last executing test programs:

5.181750772s ago: executing program 1 (id=235):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) (async)
sendmsg$netlink(r1, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)={0x20, 0x1e, 0x723, 0x0, 0x0, "", [@nested={0x5, 0xa9, 0x0, 0x1, [@typed={0x8, 0x126, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x4, 0xe}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x24008015}, 0x20040010)
futex_waitv(&(0x7f0000001480)=[{0x800, 0x0, 0x56f77dbfbcc63790}], 0x1, 0x0, 0x0, 0x1) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})

5.179797252s ago: executing program 1 (id=237):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00')
read$FUSE(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x402000, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000480)=0x4)
renameat2(r5, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000180)='./file1\x00', 0x4)
renameat2(r4, &(0x7f00000001c0)='./file1\x00', r5, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
r7 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0xa)
fchdir(r8)
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af21, &(0x7f0000000080)={0x0, r8})
r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r10, &(0x7f0000000980)=ANY=[@ANYRES16=r5], 0x5b0)
close(r10)
read$FUSE(r10, &(0x7f0000002400)={0x2020}, 0x2020)
sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fddbdf256900000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0)

5.178183852s ago: executing program 1 (id=238):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r1 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c, 0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, r1, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x7, 0x6, 0x2, 0x0, 0x0, [{{r0}, 0xd058}, {{r0}, 0x401}]})
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
readv(r2, 0x0, 0xffffffffffffffec)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
write(r0, &(0x7f0000001c00)="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", 0xfffffdbf)

4.977412578s ago: executing program 1 (id=241):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x308020, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x81, 0x0)
creat(&(0x7f0000000080)='./file1\x00', 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000100)="0fe5fcb805008ee866b9de0b00000f320f1e1c660fc675802c3e0f300f01c40f01f0660f38822466b831d4ac390f23d80f21f86635c00000c00f23f8", 0x3c}], 0x1, 0x80, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)

4.720083769s ago: executing program 1 (id=250):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

4.609722858s ago: executing program 1 (id=253):
accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) (async)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x40, 0xa, 0x79, {0x79, 0x46, "7fc5122b2c5b2006399e8b95595e22014a2cdef23cb8fb32ad91585f119d39f1e1c6941640e4d302cd9d9731b829c75f2144c3e60cf82fc36cf8f5b16e5c296deaed5ab2148eb271f3d154eccdfa8a15da367a7505c4c7621e52a56f46faf90ca6ca45c4faa386f9779524b8494afe76c14f10cd7d841b"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x20, 0x16, 0x6e, "3460c4bfb6808d5a08040f52f6f511562588852e26bd017d215eb032b375908c0edab0f5b43c714bf674eef5ce0b3d1695edc174019d2f57da95bba4426f72440876413178af1e35bc2b6b83057012d47ec99938a2af7e7ce05c824e8485ccc819b8d96f0abb9cd261e760197057"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xcd}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}})
r0 = syz_usb_connect$cdc_ecm(0x5, 0x8e, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x1, 0x1, 0x6, 0xa0, 0xa, [{{0x9, 0x4, 0x0, 0xfb, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x6, 0x24, 0x6, 0x0, 0x0, '1'}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xaa9, 0xe, 0xf1, 0xba}, [@acm={0x4, 0x24, 0x2, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x15e9, 0x7, 0x7}, @obex={0x5, 0x24, 0x15, 0x33}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x80}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x80, 0x9, 0x0, 0x10, 0xfc}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x78, 0x24}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x40, 0x1}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0x4, 0x9, 0x4, 0xff, 0x7}, 0x10, &(0x7f0000000400)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x7, 0x6, 0xe, 0x4}]}, 0xa, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1809}}, {0x72, &(0x7f00000004c0)=@string={0x72, 0x3, "5faa7b14c31d5c65e28c35765eca7c2d1544cf52204ec7b88fd6cbcf22a9cf7e881a0b668f3528345fd3925545350741c262325b4325cefe201161c8f41b648e9bb4de775abc5c039afb392efaaf747e6239dc2d40a538fbd086c5622bdd8b3d7ba3a442b435f396db37d7dac163ea2c"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x423}}, {0xa4, &(0x7f0000000580)=@string={0xa4, 0x3, "2660bb64339a6cd8137859bddb2ed8eb703e853384c7d7bfafe98fba609309f3c2e9ea483062809969ab4625d26f64053efcf6fe7a674ed65210d54ad5c9aad97cc306014a06aca4a9e16667a7225302d7ca84f099c2b004eecf84a237ac30c8be0e7ea0d266020c471ea50ef6cf4193b0317c05f4985f7300b59d5e4749737c5f56849c4fffc87a3e02f5021df71fff7f7eb372245ebb4f3a947fa0014361a38053"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x436}}, {0x12, &(0x7f0000000680)=@string={0x12, 0x3, "56ac5c38efaaeeb603dc527e1e255d69"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x87, &(0x7f0000000700)=@string={0x87, 0x3, "762a966e96da9a6486b71c80c7394e4a380fe31d5e35d925474ac4c8504cba18a800a62388ff0aeec096843146494c2f6038c756a67ade383b036eca1edfd3f0215eb848230e4a3cb64a3340bff2b3c0d18a8a64437505f2547d345fac0fc48cc6f9a601d861dc56c15fc4e288f33b60ab768bafd65919d69e5b00cd9a0567d484b7d2824b"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x459}}]})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000940)={0x14, &(0x7f00000008c0)={0x20, 0x4, 0x20, {0x20, 0x21, "d5a05ecac8e0d145ef73ce54ec74ed8b58fe3ad1ce75d99cfc48698f45d6"}}, &(0x7f0000000900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x1c, &(0x7f0000000980)={0x80, 0x5, 0x36, "1e31b92c9583ba7ee6dd178fd555e99f525350ec65fa5ce224c3758881741c5e9d5decefcf86cc14cacd66f36aebd9329b1993d8b6d1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000a00)={0x0, 0x8, 0x1}}) (async)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000b00)={0x14, &(0x7f0000000a80)={0x20, 0x7, 0x32, {0x32, 0x21, "fc166bf5fedec0e2620d0a14606f62415d732509f762211a7b7f51700bb46a44a187e6cf2560263f42bad0c14f571730"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e00)={0x44, &(0x7f0000000b40)={0x0, 0x14, 0xc8, "eb1e18ebe9f22e54180d4fca343637a574c6cabfb1bf827bbbb9194ef4a0f1b107fb2cc418ac1ed0dba07e06bb1398ba5bd3e392a09f802f7e2e2fe7f568af7443466b344f0f4347436e3cffa9dc8f39038bc69c70edc7ef9287857ebd4507883d6b77a3ffca464e3079627933210884b1851c7c2eeacbe614778c95cf1b125f6b05cdc2e4310a942d906beca0310d1d6cd47b65733ecd1b90c83223a61879ea5c5321ffbbfb50d9676f46d06bcdc53437d4fbb1503ca9211813fb3ae34faea45f2ac770fd8d0732"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x4c}, &(0x7f0000000cc0)={0x20, 0x80, 0x1c, {0x8, 0x0, 0x5, 0x3, 0x9, 0x3, 0x1, 0x8, 0xb19a, 0xe, 0x9, 0x6}}, &(0x7f0000000d00)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000d40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000d80)={0x20, 0x87, 0x2, 0xfdda}, &(0x7f0000000dc0)={0x20, 0x89, 0x2}}) (async, rerun: 64)
r1 = add_key(&(0x7f0000000e80)='encrypted\x00', &(0x7f0000000ec0)={'syz', 0x2}, &(0x7f0000000f00)="1bbfa77ee79adc39a278e20cd4ef8eacd8f0a3afa4f2e1bfffe59c61190c9800767694a1d8107e6ef339fb41276b76490f919e8167174aad564c", 0x3a, 0xfffffffffffffff9) (rerun: 64)
keyctl$unlink(0x9, r1, 0x0)
keyctl$get_security(0x11, r1, &(0x7f0000000f40)=""/130, 0x82) (async)
r2 = socket$pptp(0x18, 0x1, 0x2)
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001000))
r3 = syz_usb_connect$uac1(0x5, 0x103, &(0x7f0000001040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf1, 0x3, 0x1, 0x91, 0xc0, 0xe9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2d, 0x7}, [@processing_unit={0x7, 0x24, 0x7, 0x4, 0x6, 0x4}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x0, "17f7"}, @selector_unit={0xb, 0x24, 0x5, 0x2, 0x9, "ff42a9da3e6e"}, @processing_unit={0x9, 0x24, 0x7, 0x1, 0x4, 0x5, "3c82"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x301, 0x2, 0x5, 0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1c, 0x400, 0xe, "5a755f173bc1999aad"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x7f, 0x7, "a4"}, @as_header={0x7, 0x24, 0x1, 0xf, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x0, {0x7, 0x25, 0x1, 0x82, 0x4, 0x34}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x4, 0xf0, 0x5, "", "e5a251"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x3, 0x2, 0x9, "3311f16750"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x4, 0xd, 0x7, "b79ea6", "5bf8"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x2, 0x5}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xfa, 0x2, 0x40, 0x9}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xfb9, 0xd, 0x8a, "854ff2031d4024"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0xe, 0xd, {0x7, 0x25, 0x1, 0x42, 0x46, 0x7}}}}}}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000001180)={0xa, 0x6, 0x110, 0x6, 0x7f, 0xe, 0x20, 0x8}, 0x15, &(0x7f00000011c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x0, 0xf00, 0x28, [0xc0]}]}, 0x3, [{0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x140c}}, {0x9b, &(0x7f0000001280)=@string={0x9b, 0x3, "bff64cedcbc8f6fd777f38ffd0c58ee45d90dcf6d368e3c7c1c06c8ec9e3ba33832016762f30bcb8db784ffca73967da7cf92b1b6c297e360b729baf881ed55b487a4d4900134eb772babd27a1db2df3fa4f5e26a2797662cd0813939a0a20f7618cc25a71eeeb3fdd948aac0ee015ecf123a3dcf9ae1cc2e4e486c08c61109e2cd9be114acc00aab8979dee8b17ad8de0a03084666df2498d"}}]})
syz_usb_control_io$uac1(r3, &(0x7f0000001540)={0x14, &(0x7f0000001380)={0x20, 0x22, 0xf4, {0xf4, 0x16, "3626da6f0fa2f4117ebb24b3f9ee9dc9af52de2a5cdf496b10ee232096cf162387d6d90c4f22139bcf2f52341f6d8b9bff06e999b46d4caa960832551203fc39bb5341bb6e71eb231ce295a1d15e6238d97f1d8d91e22c73c54e5f6234f64107d2d1cca0664ecc69176f9d513b00de6ff76d33c83e227b0bf61614b858f8bb016e357e0aadd12b6a5f24d30478ac2a79cf635edd619f8d73880f3f9b940a8e8e07ba053912d5011a05fbeaffd8415845f264dc3b3052c69c0806fc289b0283e8d7cac5a6b405f49c2566d493a6fa24ae2cf2329cecf84abcb96f63cc97a9e226bbcb22cd1da38e023118d46e4440a60c4618"}}, &(0x7f0000001480)={0x0, 0x3, 0xad, @string={0xad, 0x3, "9bf086f641b33ef95a7f071de406a66581292cd861314127b6fc8518de8c50c743a6cffeb9c2b50f21ff9d779d21f05669927156889b42b577207e9345568281f4830946f47bb2833d4b2c645d97e6c72229f3521986353c78634622147763054bdb3719454d2b18ffbc8d7ce59b3b5980e8bab639ad30554e71d1094f7a98cb7ff53d9f6f0e32a7777440c837e21a002b38da05c4d4c9434d086e24d329b9abe6cec48fb1c46ef8184597"}}}, &(0x7f0000001780)={0x44, &(0x7f0000001580)={0x20, 0x12, 0x20, "85626f9dcdfbd2428fe3e8b51e83f858cf7423219416a9a2c244426dd7a5952e"}, &(0x7f00000015c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001600)={0x0, 0x8, 0x1}, &(0x7f0000001640)={0x20, 0x81, 0x1, ' '}, &(0x7f0000001680)={0x20, 0x82, 0x3, "40e90e"}, &(0x7f00000016c0)={0x20, 0x83, 0x1, "94"}, &(0x7f0000001700)={0x20, 0x84, 0x4, "0709c935"}, &(0x7f0000001740)={0x20, 0x85, 0x3, "b7219c"}}) (async, rerun: 64)
