PID: 18508 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0
[  422.912172][T18508] Modules linked in:
[  422.916202][T18508] CPU: 1 UID: 0 PID: 18508 Comm: syz.8.5984 Not tainted syzkaller #0 98bacdaf52065bb91416bd5578e49f5aee2639ea
[  422.928255][T18508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  422.938545][T18508] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0
[  422.944534][T18508] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 32 24 ee 05 00 0f 85 be 00 00 00 c6 05 25 24 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24
[  422.964242][T18508] RSP: 0018:ffffc900041ff880 EFLAGS: 00010246
[  422.970379][T18508] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000
[  422.978375][T18508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900041ff938
[  422.986412][T18508] RBP: ffffc900041ff9a8 R08: ffffc900041ff937 R09: 0000000000000000
[  422.990595][T18507] incfs: Error allocating mount info. -12
[  422.994432][T18508] R10: ffffc900041ff920 R11: fffff5200083ff27 R12: ffffc900041ff8c0
[  423.002491][T18507] incfs: mount failed -12
[  423.008136][T18508] R13: dffffc0000000000 R14: 1ffff9200083ff14 R15: 0000000000000000
[  423.014941][T15045] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  423.020504][T18508] FS:  00007f8e15bf76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  423.037015][T18508] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  423.043682][T18508] CR2: 0000200000001000 CR3: 00000001328a8000 CR4: 00000000003526b0
[  423.051737][T18508] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951
[  423.059736][T18508] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  423.067778][T18508] Call Trace:
[  423.071110][T18508]  <TASK>
[  423.074068][T18508]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  423.080185][T18508]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  423.081347][T15045] usb 5-1: device descriptor read/8, error -71
[  423.086025][T18508]  ? incfs_realloc_mount_info+0xa7/0x4d0
[  423.097780][T18508]  ___kmalloc_large_node+0x81/0x220
[  423.103032][T18508]  ? incfs_realloc_mount_info+0xa7/0x4d0
[  423.108697][T18508]  __kmalloc_large_node_noprof+0x1e/0xe0
[  423.114392][T18508]  ? incfs_realloc_mount_info+0xa7/0x4d0
[  423.120057][T18508]  __kmalloc_noprof+0x26d/0x450
[  423.125080][T18508]  incfs_realloc_mount_info+0xa7/0x4d0
[  423.130614][T18508]  ? incfs_add_sysfs_node+0x118/0x240
[  423.136024][T18508]  incfs_alloc_mount_info+0x479/0x600
[  423.141474][T18508]  incfs_mount_fs+0x3ca/0x960
[  423.146184][T18508]  ? __cfi_incfs_mount_fs+0x10/0x10
[  423.151489][T18508]  ? vfs_parse_fs_string+0x102/0x170
[  423.156814][T18508]  ? selinux_capable+0x38/0x50
[  423.161648][T18508]  legacy_get_tree+0x106/0x1b0
[  423.166447][T18508]  ? __cfi_incfs_mount_fs+0x10/0x10
[  423.171736][T18508]  vfs_get_tree+0x9e/0x290
[  423.176204][T18508]  do_new_mount+0x251/0xb40
[  423.180788][T18508]  ? security_capable+0xcf/0xf0
[  423.185677][T18508]  path_mount+0x688/0x1050
[  423.190133][T18508]  ? putname+0x113/0x150
[  423.194447][T18508]  __se_sys_mount+0x2bd/0x480
[  423.199149][T18508]  ? __x64_sys_mount+0xf0/0xf0
[  423.203995][T18508]  ? __kasan_check_write+0x18/0x20
[  423.209145][T18508]  ? fpregs_restore_userregs+0x11d/0x260
[  423.214842][T18508]  __x64_sys_mount+0xc3/0xf0
[  423.219507][T18508]  x64_sys_call+0x2021/0x2ee0
[  423.224359][T18508]  do_syscall_64+0x58/0xf0
[  423.228830][T18508]  ? clear_bhb_loop+0x50/0xa0
[  423.231342][T15045] usb 5-1: device descriptor read/8, error -71
[  423.233585][T18508]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  423.245634][T18508] RIP: 0033:0x7f8e1718eec9
[  423.250090][T18508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  423.269773][T18508] RSP: 002b:00007f8e15bf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  423.278244][T18508] RAX: ffffffffffffffda RBX: 00007f8e173e6090 RCX: 00007f8e1718eec9
[  423.286317][T18508] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000200000000000
[  423.294350][T18508] RBP: 00007f8e17211f91 R08: 0000200000000180 R09: 0000000000000000
[  423.302388][T18508] R10: 0000000000400001 R11: 0000000000000246 R12: 0000000000000000
[  423.310417][T18508] R13: 00007f8e173e6128 R14: 00007f8e173e6090 R15: 00007ffdce374968
[  423.318423][T18508]  </TASK>
[  423.321520][T18508] ---[ end trace 0000000000000000 ]---
[  423.333976][T18508] incfs: Error allocating mount info. -12
[  423.339757][T18508] incfs: mount failed -12
[  423.490420][T15045] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  423.511408][T15045] usb 5-1: device descriptor read/8, error -71
[  423.641714][T15045] usb 5-1: device descriptor read/8, error -71
[  423.751197][T15045] usb usb5-port1: unable to enumerate USB device