r4 = add_key$fscrypt_v1(&(0x7f0000001800), &(0x7f0000001840)={'fscrypt:', @desc1}, &(0x7f0000001880)={0x0, "d09ce232d6e2d5542d24dfc9eb2d250d8a3d768d0aff3901c886c29623edb5cfbd7c8c9963e593876d8fc02adf5bb553eebfebcca4ad443bb4939dc50a6a7a86", 0x1a}, 0x48, r1) (rerun: 64)
r5 = add_key$keyring(&(0x7f0000001980), &(0x7f00000019c0)={'syz', 0x3}, 0x0, 0x0, r1)
keyctl$search(0xa, r4, &(0x7f0000001900)='trusted\x00', &(0x7f0000001940)={'syz', 0x0}, r5)
r6 = syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000001a00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r6, &(0x7f0000001b80)={0x14, &(0x7f0000001a40)={0x0, 0x4, 0xbf, {0xbf, 0x5, "c86366611026a7d1976225eb3d81549edba3b0d31a392cb9572e10031bc73b59ff8139f11e61674f3da7eb60b792b598d958fbc6cf60969dd3d30bf6cddd9200c8f848b4dc069a16d20c1ea2899c193e829e2f316155750ec3ce6f545a9d3fbc1d873b110d2815f5655a6f34d2db770aaea5f938e5b6bfb9a019d3d8e5bd87528ce21ee370b2b92c2b336573bbe1e0a725338a14357c8aa15eaa3bac64b9e28ccd275c032c73b0f35d7cecd815c1a55a017d9ee07cca37451e916ec215"}}, &(0x7f0000001b40)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000001d40)={0x34, &(0x7f0000001bc0)={0x20, 0x10, 0x3, "0cf565"}, &(0x7f0000001c00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001c40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001c80)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000001cc0)={0x40, 0xa0, 0x4, 0xffffffff}, &(0x7f0000001d00)={0xc0, 0xa2, 0x2f, "ed7160d719d3e2ba72626d51ef8b8685b74d04496745c35ea0f64a60b7ffe2a8b48d2826635f1348c12697013d5891"}})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001ec0)={0x14, &(0x7f0000001d80)={0x40, 0xc, 0xef, {0xef, 0x18, "5d8c21c2275648dbd77e609b6b269c2d23a4d2a6bf0965f88a1887ef86dd749ebb4d1c7d9ecd135413bae91485008561ac97c812fa04b721676d6b1d731971533f3bc28a50fb3c8553d7a02fd7d21bdb7fc806f32cd430742f2761fc01b317694e2b9d5fd1b75e9f8b72437038ad42181c4f6709601db9355d717e7ab26570357ed9d0925211add69462f58a63b925d0a2269ab161193d037629ed56553e466d0915d1320cca37774ba3905149fffd6b0b606cfe595cf977e8a5fbf5150b6bce67b6eaf4dc9f82f178fe17ec0da7cc01714933dee621584bace868b9ee17d182f677095dcde2f16e57396b8185"}}, &(0x7f0000001e80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002000)={0x1c, &(0x7f0000001f00)={0x20, 0x1, 0x6a, "8aeb488c408dc32bb9b933cba6b642d317a5f3d70004013cf4dc61830232058f64b73261f62ca4dec3c42171b5353204e7a618920d781348e24cff63b028e7c5dfe16392862aa4e07dee019fcef3748b0ea61033afd6dd6bf4eba6714b482246f4897412d7f806041701"}, &(0x7f0000001f80)={0x0, 0xa, 0x1, 0x8b}, &(0x7f0000001fc0)={0x0, 0x8, 0x1, 0x9}})
fcntl$setflags(r2, 0x2, 0x1) (async, rerun: 32)
socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
syz_usb_control_io(r0, &(0x7f0000002200)={0x2c, &(0x7f0000002040)={0x0, 0x23, 0x9a, {0x9a, 0x1e04764f2a70d5dc, "ef1c9bb29ec9839eddd4ca3161f315c66b16e3a16e86b4b1aed6027c96dc1252663c0dc1969e337fb856b8a16fa0c13d7794ba87226e6f98bc1fac78564236f1b529f605dc37dea86ea55ccda665799c94e19a8827ecb3f7ce2dba0a4239f4dde4f34d2fdb78de5b43eae9fa571346d58135a844406f6cdf46e2592e06ca8a953d3cf5145896df99f94be9218c938219019f7a918dcb9426"}}, &(0x7f0000002100)={0x0, 0x3, 0x24, @string={0x24, 0x3, "3a12d1625fd68080563018725fad02bb208ef98f5a27f24a824eeda1c3217e7c1fdb"}}, &(0x7f0000002140)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x30, 0xc, 0x7, 0x6}]}}, &(0x7f0000002180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x4, 0xfa, 0x6, "db58e22d", 'P14>'}}, &(0x7f00000021c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x5, 0x14, 0x7, 0xa7, 0x4}}}, &(0x7f00000026c0)={0x84, &(0x7f0000002240)={0x0, 0xc, 0x9a, "d94d4a00a9552910fea7939c718b1513ee1b74a3e8c93960f200c2aa6af540da4ccd9aaadaf9982c77e840c2aba9d2f794bbcedbdb4fa39ef81fbfc105a505add28a3ddce15e598f487638b83c61d2a052085be0ec0410fb2a64487fc8d3d22d1eb6973c0a3d665e8b75c5ba5197960af54c7131d321700896286109d8f95186b1bc97cda2afc8d9244d16b80670fdeaf0ab79421c9bb5b5763b"}, &(0x7f0000002300)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000002340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002380)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f00000023c0)={0x20, 0x0, 0x8, {0x10, 0x40, [0xf0]}}, &(0x7f0000002400)={0x40, 0x7, 0x2, 0x9f}, &(0x7f0000002440)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000002480)={0x40, 0xb, 0x2, "eaff"}, &(0x7f00000024c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000002500)={0x40, 0x13, 0x6, @remote}, &(0x7f0000002540)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000002580)={0x40, 0x19, 0x2, 'QP'}, &(0x7f00000025c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000002600)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000002640)={0x40, 0x1e, 0x1, 0xa}, &(0x7f0000002680)={0x40, 0x21, 0x1, 0xd8}}) (async)
ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000002780)) (async)
keyctl$restrict_keyring(0x1d, r4, &(0x7f00000027c0)='encrypted\x00', &(0x7f0000002800)='F:]}/(-+\x00')
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000002980)={0x14, &(0x7f0000002840)={0x0, 0x11, 0xed, {0xed, 0xe, "70ded173629080f09b73267e6bc321672c402a15640f6cc0330f199d3d34e36b161f3efb8491e153cb5c495dbb8df78fc3e33c8b7a8ea08a1bd18a40b8809001a200c71030c52cafeb61db25225681ea7b9b6fa14be573bde67d61d47211e5c7def1c347d17210155e0da9996e8176fddfe062beb914aa7f0d85d14a29cf8a1d6f09c525ff9298f658a0ac04d5fa8bc38b6e7d478ddd6b5c93d092b503515d5cdc9a1a46d01ee41d8cbd5ebace43dd2554d27383fe0eca01708912cd99b38583e968f8dfed03127e99186b673ae79a53dbb1abb85335ebf8ef7052422679b7cde436df00edef63c7ad6008"}}, &(0x7f0000002940)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002c80)={0x44, &(0x7f00000029c0)={0x0, 0x14, 0xda, "f148ca0fd711db0c5272152e0a259acf13b3f29f5763a01986f2bf8ed63468bad4d4197f2d6d8b5c6d1b76e3feba47bacc3c91857df78f14e917d3b7526dbca36efa417c7b4ffd34c8910e15b76b82e97561d3b7f038cd6374a11a188ca619b3fc5c06896ad64abe4dc88d58e2227efb4ddced4938cb375f74fbb89443a4e337cf1540c1d08a4ff73166137b51e24d2fd55ff6974087918e6cf4b5d179d4b5910d56233fdd1bf82c632fcd7d0fcfd465d1640aa17f462c9290e97354450360395a97b9483f297041d77ab6cc1e45cf526482cae558758d8ceed9"}, &(0x7f0000002ac0)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000002b00)={0x0, 0x8, 0x1}, &(0x7f0000002b40)={0x20, 0x80, 0x1c, {0x4, 0xd, 0xffffafaf, 0x8242, 0x8, 0x5, 0x7, 0x7, 0xa2, 0x28d7, 0x1000, 0x1}}, &(0x7f0000002b80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000002bc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002c00)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000002c40)={0x20, 0x89, 0x2, 0x1}}) (async, rerun: 32)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r7, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40045) (async)
syz_usb_control_io(r6, &(0x7f0000003080)={0x2c, &(0x7f0000002e00)={0x20, 0x2, 0x93, {0x93, 0xd, "e3f3053abe3d0851a39633ca779e525523afab997076e5965214d92381808b618d207573ddfdddf9d14af169ff0524fce162d862b2abb1a337c7186baf0265a808564fcbd604bbba7b050a35ef748a0161cbb2ed33bdcf58faa174ac1e50e47445307619d615da88a4bf80128bd7cf8fbb20e613a714a2ea2487da84c9676261dc8f4f4e3020f10ba3eb644902889e1d81"}}, &(0x7f0000002ec0)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "1e66f285d85b58a10069d9d00d7bfe86982f9ff476d9df01371761f3faf537362e6fa75f472b570c5e21caa6719718bcb8cb6e7127d3b7323ade39c1a94c1db69316c341d2990d9ec572808dcc08aff6a49f337095b22117dbbd7373bce24f0b86e45b2a5d5dd66fc8032eb3ee0ee7bea798190e6cfe8a4792318323b5d5c40d343ab7b71185adc4cd28b41a47ec210104518b08e652f8361298b8b05f538fd52a41289ec80038d46af560eb0457a8de3d428cab1b5e6e103cbf3fc19f8ff44646923432d1287bbfc6ee842bb10b62c04abe328b8afee0df31ff15be82"}}, &(0x7f0000002fc0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000003000)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0xc5, 0x4, 0x1, "ca10d763", "36bbd9e1"}}, &(0x7f0000003040)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x7, 0x6, 0xde, 0x40, 0x1ff}}}, &(0x7f00000034c0)={0x84, &(0x7f00000030c0)={0x20, 0x12, 0x23, "7b939f060be36c9b7686acf45d313603c01474d9cb63c4a3dfa527b38758a2d987361b"}, &(0x7f0000003100)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000003140)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000003180)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000031c0)={0x20, 0x0, 0x4, {0xe0, 0x20}}, &(0x7f0000003200)={0x40, 0x7, 0x2, 0xff}, &(0x7f0000003240)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000003280)={0x40, 0xb, 0x2, '-a'}, &(0x7f00000032c0)={0x40, 0xf, 0x2, 0xfffe}, &(0x7f0000003300)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000003340)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000003380)={0x40, 0x19, 0x2, '&h'}, &(0x7f00000033c0)={0x40, 0x1a, 0x2, 0xa1b}, &(0x7f0000003400)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000003440)={0x40, 0x1e, 0x1, 0xfd}, &(0x7f0000003480)={0x40, 0x21, 0x1}}) (async)
syz_usb_control_io$uac1(r3, &(0x7f0000003700)={0x14, &(0x7f0000003580)={0x20, 0xc, 0x6c, {0x6c, 0x3, "6c40bf1f8b315fae495a3a28dd99522dc6b207df3b2f27e099536aeb4cdc01c2c35c1a5632305d3270d1a47821ff004ced7d3768e9a80d9ed84522826148b0fb8b29bffa1c26e4e4545d245edc8e1f2d888d2536bd0e8a5756d6a13c37c18e4f42b9bd409f067ddd1ca8"}}, &(0x7f0000003600)={0x0, 0x3, 0xe6, @string={0xe6, 0x3, "8ea901eec71eaaa91b7c972889986fcd7acccc9e74ec212639208842cdfd10fa30667b06a93230749ee2c23dd08fb41f2e5f4ec8835fdfedd76a9484b6306d1015cfd8c0d408a00e24c82803a8c93366cc261c64140ad44066d2eac7cb6363a5fc5675c0f287137a2ca30ac4f0a401292995f155e48945ed4a466616a287451dc84b010143681ac06b00374fa13aedaa0d94f6c905e41ce5238699e2a4b95fa6429005f8707fdec135d88a82d9f0ddd12798bc12f3e393d8061edcdf1507aa4b11ff839bdcf5c225a4790306d64a4a7bbf12dc016219f40bcde89678ad0d5f288f2d8a3f"}}}, &(0x7f00000039c0)={0x44, &(0x7f0000003740)={0x40, 0x16, 0x84, "5404f0f2abf3f63b897a0a128ef71f4260429c21c8cdbb950590c096d4b7401d654638a9a100b396435d84c41a431682f49573aa81bb9bfbb9bfe4be6153c9f89a7c52018c74e3601a971e7a957695770f109e80d11c0a8a01420f18553678f3816b4f4681fcfe3f5acbe8181da2fec991cafc093cbe5c9909ab72fde7929209a10caefb"}, &(0x7f0000003800)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000003840)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000003880)={0x20, 0x81, 0x2, "b9a5"}, &(0x7f00000038c0)={0x20, 0x82, 0x1, 'o'}, &(0x7f0000003900)={0x20, 0x83, 0x2, "174f"}, &(0x7f0000003940)={0x20, 0x84, 0x1, "d6"}, &(0x7f0000003980)={0x20, 0x85, 0x3, "2ee9fa"}})
keyctl$read(0xb, r4, &(0x7f0000003a40)=""/147, 0x93)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003b80)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000003c80)=0xe8)

4.592771949s ago: executing program 32 (id=253):
accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) (async)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x40, 0xa, 0x79, {0x79, 0x46, "7fc5122b2c5b2006399e8b95595e22014a2cdef23cb8fb32ad91585f119d39f1e1c6941640e4d302cd9d9731b829c75f2144c3e60cf82fc36cf8f5b16e5c296deaed5ab2148eb271f3d154eccdfa8a15da367a7505c4c7621e52a56f46faf90ca6ca45c4faa386f9779524b8494afe76c14f10cd7d841b"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x20, 0x16, 0x6e, "3460c4bfb6808d5a08040f52f6f511562588852e26bd017d215eb032b375908c0edab0f5b43c714bf674eef5ce0b3d1695edc174019d2f57da95bba4426f72440876413178af1e35bc2b6b83057012d47ec99938a2af7e7ce05c824e8485ccc819b8d96f0abb9cd261e760197057"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xcd}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}})
r0 = syz_usb_connect$cdc_ecm(0x5, 0x8e, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x1, 0x1, 0x6, 0xa0, 0xa, [{{0x9, 0x4, 0x0, 0xfb, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x6, 0x24, 0x6, 0x0, 0x0, '1'}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xaa9, 0xe, 0xf1, 0xba}, [@acm={0x4, 0x24, 0x2, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x15e9, 0x7, 0x7}, @obex={0x5, 0x24, 0x15, 0x33}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x80}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x80, 0x9, 0x0, 0x10, 0xfc}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x78, 0x24}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x40, 0x1}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0x4, 0x9, 0x4, 0xff, 0x7}, 0x10, &(0x7f0000000400)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x7, 0x6, 0xe, 0x4}]}, 0xa, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1809}}, {0x72, &(0x7f00000004c0)=@string={0x72, 0x3, "5faa7b14c31d5c65e28c35765eca7c2d1544cf52204ec7b88fd6cbcf22a9cf7e881a0b668f3528345fd3925545350741c262325b4325cefe201161c8f41b648e9bb4de775abc5c039afb392efaaf747e6239dc2d40a538fbd086c5622bdd8b3d7ba3a442b435f396db37d7dac163ea2c"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x423}}, {0xa4, &(0x7f0000000580)=@string={0xa4, 0x3, "2660bb64339a6cd8137859bddb2ed8eb703e853384c7d7bfafe98fba609309f3c2e9ea483062809969ab4625d26f64053efcf6fe7a674ed65210d54ad5c9aad97cc306014a06aca4a9e16667a7225302d7ca84f099c2b004eecf84a237ac30c8be0e7ea0d266020c471ea50ef6cf4193b0317c05f4985f7300b59d5e4749737c5f56849c4fffc87a3e02f5021df71fff7f7eb372245ebb4f3a947fa0014361a38053"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x436}}, {0x12, &(0x7f0000000680)=@string={0x12, 0x3, "56ac5c38efaaeeb603dc527e1e255d69"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x87, &(0x7f0000000700)=@string={0x87, 0x3, "762a966e96da9a6486b71c80c7394e4a380fe31d5e35d925474ac4c8504cba18a800a62388ff0aeec096843146494c2f6038c756a67ade383b036eca1edfd3f0215eb848230e4a3cb64a3340bff2b3c0d18a8a64437505f2547d345fac0fc48cc6f9a601d861dc56c15fc4e288f33b60ab768bafd65919d69e5b00cd9a0567d484b7d2824b"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x459}}]})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000940)={0x14, &(0x7f00000008c0)={0x20, 0x4, 0x20, {0x20, 0x21, "d5a05ecac8e0d145ef73ce54ec74ed8b58fe3ad1ce75d99cfc48698f45d6"}}, &(0x7f0000000900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x1c, &(0x7f0000000980)={0x80, 0x5, 0x36, "1e31b92c9583ba7ee6dd178fd555e99f525350ec65fa5ce224c3758881741c5e9d5decefcf86cc14cacd66f36aebd9329b1993d8b6d1"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000a00)={0x0, 0x8, 0x1}}) (async)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000b00)={0x14, &(0x7f0000000a80)={0x20, 0x7, 0x32, {0x32, 0x21, "fc166bf5fedec0e2620d0a14606f62415d732509f762211a7b7f51700bb46a44a187e6cf2560263f42bad0c14f571730"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e00)={0x44, &(0x7f0000000b40)={0x0, 0x14, 0xc8, "eb1e18ebe9f22e54180d4fca343637a574c6cabfb1bf827bbbb9194ef4a0f1b107fb2cc418ac1ed0dba07e06bb1398ba5bd3e392a09f802f7e2e2fe7f568af7443466b344f0f4347436e3cffa9dc8f39038bc69c70edc7ef9287857ebd4507883d6b77a3ffca464e3079627933210884b1851c7c2eeacbe614778c95cf1b125f6b05cdc2e4310a942d906beca0310d1d6cd47b65733ecd1b90c83223a61879ea5c5321ffbbfb50d9676f46d06bcdc53437d4fbb1503ca9211813fb3ae34faea45f2ac770fd8d0732"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x4c}, &(0x7f0000000cc0)={0x20, 0x80, 0x1c, {0x8, 0x0, 0x5, 0x3, 0x9, 0x3, 0x1, 0x8, 0xb19a, 0xe, 0x9, 0x6}}, &(0x7f0000000d00)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000d40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000d80)={0x20, 0x87, 0x2, 0xfdda}, &(0x7f0000000dc0)={0x20, 0x89, 0x2}}) (async, rerun: 64)
r1 = add_key(&(0x7f0000000e80)='encrypted\x00', &(0x7f0000000ec0)={'syz', 0x2}, &(0x7f0000000f00)="1bbfa77ee79adc39a278e20cd4ef8eacd8f0a3afa4f2e1bfffe59c61190c9800767694a1d8107e6ef339fb41276b76490f919e8167174aad564c", 0x3a, 0xfffffffffffffff9) (rerun: 64)
keyctl$unlink(0x9, r1, 0x0)
keyctl$get_security(0x11, r1, &(0x7f0000000f40)=""/130, 0x82) (async)
r2 = socket$pptp(0x18, 0x1, 0x2)
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001000))
r3 = syz_usb_connect$uac1(0x5, 0x103, &(0x7f0000001040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf1, 0x3, 0x1, 0x91, 0xc0, 0xe9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2d, 0x7}, [@processing_unit={0x7, 0x24, 0x7, 0x4, 0x6, 0x4}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x0, "17f7"}, @selector_unit={0xb, 0x24, 0x5, 0x2, 0x9, "ff42a9da3e6e"}, @processing_unit={0x9, 0x24, 0x7, 0x1, 0x4, 0x5, "3c82"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x301, 0x2, 0x5, 0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1c, 0x400, 0xe, "5a755f173bc1999aad"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x7f, 0x7, "a4"}, @as_header={0x7, 0x24, 0x1, 0xf, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x0, {0x7, 0x25, 0x1, 0x82, 0x4, 0x34}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x4, 0xf0, 0x5, "", "e5a251"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x3, 0x2, 0x9, "3311f16750"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x4, 0xd, 0x7, "b79ea6", "5bf8"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x2, 0x5}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xfa, 0x2, 0x40, 0x9}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xfb9, 0xd, 0x8a, "854ff2031d4024"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0xe, 0xd, {0x7, 0x25, 0x1, 0x42, 0x46, 0x7}}}}}}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000001180)={0xa, 0x6, 0x110, 0x6, 0x7f, 0xe, 0x20, 0x8}, 0x15, &(0x7f00000011c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x0, 0xf00, 0x28, [0xc0]}]}, 0x3, [{0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x140c}}, {0x9b, &(0x7f0000001280)=@string={0x9b, 0x3, "bff64cedcbc8f6fd777f38ffd0c58ee45d90dcf6d368e3c7c1c06c8ec9e3ba33832016762f30bcb8db784ffca73967da7cf92b1b6c297e360b729baf881ed55b487a4d4900134eb772babd27a1db2df3fa4f5e26a2797662cd0813939a0a20f7618cc25a71eeeb3fdd948aac0ee015ecf123a3dcf9ae1cc2e4e486c08c61109e2cd9be114acc00aab8979dee8b17ad8de0a03084666df2498d"}}]})
syz_usb_control_io$uac1(r3, &(0x7f0000001540)={0x14, &(0x7f0000001380)={0x20, 0x22, 0xf4, {0xf4, 0x16, "3626da6f0fa2f4117ebb24b3f9ee9dc9af52de2a5cdf496b10ee232096cf162387d6d90c4f22139bcf2f52341f6d8b9bff06e999b46d4caa960832551203fc39bb5341bb6e71eb231ce295a1d15e6238d97f1d8d91e22c73c54e5f6234f64107d2d1cca0664ecc69176f9d513b00de6ff76d33c83e227b0bf61614b858f8bb016e357e0aadd12b6a5f24d30478ac2a79cf635edd619f8d73880f3f9b940a8e8e07ba053912d5011a05fbeaffd8415845f264dc3b3052c69c0806fc289b0283e8d7cac5a6b405f49c2566d493a6fa24ae2cf2329cecf84abcb96f63cc97a9e226bbcb22cd1da38e023118d46e4440a60c4618"}}, &(0x7f0000001480)={0x0, 0x3, 0xad, @string={0xad, 0x3, "9bf086f641b33ef95a7f071de406a66581292cd861314127b6fc8518de8c50c743a6cffeb9c2b50f21ff9d779d21f05669927156889b42b577207e9345568281f4830946f47bb2833d4b2c645d97e6c72229f3521986353c78634622147763054bdb3719454d2b18ffbc8d7ce59b3b5980e8bab639ad30554e71d1094f7a98cb7ff53d9f6f0e32a7777440c837e21a002b38da05c4d4c9434d086e24d329b9abe6cec48fb1c46ef8184597"}}}, &(0x7f0000001780)={0x44, &(0x7f0000001580)={0x20, 0x12, 0x20, "85626f9dcdfbd2428fe3e8b51e83f858cf7423219416a9a2c244426dd7a5952e"}, &(0x7f00000015c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001600)={0x0, 0x8, 0x1}, &(0x7f0000001640)={0x20, 0x81, 0x1, ' '}, &(0x7f0000001680)={0x20, 0x82, 0x3, "40e90e"}, &(0x7f00000016c0)={0x20, 0x83, 0x1, "94"}, &(0x7f0000001700)={0x20, 0x84, 0x4, "0709c935"}, &(0x7f0000001740)={0x20, 0x85, 0x3, "b7219c"}}) (async, rerun: 64)
r4 = add_key$fscrypt_v1(&(0x7f0000001800), &(0x7f0000001840)={'fscrypt:', @desc1}, &(0x7f0000001880)={0x0, "d09ce232d6e2d5542d24dfc9eb2d250d8a3d768d0aff3901c886c29623edb5cfbd7c8c9963e593876d8fc02adf5bb553eebfebcca4ad443bb4939dc50a6a7a86", 0x1a}, 0x48, r1) (rerun: 64)
r5 = add_key$keyring(&(0x7f0000001980), &(0x7f00000019c0)={'syz', 0x3}, 0x0, 0x0, r1)
keyctl$search(0xa, r4, &(0x7f0000001900)='trusted\x00', &(0x7f0000001940)={'syz', 0x0}, r5)
r6 = syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000001a00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r6, &(0x7f0000001b80)={0x14, &(0x7f0000001a40)={0x0, 0x4, 0xbf, {0xbf, 0x5, "c86366611026a7d1976225eb3d81549edba3b0d31a392cb9572e10031bc73b59ff8139f11e61674f3da7eb60b792b598d958fbc6cf60969dd3d30bf6cddd9200c8f848b4dc069a16d20c1ea2899c193e829e2f316155750ec3ce6f545a9d3fbc1d873b110d2815f5655a6f34d2db770aaea5f938e5b6bfb9a019d3d8e5bd87528ce21ee370b2b92c2b336573bbe1e0a725338a14357c8aa15eaa3bac64b9e28ccd275c032c73b0f35d7cecd815c1a55a017d9ee07cca37451e916ec215"}}, &(0x7f0000001b40)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000001d40)={0x34, &(0x7f0000001bc0)={0x20, 0x10, 0x3, "0cf565"}, &(0x7f0000001c00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001c40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001c80)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000001cc0)={0x40, 0xa0, 0x4, 0xffffffff}, &(0x7f0000001d00)={0xc0, 0xa2, 0x2f, "ed7160d719d3e2ba72626d51ef8b8685b74d04496745c35ea0f64a60b7ffe2a8b48d2826635f1348c12697013d5891"}})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001ec0)={0x14, &(0x7f0000001d80)={0x40, 0xc, 0xef, {0xef, 0x18, "5d8c21c2275648dbd77e609b6b269c2d23a4d2a6bf0965f88a1887ef86dd749ebb4d1c7d9ecd135413bae91485008561ac97c812fa04b721676d6b1d731971533f3bc28a50fb3c8553d7a02fd7d21bdb7fc806f32cd430742f2761fc01b317694e2b9d5fd1b75e9f8b72437038ad42181c4f6709601db9355d717e7ab26570357ed9d0925211add69462f58a63b925d0a2269ab161193d037629ed56553e466d0915d1320cca37774ba3905149fffd6b0b606cfe595cf977e8a5fbf5150b6bce67b6eaf4dc9f82f178fe17ec0da7cc01714933dee621584bace868b9ee17d182f677095dcde2f16e57396b8185"}}, &(0x7f0000001e80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002000)={0x1c, &(0x7f0000001f00)={0x20, 0x1, 0x6a, "8aeb488c408dc32bb9b933cba6b642d317a5f3d70004013cf4dc61830232058f64b73261f62ca4dec3c42171b5353204e7a618920d781348e24cff63b028e7c5dfe16392862aa4e07dee019fcef3748b0ea61033afd6dd6bf4eba6714b482246f4897412d7f806041701"}, &(0x7f0000001f80)={0x0, 0xa, 0x1, 0x8b}, &(0x7f0000001fc0)={0x0, 0x8, 0x1, 0x9}})
fcntl$setflags(r2, 0x2, 0x1) (async, rerun: 32)
socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
syz_usb_control_io(r0, &(0x7f0000002200)={0x2c, &(0x7f0000002040)={0x0, 0x23, 0x9a, {0x9a, 0x1e04764f2a70d5dc, "ef1c9bb29ec9839eddd4ca3161f315c66b16e3a16e86b4b1aed6027c96dc1252663c0dc1969e337fb856b8a16fa0c13d7794ba87226e6f98bc1fac78564236f1b529f605dc37dea86ea55ccda665799c94e19a8827ecb3f7ce2dba0a4239f4dde4f34d2fdb78de5b43eae9fa571346d58135a844406f6cdf46e2592e06ca8a953d3cf5145896df99f94be9218c938219019f7a918dcb9426"}}, &(0x7f0000002100)={0x0, 0x3, 0x24, @string={0x24, 0x3, "3a12d1625fd68080563018725fad02bb208ef98f5a27f24a824eeda1c3217e7c1fdb"}}, &(0x7f0000002140)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x30, 0xc, 0x7, 0x6}]}}, &(0x7f0000002180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x4, 0xfa, 0x6, "db58e22d", 'P14>'}}, &(0x7f00000021c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x5, 0x14, 0x7, 0xa7, 0x4}}}, &(0x7f00000026c0)={0x84, &(0x7f0000002240)={0x0, 0xc, 0x9a, "d94d4a00a9552910fea7939c718b1513ee1b74a3e8c93960f200c2aa6af540da4ccd9aaadaf9982c77e840c2aba9d2f794bbcedbdb4fa39ef81fbfc105a505add28a3ddce15e598f487638b83c61d2a052085be0ec0410fb2a64487fc8d3d22d1eb6973c0a3d665e8b75c5ba5197960af54c7131d321700896286109d8f95186b1bc97cda2afc8d9244d16b80670fdeaf0ab79421c9bb5b5763b"}, &(0x7f0000002300)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000002340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002380)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f00000023c0)={0x20, 0x0, 0x8, {0x10, 0x40, [0xf0]}}, &(0x7f0000002400)={0x40, 0x7, 0x2, 0x9f}, &(0x7f0000002440)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000002480)={0x40, 0xb, 0x2, "eaff"}, &(0x7f00000024c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000002500)={0x40, 0x13, 0x6, @remote}, &(0x7f0000002540)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000002580)={0x40, 0x19, 0x2, 'QP'}, &(0x7f00000025c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000002600)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000002640)={0x40, 0x1e, 0x1, 0xa}, &(0x7f0000002680)={0x40, 0x21, 0x1, 0xd8}}) (async)
ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000002780)) (async)
keyctl$restrict_keyring(0x1d, r4, &(0x7f00000027c0)='encrypted\x00', &(0x7f0000002800)='F:]}/(-+\x00')
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000002980)={0x14, &(0x7f0000002840)={0x0, 0x11, 0xed, {0xed, 0xe, "70ded173629080f09b73267e6bc321672c402a15640f6cc0330f199d3d34e36b161f3efb8491e153cb5c495dbb8df78fc3e33c8b7a8ea08a1bd18a40b8809001a200c71030c52cafeb61db25225681ea7b9b6fa14be573bde67d61d47211e5c7def1c347d17210155e0da9996e8176fddfe062beb914aa7f0d85d14a29cf8a1d6f09c525ff9298f658a0ac04d5fa8bc38b6e7d478ddd6b5c93d092b503515d5cdc9a1a46d01ee41d8cbd5ebace43dd2554d27383fe0eca01708912cd99b38583e968f8dfed03127e99186b673ae79a53dbb1abb85335ebf8ef7052422679b7cde436df00edef63c7ad6008"}}, &(0x7f0000002940)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002c80)={0x44, &(0x7f00000029c0)={0x0, 0x14, 0xda, "f148ca0fd711db0c5272152e0a259acf13b3f29f5763a01986f2bf8ed63468bad4d4197f2d6d8b5c6d1b76e3feba47bacc3c91857df78f14e917d3b7526dbca36efa417c7b4ffd34c8910e15b76b82e97561d3b7f038cd6374a11a188ca619b3fc5c06896ad64abe4dc88d58e2227efb4ddced4938cb375f74fbb89443a4e337cf1540c1d08a4ff73166137b51e24d2fd55ff6974087918e6cf4b5d179d4b5910d56233fdd1bf82c632fcd7d0fcfd465d1640aa17f462c9290e97354450360395a97b9483f297041d77ab6cc1e45cf526482cae558758d8ceed9"}, &(0x7f0000002ac0)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000002b00)={0x0, 0x8, 0x1}, &(0x7f0000002b40)={0x20, 0x80, 0x1c, {0x4, 0xd, 0xffffafaf, 0x8242, 0x8, 0x5, 0x7, 0x7, 0xa2, 0x28d7, 0x1000, 0x1}}, &(0x7f0000002b80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000002bc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002c00)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000002c40)={0x20, 0x89, 0x2, 0x1}}) (async, rerun: 32)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r7, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40045) (async)
syz_usb_control_io(r6, &(0x7f0000003080)={0x2c, &(0x7f0000002e00)={0x20, 0x2, 0x93, {0x93, 0xd, "e3f3053abe3d0851a39633ca779e525523afab997076e5965214d92381808b618d207573ddfdddf9d14af169ff0524fce162d862b2abb1a337c7186baf0265a808564fcbd604bbba7b050a35ef748a0161cbb2ed33bdcf58faa174ac1e50e47445307619d615da88a4bf80128bd7cf8fbb20e613a714a2ea2487da84c9676261dc8f4f4e3020f10ba3eb644902889e1d81"}}, &(0x7f0000002ec0)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "1e66f285d85b58a10069d9d00d7bfe86982f9ff476d9df01371761f3faf537362e6fa75f472b570c5e21caa6719718bcb8cb6e7127d3b7323ade39c1a94c1db69316c341d2990d9ec572808dcc08aff6a49f337095b22117dbbd7373bce24f0b86e45b2a5d5dd66fc8032eb3ee0ee7bea798190e6cfe8a4792318323b5d5c40d343ab7b71185adc4cd28b41a47ec210104518b08e652f8361298b8b05f538fd52a41289ec80038d46af560eb0457a8de3d428cab1b5e6e103cbf3fc19f8ff44646923432d1287bbfc6ee842bb10b62c04abe328b8afee0df31ff15be82"}}, &(0x7f0000002fc0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000003000)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0xc5, 0x4, 0x1, "ca10d763", "36bbd9e1"}}, &(0x7f0000003040)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x7, 0x6, 0xde, 0x40, 0x1ff}}}, &(0x7f00000034c0)={0x84, &(0x7f00000030c0)={0x20, 0x12, 0x23, "7b939f060be36c9b7686acf45d313603c01474d9cb63c4a3dfa527b38758a2d987361b"}, &(0x7f0000003100)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000003140)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000003180)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000031c0)={0x20, 0x0, 0x4, {0xe0, 0x20}}, &(0x7f0000003200)={0x40, 0x7, 0x2, 0xff}, &(0x7f0000003240)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000003280)={0x40, 0xb, 0x2, '-a'}, &(0x7f00000032c0)={0x40, 0xf, 0x2, 0xfffe}, &(0x7f0000003300)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000003340)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000003380)={0x40, 0x19, 0x2, '&h'}, &(0x7f00000033c0)={0x40, 0x1a, 0x2, 0xa1b}, &(0x7f0000003400)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000003440)={0x40, 0x1e, 0x1, 0xfd}, &(0x7f0000003480)={0x40, 0x21, 0x1}}) (async)
syz_usb_control_io$uac1(r3, &(0x7f0000003700)={0x14, &(0x7f0000003580)={0x20, 0xc, 0x6c, {0x6c, 0x3, "6c40bf1f8b315fae495a3a28dd99522dc6b207df3b2f27e099536aeb4cdc01c2c35c1a5632305d3270d1a47821ff004ced7d3768e9a80d9ed84522826148b0fb8b29bffa1c26e4e4545d245edc8e1f2d888d2536bd0e8a5756d6a13c37c18e4f42b9bd409f067ddd1ca8"}}, &(0x7f0000003600)={0x0, 0x3, 0xe6, @string={0xe6, 0x3, "8ea901eec71eaaa91b7c972889986fcd7acccc9e74ec212639208842cdfd10fa30667b06a93230749ee2c23dd08fb41f2e5f4ec8835fdfedd76a9484b6306d1015cfd8c0d408a00e24c82803a8c93366cc261c64140ad44066d2eac7cb6363a5fc5675c0f287137a2ca30ac4f0a401292995f155e48945ed4a466616a287451dc84b010143681ac06b00374fa13aedaa0d94f6c905e41ce5238699e2a4b95fa6429005f8707fdec135d88a82d9f0ddd12798bc12f3e393d8061edcdf1507aa4b11ff839bdcf5c225a4790306d64a4a7bbf12dc016219f40bcde89678ad0d5f288f2d8a3f"}}}, &(0x7f00000039c0)={0x44, &(0x7f0000003740)={0x40, 0x16, 0x84, "5404f0f2abf3f63b897a0a128ef71f4260429c21c8cdbb950590c096d4b7401d654638a9a100b396435d84c41a431682f49573aa81bb9bfbb9bfe4be6153c9f89a7c52018c74e3601a971e7a957695770f109e80d11c0a8a01420f18553678f3816b4f4681fcfe3f5acbe8181da2fec991cafc093cbe5c9909ab72fde7929209a10caefb"}, &(0x7f0000003800)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000003840)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000003880)={0x20, 0x81, 0x2, "b9a5"}, &(0x7f00000038c0)={0x20, 0x82, 0x1, 'o'}, &(0x7f0000003900)={0x20, 0x83, 0x2, "174f"}, &(0x7f0000003940)={0x20, 0x84, 0x1, "d6"}, &(0x7f0000003980)={0x20, 0x85, 0x3, "2ee9fa"}})
keyctl$read(0xb, r4, &(0x7f0000003a40)=""/147, 0x93)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003b80)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000003c80)=0xe8)

2.218355911s ago: executing program 2 (id=297):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x180)
ioctl$EVIOCSMASK(r1, 0x40104593, 0x0)
syz_open_dev$loop(0x0, 0x7, 0x180862)
r2 = syz_open_dev$loop(0x0, 0xd5d1, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xb, 0x14, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd930000fa19000000ad74d9ce8731972900", [0x5, 0x9]}})
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda')
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xffffffff)

2.217716341s ago: executing program 2 (id=298):
mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1800028, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x800}}, {@common=@version_L}, {@timeout={'timeout', 0x3d, 0x3}}, {@common=@posixacl}, {@timeout={'timeout', 0x3d, 0x6}}, {@sq={'sq', 0x3d, 0x7}}, {@timeout={'timeout', 0x3d, 0x4}}, {@rq={'rq', 0x3d, 0x1}}, {@rq={'rq', 0x3d, 0x2}}], [{@subj_user={'subj_user', 0x3d, '*'}}, {@context={'context', 0x3d, 'system_u'}}]}})
readlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/233, 0xe9)
setxattr$incfs_id(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)={'0000000000000000000000000000000', 0x32}, 0x20, 0x2)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x101000, 0x181)
mknodat$null(r0, &(0x7f0000000440)='./file0\x00', 0xc000, 0x103)
execve(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000540)={[&(0x7f0000000500)='\x00']})
r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60)
r2 = accept4(r1, &(0x7f0000000640)=@ax25={{}, [@rose, @bcast, @netrom, @rose, @netrom, @default, @default, @null]}, &(0x7f00000006c0)=0x80, 0x80800)
sendmsg$key(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000700)={0x2, 0x10, 0xc9, 0x8, 0x2c, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x89, @loopback, 0x5}}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d4}, @sadb_x_sa2={0x2, 0x13, 0x72, 0x0, 0x0, 0x70bd2b, 0x3501}, @sadb_x_nat_t_type={0x1, 0x14, 0x39}, @sadb_x_filter={0x5, 0x1a, @in6=@remote, @in6=@mcast1, 0x28, 0x4, 0x4}, @sadb_x_sec_ctx={0xf, 0x18, 0x3, 0x2, 0x6c, "a1aebcdcd39f507a5857649cc8ffe7f22dfb692d8e183aa828f3175057ec919e5792ffb5c79547ac1a4553da7442669aa096c0d65f738c79abaa876dc15005769f770d74e72792e08596e9be4aafe388381c43ebcd45d2446f5c05d0db630d3f138b96e70d74092653c3da24"}, @sadb_sa={0x2, 0x1, 0x4d6, 0x16, 0x80, 0x9a, 0x1, 0x1}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0x3, @mcast2, 0x6f2a}, @in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x44}, 0xffff7fff}}]}, 0x160}}, 0x80)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000900), &(0x7f0000000940)={'U+', 0x7}, 0x16, 0x0)
setxattr(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)=@random={'system.', 'user.incfs.id\x00'}, &(0x7f0000000a00)='*', 0x1, 0x2)
timer_create(0x5, &(0x7f0000001b00)={0x0, 0x40, 0x1, @thr={&(0x7f0000000a40)="7f1440a0912e25894d0f452eaa8a6caac6eeca89bcd4d51860d9ad72c0633e465aa4c2e6c6ef4a1058691275bfacfff7952b319e0f8182ea6a40b8f3a36e0782166b304c1795af9ebfb3e59a4698f4c05ed6ce0fd5d92541172d2d92424411989556a3f9badade323bce85842e80df0d8702c8d21d299229f4e18fe5ce1a9b1ef8110d1bbeb057f581ca836929afade3a88598e8b26ff812d67e84beb56209d97cff9db450e6ec9c83960dcb0270d65600b89a1f", &(0x7f0000000b00)="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"}}, &(0x7f0000001b40))
ioctl$VHOST_VDPA_GET_VQS_COUNT(0xffffffffffffffff, 0x8004af80, &(0x7f0000001b80))
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000001bc0)={0x49, 0x29, 0x2, {0x7, [{{0x20, 0x4, 0x3}, 0x8001, 0x10, 0x7, './file0'}, {{0x80, 0x1, 0x8}, 0x4, 0x3, 0x7, './file1'}]}}, 0x49)
ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000001c40))
mkdir(&(0x7f0000002040)='./file0\x00', 0x22)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000002080))
lsetxattr$trusted_overlay_redirect(&(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), &(0x7f0000002140)='./file1\x00', 0x8, 0x3)
fcntl$setlease(r0, 0x400, 0x1)
r3 = accept4(r1, &(0x7f0000002180)=@alg, &(0x7f0000002200)=0x80, 0x100000)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000002240)={0x0, 0x9, '\x00', [@generic={0x8, 0x47, "65842a991a65dab738f4863ddfdc194259f356bad281a0d32deae222334ab6d53c7d213d86841aafad8d1e78ba93c7e6d6622c11a3cca0c4014d0adb858130d397fae589e6a580"}]}, 0x58)
r4 = openat(r3, &(0x7f00000022c0)='./file1\x00', 0x2000, 0x0)
readlinkat(r4, &(0x7f0000002300)='./file1\x00', &(0x7f0000002340)=""/130, 0x82)
open(&(0x7f0000002400)='./file1\x00', 0x250042, 0x1a7)
fadvise64(0xffffffffffffffff, 0x0, 0x1, 0x2)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002480), r3)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000002840)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002800)={&(0x7f00000024c0)={0x324, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc98b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc8000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x66f}]}, @TIPC_NLA_NODE={0x120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x83, 0x3, "db305165a83c15adc005ebfe3c3fc63647da44ef587340f78c2a2f499d5c322786cb5f6e0b39e048b3b7fd8000556e0d83e92604ab99a33b88697e3c9f43577804523af43fff575f9e5dce40c44080c312460324bd2e8e709843c1929ad23898efbeb6f1ce251cd9731514395e4f7e29b5c6691028b3ab1d15fbe7c5b33e5e"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd08}, @TIPC_NLA_NODE_ID={0x34, 0x3, "7bdbf1008ce584a73309c90f6dd4a7679351ae7e79396703e342a0f4cb849948ddd4eedd3c20b814598e8272555e4a13"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "20e16ff178289ef1ad8699dbfc213a1b4c4f5c53184830d71e60b758f1c84e6176"}}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xda}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfa5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x400c0}, 0x20004841)
connect$inet6(r4, &(0x7f0000002880)={0xa, 0x4e23, 0x2, @empty, 0x2}, 0x1c)
chdir(&(0x7f00000028c0)='./file0\x00')
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000002900)=@v2={0x2, @aes256, 0x8, '\x00', @a})

2.215263981s ago: executing program 2 (id=299):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket(0x840000000002, 0x3, 0xff)
ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x0, @private}})
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10)
connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e60, @multicast1}, 0x10)
sendmmsg$inet(r1, 0x0, 0x0, 0x401eb94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.147145637s ago: executing program 2 (id=300):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
fgetxattr(r2, &(0x7f00000001c0)=@random={'osx.', '@\\{!@}{\x00'}, &(0x7f0000000200)=""/152, 0x98)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000280)="00000000020001000003be8c5e687a8a", 0x10)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f"]}]}, 0x2c}}, 0x0)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r7, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0xd1383000)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000340)=@x86={0x7, 0xdd, 0x5, 0x0, 0x0, 0xb4, 0x7, 0xe, 0x64, 0xf, 0x6, 0x3, 0x0, 0x8, 0x6f47, 0x4, 0x0, 0x2, 0x2, '\x00', 0x0, 0x4})
ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x4, 0x10003})
readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)

2.058337834s ago: executing program 2 (id=302):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r1)
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500fe8000000072080003000500000000", 0x39}], 0x1)
syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) (async)
syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0)
openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x4004550a, 0x0)
close(r0)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) (async)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]})

1.938025504s ago: executing program 2 (id=307):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x2}, {0x6}]})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0})

1.865142079s ago: executing program 33 (id=307):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x2}, {0x6}]})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0})

1.442787954s ago: executing program 0 (id=322):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0xfffffffffffffff8}) (async)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000c40)={"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"}) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

784.622347ms ago: executing program 0 (id=324):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
r2 = dup3(r1, r0, 0x0) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000007c0)="d527f652873eb25d3a71d0320d9e552f64bacf11805d55533beee663b219fc6742ceda12c4ba069e5d711c602617720ced4aeef3c627ec8ad698db10e3f3dbd3712fbe8eb20ba74f94971ff02659784d"})
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x90800, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x0, r1, &(0x7f0000000980)="4ee84ddb2090398535d1f4d624459207645cbab1028edae744abc3acb95a56b00c7615ee4f37d59ad373d88ae263ec13ed054d269788018182779f5ad20c11af289f48b2d7a2ad008576b624cbb607c10e66db9234688094d8a491502c9027f1a2a45f6d92e3b3f9333c63cb04fb9805c93b7ece739299479b14ff74ff235ee95269c8cc14f764cd427bc2ceeb033e65d05246b6a4234b64f83241d79eb513d653f44661e131067a2ae0550cdd4a39888ed6a58fb78aefd98935028015aaed4e4e837fef744fe0d608054e2b545eadadf7bcacddaac475b3a810d2c524910b294603451a453f30c2526d354e218570c9883175c2b149f03dddf73af33072d495de772d44fefab12e8d8593c9938eefe0d816af278fd82e80553a20df90af81d3fe1e235d9bce2e4a7e7589830473e7ebf4e2038ea96415059363c27aa357e73f30f9113ce22c8212bb89d8ba1cc79c5f9c5692ee1c2183018186f5f4ca65c3eeba59dd46ccc702339b06b040db0899fc26c4aa38e68ce6f9db9c781d5d8dfb3b414bd1c92b8f764e83bd02c362d2aad6e84026992b34945caf0ddca315620da97938b310694a48dfec623b3bb177e97b19574990612605c4df520a6d3b4f2dbd696f27dd231b3f148d36e823b16df4b571e75584b34b5f687e66bb69ba655d922db2f55b485ea27c83679dade09369cc42903a02898eeb5d16ed543b322c9499f6f1c5db549b7ca2721f6105f229cdebdc8d46aafd359374580871460f238ab2d48c57d92069991c1e5ef8ad4e50bd30d419173cd326ce2d1572b2cbf9b3def7e90bcf9dd2edf1884871d8a1b5a544f5f6443f19478c3f364608d5220746eaeb47ea32b27e56a7b9d3755d1a395c6c274a750adfd4a6af46de5fb2699a31b8a6733cb2f970bb27b96db4275b8049a1e9408f7169522c11f8c52318d5cf7382d37530f3fe3cd83419d36632a75a1c231b0f55cae779e9df20847db267ccd9688b2078c5db73141f3801431d0e69d354f7f8e73e9b6fbd62da298caae8470f56461f3ab46a7b1719a2e44035a76cf9cb2de574699a7f94c39aaec43e3c62f46abcc088f21c338f08163d6bf932856bb4226f9b807d66447405d7749f76afdf771c6e5c7dbaf9de0c9b7aa734c5a5bdd0816e806a019d961d422df1241d3e5a7903341a345c7c04e9219b4ac0d350697c66285ece81e6c32bcf7f826409148a3a236c23893d13f9baccbbdad169b1f626c201f711c28aadd6fdf4f455edcabb306b456ed2a5ae02f12ebb68e2b7dc811dad8976cb5b5d85c1bb1d302ecbb26789d1e252cc5395d43fcc829edd349d6cd21e29081e0f20bfdab5a0c85afc0c1d0bdd74ec9b97af7b1d7a2734bd8e6f65d58f4fcab1ab685a0efbd57a607a9c640e9643c9b16a2be50be6982b500dbbf1e53f8646d3df9e0f74c9afc0e44a097aa244669984d2e5c874affdea00f0b34c7083140a1853433954e86847d83481b2291e929778a398a559023cc09851e4a494e903c3e1300659478a023611ee2a0250fe3364dcb35f4012a1a9ca9e05b1a826bc946f1cbeea6861ff0eef86f300e4027257ee3a231c62669eeee1885632e17517b0b3ce8772a66d13d52c20e18c3ba8fa4f58d0322b24c9f55beca2a33e87eb04855daba6cc7d3006a06e33dc6aba7806b858139e494f0d0a2cf5d1e470f75d7f16226b14e0d50b85d458c1e57a87571a095cba9d65c778ae2bfee29459794455537fcc703e5fc2fcd9da9e57c0270c49cb01c4216790137baffdd5e0c43d4d4f25b43203963cded109b0011f813dc45b707a4410b7d329472fe2673e662c95b2993181fdbcc4e9f82db051ccc91bd790fcd9e58c686371562b85564207d5aa2105d033e860fb80828ee7a8df613beab424b72d5c481ffb2bcb37dd7de8f52f36729dfe5c4723dbc165e70601f91c65e745868c504df37e9f6a08210b5fb507720ed86ba06891683e138e583835aafee3742e6dc8657f41e8ba09f1c69f5dbc177bba596ec84966f6e6800ae0fdb88b1f1fb9b927aab59fcb5161428446e721a06587d9fa61751e8d8d91fee66eab1acaa39f5f7e0d9aa1c65fa6c172dba14a59121b1e454a3cc46ca280ecac4f89e58ac325257b73308d7e64bc917bd9ddd495bf975d22a7284b30abdec888484d0f30a1f208c8d8d5086070e7e59e8b545cee638f8964cf9288ca1089df745c720a0a9f35c83179d93e112dea3ec0329fab275aad854ee6765e47d08c00f2a6166cedebb73b5ecd6ce118aedff463d1477b71faf896cc6cbde9abecb081e6f88a3a96cff76fe424bbd3d8ab65d8b94d6aa079f15dd9cf89a2dce6e6433da3be88d39a0a877b0445c193a4ffabdf3cdcca9301a7555e7321ac0a431ecbf81cc8ef5cf07c576db9afdaea0fc18585bb892475208f3c77a48f0cb4aebbd75542694959798f9fabf65cc8130d6e15e731c8e4c3cb7d7126d2257bae77f380884ead849c9ab2e34d4a6a1432205944242b343b8e6ae76fccf1f8a3362eec9899fc3651e38deed335a671b43378267dc2397fa6cd25520c06e89ee35addb931cc5f26e36e654b1e2def2c4841b4c9f31e38eea1c75d896ba507903bd618ebcc42fee83ee877281ecfecdefaf10d45a56cc530f46692a21dbad19aac3eebc9affe75a195a2ebeb3f084e9f9604188d53efe8138d3cd4c751f52ba80db40088fc31a1d525fa9c53d6ea4132fbf8086c3d85457968aad96b3d6fdbffc544228ca78a4177c67fb8b9d5b2a7921dd8d67afb49e012f725ce8d7bb3b5dd8a9b50f7c7877fd8ee0bbaa71b8dc5980eac1eb6dde2b4f871bb6751fa401387c506269cc64d1ddbc6c837f9ea3a8c5167636980e54627ab699c17550b521594d00b19a1642522e3c05aae24a19676a7976f888f2e1ddfe357f24915c8cd961b9041c009256331e4997070c4b28b148340a9ba847aa3a800713d81806964772cf1b5e335b5a06dc1d32b8b83afe618371eba3ad57d471bdcbdd3a80e85407615292b9deb0e2eb5133f250884aae692a7a20daed3ae4e8acafd84067b75a3d8e1286115a26cc84b5a1d98dc0990826e05e71fe2ebc7bd6441814c554ad925d1b89043c8946d302c5be5569590a69b3d48e1def301810b5c88f23779b04fa11e647cc8c487fce2416b4c8df5c6fc5fd870b06247b6d081d5e97868fc1881ea166774f49262f480a13dcc0bc6eeccfe85d51a6a05d27c022ae86fc7708d585e5b395cab813579010e16075a186fc2c501f07fe0cc9e2620ae4659e0eaea9c4626835b452b5fe57186293dd182e8c1be2a5f2f9eb0d5f1562b16a764eee2eb84b08f32b79d3a0cc9502d9c0bef64cdb4ce8c5e120f2859e0d5a84f3e13fa4fa0dfbc6e4ca6d36e7a7d6dbf4bc27b432cb22b48a2511aae47ad5be06478148b9384750280c6dfa00d746e3862cf24a864d02122dc2a08c0a5b7ec217b2247ae9713aadbff0aae2ec5a6a22af874741ac503cba99d886e01326020c277f8b24b7835e986cda7a3fff7adf12bde22b8b89e41b56994561876e4f5cfa7215546bb2807e625b1eb43e87257fae415bcd302c31c11607d61d0e739f909e7a676035ea8fe4b1a3cf6ad5cbd7af0672781463ffff1791133267d7e5914063bd6e7932377a28b8ccfd89425a6f89d511388057762de342f7afc08429969f8e4a5227c29d445ef65553a76230f32f2dedf5ed91c77d517f39b3882803375bac9b461fbb6e3489f9777b3734d7bc49503fd63b491c647772bf6dcd5f14e5ed46009618a49da48436d08ab777ee02c47cc51292aa09f17c41fbc044183490ee5abbae339882091c1d60611dfa92e668b18adfed12ec7cf316416d588f549a16376d206fab590db2df64789969db6459f46cafca399dd20d8f634a156f18ac1aa753159985c917f69167e36c3e0c23e1368842be5c92a2dee05079cb2014cb3d8463a6095f8d37bad552811ce001395df607c361c9e9bf0e0290d3d77b9b9456d28e1d7d0e85d636d42d5ba225fc0c46194319ce4f3fbe853edd385a816fb9071054d2b09ef8eca5329c2dcf088e3d73503ab94ef7baeaa5f5a6a28b6794df7a1b94f6cb63778b032c375d0b1838e497c14e22323c0b7d4c77f6416da93fcc11d76ede800fbb74aa3bc5756c14678779ba5e2f12248743977e11dde9cceaaf6d4acba3314ae512f497cbcf6100ad376abf19a1eb1ed57acefd3e62e6abf7ed7b5ca2ba74d720e833e7e0bea440372b761af384e4a2668bc24cf486238de4a122504bedf87361e532259bd13416465f8fa0d455601fc2cb2a1454087f76898af608e8accd97ddcd509ee10b5ca77a7eeddd0bbae7a5bfb9f254add97130060345756582f8295d48476add1b13d6f66aa704c4b9a906f2912cd0198ed310655906c82e977580dfae20e04d8176d1a6df57486c2212ecc0ca02ad08a92c32982edbedb7aaef2987afac59c51188573f43e5fc93b95abb629f1c265e9f24f0b98948553fc76479b6342619758f83c808c991331fef36062d9eb791db95f985baf705c40c85f1bf78e639fcd1b9302ab009cd5b40a94508c846922e4b43f77437f8e3f5f5295d49536f64466875a7be68414dbb32de03814ba85af355ae0db926147186a10c398246fab292d7abfe1180b91de762de87f274de373df5dff978a724ba3b4f17edf218eee89a8571f3026ce23c80e8c5cfaa14d0e391fc399ab14190b64b0d7b6630b3629966cd47434ca46007a2152fbc860b5ad7bab4e27a2c7301120a1a5e3f721ee92284b385bcef44568f8f0adce41823ae9e716a08b19b9ce463caee657190247b9f553e25992d7be624d3b12974d8d895a23d3d9c9d13eb8626641a00b7d091a9633971f0b520fd0f928b6f0e0694284b630351c010f3711fd9f605c07e3ee2d2c143cfaa9e87c32e57407d5b8dbc9a1eebe09f5d10d4fa3a2562420c1ccc83db62c97b466c3058dfca3228376568c69fd76a87d61ee77a8a18ac99b2edbf05e5d42068b1b26530afcedfb5c330c0c5ee68c460b178e8b0fe03d99aa4296d057965f30d66e096b001e3d3ed2a26b36ce7dc26fd6c2dfaffd84edf4b5dace09248b8c4509089c1dcc7bba9dfe21ddcbc75af8dece0c537fdc6c053800da32e7b3d80638bf8f8b08bf2a1e66f8a7e024d390d869d330c467a4a6f683bc874c1d5744d8f8cc6b02c0a8ac16f85d61b215a16c04d3ebf55af30b16b8a66a952c22120007f584173838e829aeb1dc317aa61ce798cc855012a7a03c7b122e48ed642593bb094c8a1c7c2c858461818bd4ef8f57fd9fcfbdd36b69f1c1eeb6c75055c4678a0f227a44018e036b91bacc77f5baff1c158a03725b9a12509f98ca12bacfca95cea1b9e27a11bbd289bcfc90b5dcd87bfb662477d6c4673db55a772a9a70fdb4a7da0ec38e28e594482efacf1b397a7b146f4eb189f9407d8fd4a737a12c12e449c951a864c3d9381bd5eeef888ed4c1e625e59bfd65e4e6cb6096454c77f087739eaf255f11bbe233217f017fca27b76337561afe5363de0fe4d7c86e125c382f890356938a6cb483dfb728992c91639c9177801ccb0d5ceeafc16ce93e37d9d8471fbfa0f386370ba233f5e1cf8dab561c26de684909cb5395d35369394533d1285445580f982d29e06fcb284e0da95b946544eac369346ab89b8d1ba884abdff9619592cdb72dd4850455d9b0e83a64d8f4b8fd63f5450c9d37d5918bee973b20dc134254c3c94080020d9671ffffb2d0b1f0f378b11c2f919feabee2f11475a44ea0aabc386f126e36", 0x1000, 0xbd, 0x0, 0x2, r4}])
syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0)

784.000587ms ago: executing program 0 (id=325):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 64)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (rerun: 64)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101400, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000000000f3054d564b"]) (async)
newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) (async)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
brk(0xffffffffffffff80)
fsopen(&(0x7f0000000080)='adfs\x00', 0x0) (async)
syz_open_procfs(0x0, 0x0)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])

783.525497ms ago: executing program 4 (id=327):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
write$cgroup_int(0xffffffffffffffff, 0x0, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400})
r3 = dup(r1)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500561008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
r4 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1)
read(r4, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000000)={[], [{@flag='dirsync'}]})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x2) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
recvmmsg(r2, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) (async)
dup(r1) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500561008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (async)
fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) (async)
read(r4, 0x0, 0x0) (async)
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000000)={[], [{@flag='dirsync'}]}) (async)

781.954557ms ago: executing program 0 (id=328):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x83, 0x4)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x1201144, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext='])

780.907427ms ago: executing program 0 (id=329):
io_setup(0x800, &(0x7f0000000440)=<r0=>0x0)
r1 = eventfd(0x0)
io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x4f}])
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001b40), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000240)={'wpan3\x00'})
sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001c00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="09000000861759124c62d1e280e14fc25a09fe02fc607e18f0a1eed8c1380bf55526088fad826da2616e7bf3f8bb4adaf0a556453c096e1393aac7dee61a4aa560e2d030c4b2f1a2f48b567c1ef793af6b1c544af33eafce685881b0fc00fb982c8612c29c301b16ef7d60cb788772b57b9855cb750a1a9e2cf120b9ee856be652b4432c339eb0f82be0c4ce27526693c2b17aa0ece23e129d01bd7b513e893050834c304335", @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbdf25120000000c0006000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0x4) (async)
sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001c00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="09000000861759124c62d1e280e14fc25a09fe02fc607e18f0a1eed8c1380bf55526088fad826da2616e7bf3f8bb4adaf0a556453c096e1393aac7dee61a4aa560e2d030c4b2f1a2f48b567c1ef793af6b1c544af33eafce685881b0fc00fb982c8612c29c301b16ef7d60cb788772b57b9855cb750a1a9e2cf120b9ee856be652b4432c339eb0f82be0c4ce27526693c2b17aa0ece23e129d01bd7b513e893050834c304335", @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbdf25120000000c0006000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0x4)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000c00)={0x99fa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r6=>0x0}], 0x1, "94f76496e9aad8"})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000f1000040"]) (async)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000f1000040"])
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001c00)={{r6, 0x40, 0x6, 0x1, 0x8, 0xe99, 0x7, 0x3e, 0x1ff, 0x2, 0x7, 0xffffffffffffff2e, 0x8000, 0x7, 0x5}})
openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x2000, 0x4) (async)
r10 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x2000, 0x4)
r11 = dup(r10)
ioctl$sock_inet_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000140)={'pimreg\x00', {0x2, 0x4e24, @remote}})
r12 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={<r13=>r5, 0x3, 0xf, 0x4})
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000030c0), 0x1, 0x0)
r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x2) (async)
r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r16, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000082000040"])
ioctl$PPPIOCSFLAGS1(r13, 0x40047459, &(0x7f0000000040)=0x2003024)
ioctl$KVM_X86_SET_MSR_FILTER(r12, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)='\x00'}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffefe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) (async)
ioctl$KVM_X86_SET_MSR_FILTER(r12, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)='\x00'}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffefe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
socket$can_raw(0x1d, 0x3, 0x1) (async)
r17 = socket$can_raw(0x1d, 0x3, 0x1)
epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r17, &(0x7f00000001c0)={0x50002008}) (async)
epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r17, &(0x7f00000001c0)={0x50002008})
setsockopt$CAN_RAW_RECV_OWN_MSGS(r17, 0x65, 0x8, &(0x7f0000000200), 0x4) (async)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r17, 0x65, 0x8, &(0x7f0000000200), 0x4)

779.957027ms ago: executing program 4 (id=330):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75d, 0x10b382)
r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)="e84a97d7e3d21ee3e037d597a03a0bf61387d865f33b5bde8f104d3f0f77fd27f9795d744a2e92469d8b46b01f80e477c6e9438de49a7662a8cd55ee2fe81bf09bd9fbc69fc08bdcd320679b40899774a54a22713ab9041dc0e2e8a2cb364906530b7dc1eb15ee8137c465f61f882e6363f6def545234751962c84ffd9a6ce405eca5e74717091436d3709417e7d9a9ec67649b41687ef5e1ef5f8db0f1c50a17d3feb603acf155971d6c2b0cffd1e0bed0191662f622d43966f7694cbaaef82221ccbde7af946a970559e37032ca2416100000000000000", 0xd8}], 0x1, 0x800004, 0x0) (async)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
pwritev2(r2, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, 0x2, 0x1, 0x10) (async)
sendfile(r1, r1, 0x0, 0x24002de8)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x3000008, 0x30, 0xffffffffffffffff, 0xf6d0d000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140))
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000400)={0x0, {}, 0x0, {}, 0xc, 0x0, 0xffffffff, 0x18, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f4e1df82d00", [0x6, 0x9]}) (async, rerun: 32)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) (rerun: 32)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000340)={&(0x7f000057b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/4096, 0x1000, 0x0, &(0x7f00000002c0)=""/118, 0x76}, &(0x7f0000000380)=0x40) (async, rerun: 32)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32)
ppoll(&(0x7f0000000080)=[{r0, 0x2403}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

662.332787ms ago: executing program 4 (id=333):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
rt_sigqueueinfo(0x0, 0x28, &(0x7f0000000340)={0x2b, 0xfffffffd, 0x400})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0xfe1ba1212b32ef2d, 0x5000, 0x2000, &(0x7f000000f000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000ffd000/0x3000)=nil})
socket$inet_tcp(0x2, 0x1, 0x0)
setreuid(0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom0\x00', 0x802, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701)
close_range(r0, 0xffffffffffffffff, 0x0)

586.657953ms ago: executing program 4 (id=336):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r1 = fsopen(&(0x7f0000000000)='dax\x00', 0x1)
write(r1, &(0x7f0000000080)="01", 0x1)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)

543.133946ms ago: executing program 4 (id=338):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000104010800000000000001000200004605000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r2 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000009c0), &(0x7f0000cab000)=0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdf25080000001800048013000100"], 0x2c}}, 0x26008890)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x238, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x969d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1551}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x148, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2bc}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e32}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc545}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x372}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffff801}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x800}, 0x4000c44)
readv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2)

541.591496ms ago: executing program 3 (id=340):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async)
ioctl$TCFLSH(r2, 0x800455cc, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000500)={'icmp6\x00'}, &(0x7f0000000540)=0x1e) (async, rerun: 64)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) (rerun: 64)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x9) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async, rerun: 64)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0x101}, @flat=@binder={0x73622a85, 0x0, 0x2}, @fda={0x66646185, 0x0, 0x1, 0x9}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}}, @enter_looper, @register_looper], 0x9, 0x0, &(0x7f0000000100)="0c22b880edd5856d21"}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/resume', 0x141000, 0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x404c004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async)
pipe2$9p(0x0, 0x0) (async)
chmod(&(0x7f0000000140)='./file0\x00', 0x0) (async)
syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') (async, rerun: 32)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"}) (rerun: 32)
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
openat$incfs(r6, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) (async, rerun: 32)
unshare(0x2a020400) (rerun: 32)

540.950146ms ago: executing program 4 (id=341):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) (async)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}) (async)
syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000001140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x4, 0x90, 0x9c, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x4d, {{0x5}, {0x5, 0x24, 0x0, 0x937}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x9, 0x8}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xe, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8, 0xb, 0x3}}}}}]}}]}}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0})
r4 = socket$packet(0x11, 0x2, 0x300)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8)
setreuid(0x0, r2) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r6 = syz_open_dev$ptys(0xc, 0x3, 0x1)
fchown(r6, r2, r3) (async)
r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r7, 0x0, 0x0) (async)
setsockopt$inet_mreqn(r5, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0xa000000}, 0xc)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) (async)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async)
syz_usb_connect(0x2, 0x3e3, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0xf3, 0xe3, 0x8c, 0x10, 0xfe9, 0xdb98, 0x6f0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d1, 0x2, 0x4, 0xac, 0x0, 0x1, [{{0x9, 0x4, 0xf9, 0x93, 0x2, 0x8d, 0x89, 0xa9, 0x8, [@generic={0xaf, 0x30, "05c181fe21cdf448a57672631f57ab6823841192c0a23c5c19655ade0d6116c47c571ea7e2d900de76c9d34f7854d03b467fb1631ca953f3d97d44b93e84a57ffdcfc3b1a49ed1215c056468669c4afb6c3bb02b845321d250b966e355fa936bb1a492bf00babd6a5233336dfa25a0913cb37b9de1fe3fe9b3b3f0d2b49d749a26176d0eb2c738c5eb176191118a9bea43397a70af85ead9d10cd8833ae3c43e7c9321b2ca9c5a77c59a4f8932"}, @hid_hid={0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0x303}}], [{{0x9, 0x5, 0x7, 0x10, 0x20, 0xa9, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x5}]}}, {{0x9, 0x5, 0x86, 0x4, 0x8, 0x6, 0x0, 0x4, [@generic={0x100, 0x23, "8c326c1a682daaeba5d880f1c2f4176570eaecbbe261b135ef6c28a7bde2baaa408f9996aee8e8b9918a08a407617744c2186b7266033ef2d28179de653b37f25b7d33af8476a71e092b05c1e53cbfb3cbe62261e5430969410132ce6a1b660c93c3b4a3205346a56fde85fb0bfee3ddede083630e8fcc244c905bfd318bb65e0d0350f062947c5514de7a5cbf151b1f8ee7ef0bbd70f22ba56c61176492591c4715a2ca15977d96e2af9dcbda194d6bc0698759a2cd4de399aecba4557622fe8f3581e436999e4e9e478895ef8a2e8e02fc1eabdfdb0f9be7262fed8f09fadf0febf57f40acae21bc42e99813411d386a296f43270de4ed0f0458294169"}]}}]}}, {{0x9, 0x4, 0xa8, 0x6, 0x9, 0x8a, 0xda, 0xca, 0x0, [], [{{0x9, 0x5, 0x5, 0x0, 0x40, 0x74, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0x6, 0x3, 0x1f7, 0x1, 0x45, 0x10}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x7, 0x6, 0x9}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0x9, 0x9, 0x7d, [@generic={0x8e, 0x24, "3d199ec924acc298aac9179ccfb9ac1705417147a33b8b96cb609bae8d5e109f9b709c788c5b750a305fd8b57a9ee9cb8d26739fc9fa716df5b59964a152240ffcea5247ec320c4344c0018b8e97b08fa08962222c6cee3ed5995007a34ccf1f4ca241d8ba04a1d2603e88a7e219dabb376cffa09a0cad717b1e8d835cea0822f104e4d60831685f13380353"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xfb}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x2, 0x2e, 0x5}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0x0, 0x6, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7ff}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x7f, 0x7, 0x7f}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x3, 0x7, 0x6}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x1, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0xff81}, @generic={0xe3, 0x3, "6ed746bbda3792934cbb4e97d9ceb456e5409077018d36c2eb6c16a9de38869b127c9b88c13b9a0084186c9348e088639eb306924b1a007355553cbddadc194bfee66d2105b72abf5a112cd0f98da5231f64e0f435f0d5842848f62741e0142410b3c16e8f17eef7aeea4319ff011270dbad8c493c5ba519d57eb07f7cb6c6fec232fbd1acc8d4fa8e180f8458ed70ff1b7d546b696b5a68348f78f615d502965fbc3d7ab3ca373219b1a9b82dbe099068d7f3a89789f9127e2cc1eceece133888dfcb89391f69344c898f116044736406d8772f7aeb0bf4079594908f801653f6"}]}}]}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x140, 0x5, 0x8, 0xa4, 0xff, 0x9}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2c, 0x2, 0x2, 0x4, 0x6}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x416}}, {0xde, &(0x7f0000000300)=@string={0xde, 0x3, "a019d94864f81ee4960851130ccf2a1002fd178123b04dcd1c01930c8532462e2222f31654b1b6bdb29b6edd1d282f1e54a1a6c87ed3325ad12ab90b30169d3306be35796921602cc193bf124edafc8028ac196855373e5964a9246cbc90e2a77886d9470a665f64ceebfab32e5289714f8293e4f6cfbec2d7de420422392c8a99a93faff6d9ef63414008ba97392f8f5a11f3f44c088425d94c957941dd9aa22f75bac8c87494c7b2d97360620cd3bd59cc8dc268089690c6aad8234e29858d630836b85a3a4aaf19d0385a0a29b7da5ba97c9a12e5eb39c0bed504"}}, {0x1d, &(0x7f0000000280)=@string={0x1d, 0x3, "8832c4c7aef77bf08201b75f519570b3a77d70db9e0f3c0876abbc"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3c4c3fdd174358ed}}]})

495.5621ms ago: executing program 3 (id=342):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000034d564b"])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0x1d6, 0x0, 0x0, 0xfffffffd})
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000001c0)={0x8000041, 0x0, 0x1}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
sendmsg$tipc(r6, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f00000002c0)=0x18)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x200000, 0x81, 0xffffffff, 0xfffffffe})
r9 = syz_open_dev$loop(&(0x7f0000000340), 0x5, 0x188862)
ioctl$BLKFLSBUF(r9, 0x1261, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r10 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r10, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_INIT(r10, 0x29, 0xc8, &(0x7f0000000000), 0x4)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c1d346a95300e69f"}, 0x6)
ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0)

486.424501ms ago: executing program 3 (id=344):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x180, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x12, r0, 0x56a2d000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x82040, 0x144)
madvise(&(0x7f000062d000/0x4000)=nil, 0x4000, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getdents(r1, &(0x7f0000000080)=""/31, 0x1f)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0x4000cdd)
close_range(r3, 0xffffffffffffffff, 0x0)
chmod(&(0x7f0000000140)='./file0/file0\x00', 0x100)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

486.079211ms ago: executing program 5 (id=345):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000080)={0x1, 0x0, @pic={0x5, 0xd, 0x1, 0x0, 0x8, 0xff, 0x1, 0x0, 0x2, 0x7, 0x6, 0x9, 0x83, 0x5, 0x53, 0x40}})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000013000/0x4000)=nil, 0x4000, 0x3})
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0)

471.205752ms ago: executing program 3 (id=346):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
fsopen(&(0x7f0000000000)='befs\x00', 0x1)
writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)='e', 0x1}], 0x1)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r2, 0x0, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108)
r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x2046)
close_range(r0, 0xffffffffffffffff, 0x0)

426.163226ms ago: executing program 3 (id=347):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000140)={{0x2, 0x4e24, @empty}, {0x1, @random="1f08b379bddd"}, 0x4, {0x2, 0x4e21, @private=0xa010102}, 'lo\x00'})
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001b80)=[{{&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000100)=""/83, 0x53}, {&(0x7f00000001c0)=""/9, 0x9}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000280)=""/37, 0x25}, {&(0x7f00000002c0)=""/179, 0xb3}, {&(0x7f0000001400)=""/231, 0xe7}, {&(0x7f0000000380)=""/9, 0x9}], 0x9}, 0x3}, {{&(0x7f00000015c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000001640)=""/149, 0x95}, {&(0x7f0000001700)=""/67, 0x43}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/4096, 0x1000}], 0x4, &(0x7f0000001780)=""/190, 0xbe}, 0x7fffffff}, {{&(0x7f0000001840)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/185, 0xb9}, {&(0x7f0000001980)=""/149, 0x95}], 0x2, &(0x7f0000001a80)=""/226, 0xe2}, 0xfffffff9}], 0x3, 0x41, &(0x7f0000001c40)={0x77359400})
r3 = syz_pidfd_open(r0, 0x0)
setns(r3, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x1100, &(0x7f0000001dc0)={0xf, 0x80, 0x100000}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0), r4)
sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x8000)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000001c80))
mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
write(r6, &(0x7f0000000400)="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", 0x1f000)

425.853036ms ago: executing program 0 (id=348):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f0000000140))
syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac00090400000107000009090585"], 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x718]}, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0))
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000080)=0x1, 0x4)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x802, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000040)={0x2})

381.575059ms ago: executing program 5 (id=349):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000580)=[{&(0x7f0000000700)="d264aec9900ecd9fcebed12d6d44", 0xe}], 0x1, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0)
close(r3)
quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0)
mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, r4, 0x5)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r5)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r5)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="6bcf25bd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x800)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)

301.125226ms ago: executing program 5 (id=350):
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x400000, 0x3)
futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x77359400}})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private0, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000200)=0xe8)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000000c0)=@sr0, r2, &(0x7f0000000240))
setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)="18a61d4ebbaceaa643df09c515cd43a3c77430c6f9ff50bbeb4d79a9081b0447f174ba72f4bec05fcf0356f71180245f74879975e55b3cfade08cd111a2ff9bca0f1a809138ec961612aa239d2ffcc5c6f8b696dc70f971f9d884d4e9d61c297370d8331e59bcbdb628b2e082ee1e26bdccf50ce7f2722a17187c5", 0x7b, 0x0)
setxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)=@v1={0x1000000, [{0x7, 0x5330}]}, 0xc, 0x2)
mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8401, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@context={'context', 0x3d, 'system_u'}}, {@permit_directio}, {@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x1ff}}, {@subj_type={'subj_type', 0x3d, '/dev/sr0\x00'}}, {@context={'context', 0x3d, 'user_u'}}]})
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000580)=@rnullb, r2, &(0x7f00000005c0)={0x300000000000, 0x2, 0x1})
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000600)={{0x2, 0x6}, 0x100, './file0\x00'})
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000740))
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000007c0)=@sg0, r2, &(0x7f0000000800))
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000880)=@nullb, r2, &(0x7f00000008c0))
r3 = openat2(r0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x2000, 0xa, 0x10}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a40)={'sit0\x00', &(0x7f00000009c0)={'gretap0\x00', r1, 0x10, 0x40, 0x9, 0xffffffff, {{0xd, 0x4, 0x1, 0x29, 0x34, 0x65, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x89, [@multicast2]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0xe, "2c5105e1347bcaf6d70a0634"}]}}}}})
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000a80)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x28, 0xa, 0x0, 0x7ff, 0x8f, 0x2, "4411a8b5bb138159840f98c35675317fdd12f6e7c1f1319350235030b1325ced8d47997ddd6c6f5c"}}, 0x140)
ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000bc0)={r3})
unlinkat(r3, &(0x7f0000000c00)='./file0\x00', 0x0)
chroot(&(0x7f0000000c40)='./file0\x00')
r4 = open(&(0x7f0000000c80)='./file0\x00', 0x8400, 0x8)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000cc0)=@sg0, r2, &(0x7f0000000d00)='./file0\x00')
chdir(&(0x7f0000000d40)='./file0\x00')
fcntl$getownex(r0, 0x10, &(0x7f0000000f80)={0x0, <r5=>0x0})
r6 = getpgid(0x0)
r7 = syz_clone3(&(0x7f0000001240)={0x100010200, &(0x7f0000000fc0), &(0x7f0000001000)=<r8=>0x0, &(0x7f0000001040), {0x11}, &(0x7f0000001080)=""/166, 0xa6, &(0x7f0000001140)=""/139, &(0x7f0000001200)=[0x0, 0x0], 0x2, {r3}}, 0x58)
read$FUSE(r3, &(0x7f00000012c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x2020)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000003300)={0x0, <r10=>0x0})
syz_clone3(&(0x7f00000033c0)={0x100000000, &(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00), {0x30}, &(0x7f0000000e40)=""/135, 0x87, &(0x7f0000000f00)=""/79, &(0x7f0000003380)=[r5, r6, r8, r9, r10], 0x5, {r4}}, 0x58)
ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000003440))
readlink(&(0x7f0000003480)='./file0\x00', &(0x7f00000034c0)=""/89, 0x59)
fcntl$lock(r4, 0x6, &(0x7f0000003540)={0x1, 0x2, 0x4, 0x8, r7})

202.172604ms ago: executing program 5 (id=351):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x4, @multicast1, 0x4e20, 0x2, 'wrr\x00', 0x2, 0x8, 0x2c}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x4e22, 0x1, 0xa, 0x7fffffff, 0xfb}}, 0x44)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r5, &(0x7f00000004c0)="3ce2de4d8d", 0x5, 0x4805, 0x0, 0x0)
r6 = socket(0x1f, 0xa, 0x7)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd004000", 0x24)
recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000003100)=""/4099, 0x1003}], 0x1}, 0x100}], 0x1, 0x10022, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba2e"})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r7, &(0x7f00000008c0)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$poke(0x1, r8, &(0x7f00000004c0), 0x7fff)

82.137203ms ago: executing program 5 (id=352):
setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0)={'0000000000000000000000000000000', 0x32}, 0x20, 0x1)
r0 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x400, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x179}, {0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0xffffffffffffffff, {[0x8, 0x4, 0x6, 0x6e, 0xfffffc01, 0x2, 0x6, 0x7]}}, 0x5c)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r1, 0x22e7c000)

53.493676ms ago: executing program 3 (id=353):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000000100000000000008001f0001000000", 0x24) (async, rerun: 64)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) (rerun: 64)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32)
setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000100)=0x100, 0x4) (async, rerun: 32)
r3 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, 0x0, &(0x7f0000000080)=0x29) (async)
openat(r1, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x0)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async)
write$bt_hci(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="01222004c90005000500"], 0xa) (async, rerun: 64)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) (rerun: 64)
dup2(0xffffffffffffffff, r3)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000180)=0x1b34a93f, 0x4)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0x44fd4) (async, rerun: 32)
r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000140)={&(0x7f0000000500)=""/117, 0x75, 0x9, 0xffffff8d}) (async)
r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$FITHAW(r7, 0xc0045878) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x11, r6, 0xf648e000) (async)
r8 = socket(0x11, 0x3, 0x0)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0900000075705fc743f7", @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000400,\x00'])
open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x82) (async)
r9 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r9, &(0x7f0000007100)={0x2020}, 0x941f)

0s ago: executing program 5 (id=354):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e22, 0xfffe, 0x0, 0x0, 0x2, 0x20, 0x0, 0x8}, {0x0, 0x2, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x2, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x2b}, 0x2, @in6=@loopback, 0xfffffffe, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8)
syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0)
socketpair(0x25, 0x5, 0x80, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000200))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000280)={0x60, 0x2, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x7f924cda415610b9, 0x2, 0x1})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
socket(0x10, 0x803, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xe, 0x0, 0x0)
ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000001c0)=""/153)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r4, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})
setreuid(0xee00, 0xee00)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xb, 0x0, 0x8e, 0x0, 0x0, 0x2000000}})
ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts.
[   26.385305][   T36] audit: type=1400 audit(1756550979.430:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   26.386741][  T281] cgroup: Unknown subsys name 'net'
[   26.408045][   T36] audit: type=1400 audit(1756550979.430:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.436008][   T36] audit: type=1400 audit(1756550979.480:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.436282][  T281] cgroup: Unknown subsys name 'devices'
[   26.617233][  T281] cgroup: Unknown subsys name 'hugetlb'
[   26.622866][  T281] cgroup: Unknown subsys name 'rlimit'
[   26.757377][   T36] audit: type=1400 audit(1756550979.800:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.780586][   T36] audit: type=1400 audit(1756550979.800:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   26.805382][   T36] audit: type=1400 audit(1756550979.800:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   26.816395][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   26.837271][   T36] audit: type=1400 audit(1756550979.880:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.862730][   T36] audit: type=1400 audit(1756550979.880:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.901835][   T36] audit: type=1400 audit(1756550979.940:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.902351][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   26.927789][   T36] audit: type=1400 audit(1756550979.940:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.767524][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.774671][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.781836][  T288] bridge_slave_0: entered allmulticast mode
[   27.788314][  T288] bridge_slave_0: entered promiscuous mode
[   27.801028][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.808188][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.815329][  T288] bridge_slave_1: entered allmulticast mode
[   27.821577][  T288] bridge_slave_1: entered promiscuous mode
[   27.851721][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.858828][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.866239][  T289] bridge_slave_0: entered allmulticast mode
[   27.872518][  T289] bridge_slave_0: entered promiscuous mode
[   27.879882][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.886984][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.894052][  T289] bridge_slave_1: entered allmulticast mode
[   27.900411][  T289] bridge_slave_1: entered promiscuous mode
[   27.983003][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.990118][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.997479][  T290] bridge_slave_0: entered allmulticast mode
[   28.003712][  T290] bridge_slave_0: entered promiscuous mode
[   28.010359][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.017445][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.024619][  T290] bridge_slave_1: entered allmulticast mode
[   28.030977][  T290] bridge_slave_1: entered promiscuous mode
[   28.060520][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.067715][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.074817][  T291] bridge_slave_0: entered allmulticast mode
[   28.081066][  T291] bridge_slave_0: entered promiscuous mode
[   28.093833][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.100979][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.108122][  T291] bridge_slave_1: entered allmulticast mode
[   28.114454][  T291] bridge_slave_1: entered promiscuous mode
[   28.216305][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.223372][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.230687][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.237768][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.245925][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.252986][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.260284][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.267351][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.307699][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.314839][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.322104][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.329265][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.338079][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.345142][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.352408][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.359458][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.381373][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.388677][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.396669][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.404042][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.411353][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.418994][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.426488][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.433751][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.446091][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.453149][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.478137][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.485218][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.492996][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.500085][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.515433][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.522479][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.541983][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.549153][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.567120][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.574179][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.582065][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.589138][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.614447][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.621523][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.632063][  T291] veth0_vlan: entered promiscuous mode
[   28.647914][  T291] veth1_macvtap: entered promiscuous mode
[   28.687377][  T288] veth0_vlan: entered promiscuous mode
[   28.702415][  T290] veth0_vlan: entered promiscuous mode
[   28.724089][  T288] veth1_macvtap: entered promiscuous mode
[   28.731886][  T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   28.762053][  T289] veth0_vlan: entered promiscuous mode
[   28.779820][  T290] veth1_macvtap: entered promiscuous mode
[   28.815917][  T289] veth1_macvtap: entered promiscuous mode
[   28.921940][  T351] rust_binder: Error while translating object.
[   28.922059][  T351] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   28.939866][  T351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5
[   28.955017][  T353] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.971032][   T45] rust_binder: 342: removing orphan mapping 0:24
[   29.007363][  T363] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   29.048207][  T367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=367 comm=syz.0.12
[   29.068029][  T370] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   29.100621][  T367] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   29.284267][   T45] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   29.401330][  T381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'.
[   29.446562][   T45] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[   29.458245][   T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   29.469383][   T45] usb 2-1: config 0 has no interface number 0
[   29.478253][   T45] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   29.488666][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.501687][   T45] usb 2-1: Product: syz
[   29.506666][   T45] usb 2-1: Manufacturer: syz
[   29.511485][   T45] usb 2-1: SerialNumber: syz
[   29.591594][   T45] usb 2-1: config 0 descriptor??
[   29.597636][   T45] hub 2-1:0.31: bad descriptor, ignoring hub
[   29.603656][   T45] hub 2-1:0.31: probe with driver hub failed with error -5
[   29.612092][   T45] usb 2-1: Found UVC 0.04 device syz (046d:08c3)
[   29.618940][   T45] usb 2-1: No valid video chain found.
[   29.687036][  T396] =======================================================
[   29.687036][  T396] WARNING: The mand mount option has been deprecated and
[   29.687036][  T396]          and is ignored by this kernel. Remove the mand
[   29.687036][  T396]          option from the mount to silence this warning.
[   29.687036][  T396] =======================================================
[   29.798798][  T365] mmap: syz.1.13 (365) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   29.813706][  T365] Zero length message leads to an empty skb
[   29.835784][  T400] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 227)
[   29.835813][  T400] rust_binder: Error while translating object.
[   29.846823][  T400] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   29.853022][  T400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13
[   29.892047][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[   29.934429][   T45] usb 2-1: USB disconnect, device number 2
[   30.074280][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   30.205185][   T10] usb 3-1: device descriptor read/64, error -71
[   30.221361][  T409] rust_binder: Error while translating object.
[   30.221403][  T409] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   30.227706][  T409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:23
[   30.303491][  T411] SELinux: security_context_str_to_sid () failed with errno=-22
[   30.444284][   T10] usb 3-1: device descriptor read/64, error -71
[   30.594286][   T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   30.694305][   T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   30.745809][   T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   30.756837][   T45] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 12336, setting to 64
[   30.769143][   T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   30.778239][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.786315][   T45] usb 2-1: Product: syz
[   30.790470][   T45] usb 2-1: Manufacturer: syz
[   30.795211][   T45] usb 2-1: SerialNumber: syz
[   30.824335][   T10] usb 3-1: device descriptor read/64, error -71
[   31.064282][   T10] usb 3-1: device descriptor read/64, error -71
[   31.174482][   T10] usb usb3-port1: attempt power cycle
[   31.514306][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   31.535367][   T10] usb 3-1: device descriptor read/8, error -71
[   31.665311][   T10] usb 3-1: device descriptor read/8, error -71
[   31.805211][   T45] cdc_ncm 2-1:1.0: bind() failure
[   31.811422][   T45] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[   31.819733][   T45] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[   31.829041][   T45] usb 2-1: USB disconnect, device number 3
[   31.914322][   T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   31.934325][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   31.942501][   T10] usb 3-1: device descriptor read/8, error -71
[   32.075470][   T10] usb 3-1: device descriptor read/8, error -71
[   32.184388][   T10] usb usb3-port1: unable to enumerate USB device
[   32.470310][   T36] kauditd_printk_skb: 117 callbacks suppressed
[   32.470329][   T36] audit: type=1400 audit(1756550985.510:191): avc:  denied  { unmount } for  pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   32.508838][   T36] audit: type=1400 audit(1756550985.550:192): avc:  denied  { read write } for  pid=439 comm="syz.3.36" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   32.545029][  T440] rust_binder: Failed to allocate buffer. len:4248, is_oneway:true
[   32.545073][  T440] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   32.553220][   T36] audit: type=1400 audit(1756550985.580:193): avc:  denied  { open } for  pid=439 comm="syz.3.36" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   32.574241][  T440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:23
[   32.604245][   T36] audit: type=1400 audit(1756550985.580:194): avc:  denied  { ioctl } for  pid=439 comm="syz.3.36" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   32.785156][  T446] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   32.862908][   T36] audit: type=1400 audit(1756550985.900:195): avc:  denied  { ioctl } for  pid=445 comm="syz.3.38" path="socket:[3806]" dev="sockfs" ino=3806 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   32.920182][   T36] audit: type=1400 audit(1756550985.930:196): avc:  denied  { connect } for  pid=445 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   33.066280][  T457] capability: warning: `syz.2.42' uses deprecated v2 capabilities in a way that may be insecure
[   33.120487][  T453] rust_binder: Error in use_page_slow: ESRCH
[   33.120518][  T453] rust_binder: use_range failure ESRCH
[   33.144937][  T453] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[   33.160626][  T453] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   33.184534][  T453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:32
[   33.215219][   T36] audit: type=1400 audit(1756550986.260:197): avc:  denied  { shutdown } for  pid=466 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   33.264369][  T467] rust_binder: Write failure EFAULT in pid:42
[   33.274248][   T36] audit: type=1400 audit(1756550986.260:198): avc:  denied  { read } for  pid=466 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   33.325899][   T36] audit: type=1400 audit(1756550986.290:199): avc:  denied  { name_bind } for  pid=466 comm="syz.2.44" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   33.394279][   T36] audit: type=1400 audit(1756550986.290:200): avc:  denied  { node_bind } for  pid=466 comm="syz.2.44" saddr=::ffff:127.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   33.561069][  T482] bridge_slave_0: left allmulticast mode
[   33.575641][  T479] overlayfs: missing 'lowerdir'
[   33.583488][  T482] bridge_slave_0: left promiscuous mode
[   33.604338][  T482] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.724512][  T486] fuseblk: Bad value for 'user_id'
[   33.734188][  T486] fuseblk: Bad value for 'user_id'
[   33.924432][  T498] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   34.086888][  T501] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:57
[   34.089038][  T505] binder: Unknown parameter 'context�'
[   34.119887][  T329] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   34.166746][    T9] rust_binder: 500: removing orphan mapping 0:24
[   34.180977][    T9] rust_binder: 0: removing orphan mapping 24:1112
[   34.426202][  T524] input: syz1 as /devices/virtual/input/input4
[   34.534286][  T529] usb usb8: usbfs: process 529 (syz.3.59) did not claim interface 0 before use
[   34.694265][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   34.715861][  T531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'.
[   34.744573][  T531] netlink: 324 bytes leftover after parsing attributes in process `syz.3.60'.
[   34.884635][    T9] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   34.893731][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.922069][    T9] usb 3-1: config 0 descriptor??
[   35.003101][  T533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41
[   35.003142][  T533] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   35.034278][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   35.057417][  T533] rust_binder: Read failure Err(EFAULT) in pid:41
[   35.069323][  T431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18
[   35.134807][    T9] usb 3-1: Cannot read MAC address
[   35.150497][    T9] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   35.174160][    T9] usb 3-1: USB disconnect, device number 6
[   35.205330][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   35.224273][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   35.244510][   T10] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   35.284266][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.316897][   T10] usb 4-1: config 0 descriptor??
[   35.457787][  T550] fuse: Bad value for 'fd'
[   35.505248][  T557] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.654312][   T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   35.815332][   T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   35.826340][   T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 12336, setting to 64
[   35.838788][   T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   35.847952][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.856721][   T31] usb 1-1: Product: syz
[   35.860992][   T31] usb 1-1: Manufacturer: syz
[   35.868829][   T31] usb 1-1: SerialNumber: syz
[   35.925868][   T10] usbhid 4-1:0.0: can't add hid device: -32
[   35.932358][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -32
[   36.044254][  T329] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[   36.091410][   T31] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[   36.098024][   T31] cdc_ncm 1-1:1.0: bind() failure
[   36.108473][   T31] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[   36.115130][  T567] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   36.115512][   T31] cdc_ncm 1-1:1.1: bind() failure
[   36.147737][  T570] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   36.147775][  T570] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:72
[   36.157509][   T31] usb 1-1: USB disconnect, device number 2
[   36.195478][  T329] usb 2-1: Invalid ep0 maxpacket: 16
[   36.200947][  T329] usb usb2-port1: attempt power cycle
[   36.241273][  T580] netlink: 3529 bytes leftover after parsing attributes in process `syz.2.76'.
[   36.283866][  T581] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   36.283894][  T581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63
[   36.544317][  T329] usb 2-1: new low-speed USB device number 6 using dummy_hcd
[   36.574708][  T329] usb 2-1: Invalid ep0 maxpacket: 16
[   36.704279][  T329] usb 2-1: new low-speed USB device number 7 using dummy_hcd
[   36.724607][  T329] usb 2-1: Invalid ep0 maxpacket: 16
[   36.730153][  T329] usb usb2-port1: unable to enumerate USB device
[   36.844258][   T31] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   36.995030][   T31] usb 1-1: not running at top speed; connect to a high speed hub
[   37.003602][   T31] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[   37.014541][   T31] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x2 has invalid maxpacket 512, setting to 64
[   37.025278][   T31] usb 1-1: config 1 interface 0 has no altsetting 0
[   37.033339][   T31] usb 1-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.40
[   37.042429][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.050539][   T31] usb 1-1: Manufacturer: ц
[   37.055128][   T31] usb 1-1: SerialNumber: ⠹蹎ↇ鮙㎾묱瓃뀉市쐱袘ᜒ핛ꞅ얲⢤吠쟝걘御钝纀࿼㏎뙿뺫漭愢騢澘᝸儝퟼螁䖊釷難ꙫ홝龶쾝璘ຬ勀뿵乂Ằ櫊㯲峽挨⫼繁䳳
[   37.076467][  T606] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   37.083661][  T606] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   37.424309][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   37.494418][  T606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.503011][  T606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.516180][   T31] usbhid 1-1:1.0: can't add hid device: -71
[   37.522167][   T31] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[   37.531154][   T31] usb 1-1: USB disconnect, device number 3
[   37.584245][    T9] usb 3-1: Using ep0 maxpacket: 8
[   37.590629][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[   37.599107][    T9] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[   37.607231][    T9] usb 3-1: config 0 has no interface number 0
[   37.613373][    T9] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 102, changing to 10
[   37.624661][    T9] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 24624, setting to 1024
[   37.635912][    T9] usb 3-1: config 0 interface 88 has no altsetting 0
[   37.644519][    T9] usb 3-1: string descriptor 0 read error: -22
[   37.650708][    T9] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   37.660123][    T9] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   37.668991][    T9] usb 3-1: config 0 descriptor??
[   37.677924][    T9] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input5
[   37.727042][    T9] usb 4-1: USB disconnect, device number 2
[   37.788453][   T36] kauditd_printk_skb: 35 callbacks suppressed
[   37.788471][   T36] audit: type=1400 audit(1756550990.830:236): avc:  denied  { create } for  pid=628 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   37.877580][   T36] audit: type=1400 audit(1756550990.920:237): avc:  denied  { lock } for  pid=617 comm="syz.2.88" path="socket:[4947]" dev="sockfs" ino=4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[   37.901179][   T36] audit: type=1400 audit(1756550990.920:238): avc:  denied  { mount } for  pid=617 comm="syz.2.88" name="/" dev="overlay" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   37.923326][   T31] usb 3-1: USB disconnect, device number 7
[   38.177355][   T36] audit: type=1400 audit(1756550991.220:239): avc:  denied  { accept } for  pid=634 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   38.198503][   T36] audit: type=1400 audit(1756550991.240:240): avc:  denied  { read } for  pid=634 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   38.330909][  T640] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   38.431399][   T36] audit: type=1400 audit(1756550991.470:241): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   38.461498][  T648] rust_binder: Failed copying into alloc: EFAULT
[   38.461523][  T648] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   38.467979][  T648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   38.476342][  T648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:97
[   38.499496][   T36] audit: type=1400 audit(1756550991.540:242): avc:  denied  { create } for  pid=649 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   38.541885][   T36] audit: type=1326 audit(1756550991.580:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=653 comm="syz.1.103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4aecd8ebe9 code=0x0
[   38.584264][   T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   38.589357][  T658] overlay: filesystem on ./bus not supported as upperdir
[   38.599578][   T36] audit: type=1400 audit(1756550991.640:244): avc:  denied  { write } for  pid=657 comm="syz.2.105" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   38.622422][   T36] audit: type=1400 audit(1756550991.640:245): avc:  denied  { ioctl } for  pid=657 comm="syz.2.105" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   38.744248][   T45] usb 1-1: Using ep0 maxpacket: 32
[   38.750647][   T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   38.760852][   T45] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[   38.774680][   T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   38.783754][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   38.791849][   T45] usb 1-1: SerialNumber: syz
[   38.798047][   T45] cdc_acm 1-1:1.0: Zero length descriptor references
[   38.804800][   T45] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22
[   38.834272][   T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   38.985267][   T10] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[   38.996402][   T10] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   39.007681][   T10] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[   39.016703][  T643] rust_binder: Write failure EFAULT in pid:93
[   39.021917][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   39.037143][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   39.045173][   T10] usb 3-1: SerialNumber: syz
[   39.348179][   T10] rndis_host 3-1:253.0: RNDIS init failed, -71
[   39.355111][   T10] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71
[   39.367736][   T10] usb 3-1: USB disconnect, device number 8
[   39.402559][  T668] binder: Unknown parameter '�^�:[7��Ņ�����ʀ6�����������Z�2���{(��OWz�'
[   39.464472][  T676] PM: Enabling pm_trace changes system date and time during resume.
[   39.464472][  T676] PM: Correct system time has to be restored manually after resume.
[   39.480813][  T676] netlink: 'syz.1.112': attribute type 13 has an invalid length.
[   39.524263][   T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   39.538929][  T680] netlink: 'syz.0.113': attribute type 1 has an invalid length.
[   39.675666][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   39.686808][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   39.702774][   T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   39.714294][   T10] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[   39.715983][   T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   39.732335][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.742755][   T45] usb 4-1: config 0 descriptor??
[   39.748756][   T45] hub 4-1:0.0: USB hub found
[   39.875464][   T10] usb 3-1: config 201 has an invalid interface number: 249 but max is 0
[   39.883859][   T10] usb 3-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config
[   39.914246][   T10] usb 3-1: config 201 has no interface number 0
[   39.920567][   T10] usb 3-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81
[   39.938098][   T10] usb 3-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   39.949131][   T45] hub 4-1:0.0: 14 ports detected
[   39.956940][   T45] hub 4-1:0.0: insufficient power available to use all downstream ports
[   39.961712][   T10] usb 3-1: config 201 interface 249 has no altsetting 0
[   39.985625][   T10] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df
[   39.994741][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.002838][   T10] usb 3-1: Product: syz
[   40.014871][   T10] usb 3-1: Manufacturer: syz
[   40.019502][   T10] usb 3-1: SerialNumber: syz
[   40.158102][   T45] hub 4-1:0.0: hub_hub_status failed (err = -71)
[   40.164658][   T45] hub 4-1:0.0: config failed, can't get hub status (err -71)
[   40.184907][   T45] usb 4-1: USB disconnect, device number 3
[   40.236383][   T10] usb 3-1: USB disconnect, device number 9
[   40.444629][  T698] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   40.444656][  T698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:103
[   40.454264][   T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   40.492647][  T707] rust_binder: Write failure EFAULT in pid:112
[   40.527091][  T709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:114
[   40.625390][   T31] usb 2-1: config 0 has an invalid interface number: 18 but max is 0
[   40.642708][   T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   40.652847][   T31] usb 2-1: config 0 has no interface number 0
[   40.659425][   T31] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[   40.668603][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.694093][   T31] usb 2-1: config 0 descriptor??
[   40.710477][   T31] usb 2-1: bad CDC descriptors
[   40.720305][  T727] tc_dump_action: action bad kind
[   40.793575][  T737] 9pnet_fd: Insufficient options for proto=fd
[   40.840438][  T739] SELinux:  policydb magic number 0x394a528c does not match expected magic number 0xf97cff8c
[   40.850977][  T739] SELinux: failed to load policy
[   40.908892][  T740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.918450][  T740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.931997][  T696] /dev/rnullb0: Can't lookup blockdev
[   40.974304][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   41.034270][   T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   41.134603][   T10] usb 4-1: too many configurations: 11, using maximum allowed: 8
[   41.161975][   T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   41.171151][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.179238][   T10] usb 4-1: Product: syz
[   41.183470][   T10] usb 4-1: Manufacturer: syz
[   41.188127][   T10] usb 4-1: SerialNumber: syz
[   41.196039][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   41.207492][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   41.220425][   T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   41.233359][   T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   41.242434][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.251243][   T31] usb 3-1: config 0 descriptor??
[   41.448233][   T45] usb 2-1: USB disconnect, device number 8
[   41.660176][   T31] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   41.678280][   T31] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   41.861393][   T65] usb 3-1: USB disconnect, device number 10
[   41.905217][  T660] usb 4-1: USB disconnect, device number 4
[   41.987997][  T777] netlink: 'syz.0.142': attribute type 4 has an invalid length.
[   41.997651][  T777] netlink: 'syz.0.142': attribute type 4 has an invalid length.
[   42.060387][  T783] 9pnet_fd: Insufficient options for proto=fd
[   42.094289][   T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   42.244167][  T804] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   42.254327][   T10] usb 2-1: Using ep0 maxpacket: 32
[   42.266459][   T10] usb 2-1: too many configurations: 65, using maximum allowed: 8
[   42.275056][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   42.286056][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   42.296871][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   42.307757][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   42.318651][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   42.329559][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   42.341237][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   42.352434][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   42.362623][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   42.371707][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.380690][   T10] usb 2-1: config 0 descriptor??
[   42.392985][   T10] hub 2-1:0.0: Invalid hub with more than one config or interface
[   42.406679][   T10] hub 2-1:0.0: probe with driver hub failed with error -22
[   42.624306][   T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   42.669143][  T813] binder: Unknown parameter 'sm���+͞��or'
[   42.708201][  T815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.716774][  T815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.725126][  T815] /dev/rnullb0: Can't lookup blockdev
[   42.754259][   T45] usb 3-1: device descriptor read/64, error -71
[   42.994274][   T45] usb 3-1: device descriptor read/64, error -71
[   43.139005][   T36] kauditd_printk_skb: 31 callbacks suppressed
[   43.139024][   T36] audit: type=1400 audit(1756550996.180:277): avc:  denied  { connect } for  pid=820 comm="syz.3.159" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   43.179110][   T36] audit: type=1400 audit(1756550996.220:278): avc:  denied  { bind } for  pid=822 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   43.211496][   T36] audit: type=1400 audit(1756550996.250:279): avc:  denied  { associate } for  pid=824 comm="syz.3.161" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   43.242425][   T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   43.244271][   T36] audit: type=1400 audit(1756550996.280:280): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   43.279190][  T833] capability: warning: `syz.3.162' uses 32-bit capabilities (legacy support in use)
[   43.283882][  T831] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   43.297599][  T831] rust_binder: Write failure EINVAL in pid:153
[   43.309582][  T838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59713 sclass=netlink_route_socket pid=838 comm=syz.3.164
[   43.325604][  T840] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.328828][  T840] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.335740][  T837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135
[   43.352301][  T846] netlink: 'syz.0.166': attribute type 27 has an invalid length.
[   43.373999][  T849] fuse: Bad value for 'fd'
[   43.384311][   T45] usb 3-1: device descriptor read/64, error -71
[   43.534740][  T851] netlink: 'syz.0.166': attribute type 27 has an invalid length.
[   43.614308][  T329] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   43.624394][   T45] usb 3-1: device descriptor read/64, error -71
[   43.665430][  T858] rust_binder: Failed to allocate buffer. len:10771147061988852024, is_oneway:false
[   43.665456][  T858] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   43.674978][  T858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:168
[   43.734430][   T45] usb usb3-port1: attempt power cycle
[   43.754259][  T329] usb 4-1: device descriptor read/64, error -71
[   43.757085][  T871] netlink: 'syz.0.173': attribute type 4 has an invalid length.
[   43.769426][  T871] netlink: 'syz.0.173': attribute type 4 has an invalid length.
[   43.796436][  T873] rust_binder: Write failure EFAULT in pid:183
[   43.826159][  T878] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.857389][   T36] audit: type=1400 audit(1756550996.900:281): avc:  denied  { write } for  pid=881 comm="syz.0.177" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   43.938759][  T890] 9pnet_virtio: no channels available for device /dev/rnullb0
[   44.004324][  T329] usb 4-1: device descriptor read/64, error -71
[   44.084298][   T45] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   44.105452][   T45] usb 3-1: device descriptor read/8, error -71
[   44.235546][   T45] usb 3-1: device descriptor read/8, error -71
[   44.244275][  T329] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   44.347110][  T906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.355838][  T906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.365704][  T906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.374273][  T329] usb 4-1: device descriptor read/64, error -71
[   44.375300][  T906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.389544][  T906] rust_binder: validate_parent_fixup: new_min_offset=8796093022268, sg_entry.length=238
[   44.389561][  T906] rust_binder: Error while translating object.
[   44.399503][  T906] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   44.405974][  T906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:216
[   44.484281][   T45] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   44.515394][   T45] usb 3-1: device descriptor read/8, error -71
[   44.624303][  T329] usb 4-1: device descriptor read/64, error -71
[   44.645510][   T45] usb 3-1: device descriptor read/8, error -71
[   44.734338][  T329] usb usb4-port1: attempt power cycle
[   44.742889][   T10] usb 2-1: USB disconnect, device number 9
[   44.754367][   T45] usb usb3-port1: unable to enumerate USB device
[   45.074293][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   45.074293][  T329] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   45.095304][  T329] usb 4-1: device descriptor read/8, error -71
[   45.214342][   T10] usb 2-1: device descriptor read/64, error -71
[   45.225394][  T329] usb 4-1: device descriptor read/8, error -71
[   45.454314][   T10] usb 2-1: device descriptor read/64, error -71
[   45.464279][  T329] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   45.485360][  T329] usb 4-1: device descriptor read/8, error -71
[   45.635262][  T329] usb 4-1: device descriptor read/8, error -71
[   45.694279][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   45.754263][  T329] usb usb4-port1: unable to enumerate USB device
[   45.814255][   T65] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[   45.834276][   T10] usb 2-1: device descriptor read/64, error -71
[   45.966146][   T65] usb 3-1: config 7 has an invalid interface number: 43 but max is 0
[   45.974515][   T65] usb 3-1: config 7 has no interface number 0
[   45.980688][   T65] usb 3-1: config 7 interface 43 has no altsetting 0
[   45.989221][   T65] usb 3-1: New USB device found, idVendor=8e38, idProduct=74d6, bcdDevice=d6.6c
[   45.998635][   T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.006875][   T65] usb 3-1: Product: syz
[   46.011241][   T65] usb 3-1: Manufacturer: syz
[   46.016319][   T65] usb 3-1: SerialNumber: syz
[   46.074287][   T10] usb 2-1: device descriptor read/64, error -71
[   46.184567][   T10] usb usb2-port1: attempt power cycle
[   46.225414][   T65] usb-storage 3-1:7.43: USB Mass Storage device detected
[   46.287127][   T65] usb 3-1: USB disconnect, device number 15
[   46.400860][  T925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:143
[   46.420001][   T36] audit: type=1400 audit(1756550999.460:282): avc:  denied  { setattr } for  pid=926 comm="syz.3.191" name="file0" dev="incremental-fs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   46.427324][  T929] /dev/rnullb0: Can't lookup blockdev
[   46.431891][   T36] audit: type=1400 audit(1756550999.470:283): avc:  denied  { watch watch_reads } for  pid=926 comm="syz.3.191" path="/46/file0" dev="incremental-fs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   46.490634][  T931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.499889][  T931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.517857][  T935] fuse: Unknown parameter '1844674407370955161500000000000000000000004'
[   46.534281][   T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   46.555361][   T10] usb 2-1: device descriptor read/8, error -71
[   46.686191][   T10] usb 2-1: device descriptor read/8, error -71
[   46.924347][   T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   46.945301][   T10] usb 2-1: device descriptor read/8, error -71
[   46.994295][   T45] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[   47.030194][  T943] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   47.030228][  T943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:235
[   47.075351][   T10] usb 2-1: device descriptor read/8, error -71
[   47.147902][   T45] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   47.165667][   T36] audit: type=1400 audit(1756551000.210:284): avc:  denied  { watch watch_reads } for  pid=964 comm="syz.0.204" path="/79" dev="tmpfs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   47.168649][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.200572][   T45] usb 3-1: config 0 descriptor??
[   47.220320][   T10] usb usb2-port1: unable to enumerate USB device
[   47.258357][   T36] audit: type=1400 audit(1756551000.300:285): avc:  denied  { read } for  pid=973 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   47.417414][   T36] audit: type=1400 audit(1756551000.460:286): avc:  denied  { getopt } for  pid=987 comm="syz.3.211" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   47.520101][  T994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=994 comm=syz.3.213
[   47.791737][ T1020] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   47.791764][ T1020] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90
[   48.012289][  T941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.032363][  T941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.045903][   T45] usb 3-1: Cannot set autoneg
[   48.050800][   T45] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   48.067145][   T45] usb 3-1: USB disconnect, device number 16
[   48.083070][ T1043] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false
[   48.083065][ T1044] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false
[   48.297296][ T1074] syz.3.239 uses obsolete (PF_INET,SOCK_PACKET)
[   48.364508][   T36] kauditd_printk_skb: 7 callbacks suppressed
[   48.364526][   T36] audit: type=1400 audit(2000000000.250:294): avc:  denied  { ioctl } for  pid=1072 comm="syz.3.239" path="socket:[7916]" dev="sockfs" ino=7916 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   48.402032][   T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[   48.538717][ T1098] bridge0: port 1(syz_tun) entered blocking state
[   48.545205][ T1098] bridge0: port 1(syz_tun) entered disabled state
[   48.551677][ T1098] syz_tun: entered allmulticast mode
[   48.557450][ T1098] syz_tun: entered promiscuous mode
[   48.562755][ T1098] bridge0: port 1(syz_tun) entered blocking state
[   48.565481][   T45] usb 3-1: config 243 has an invalid interface number: 255 but max is 0
[   48.569202][ T1098] bridge0: port 1(syz_tun) entered forwarding state
[   48.578178][   T45] usb 3-1: config 243 has no interface number 0
[   48.597804][   T45] usb 3-1: too many endpoints for config 243 interface 255 altsetting 255: 48, using maximum allowed: 30
[   48.629625][   T45] usb 3-1: config 243 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[   48.643254][   T45] usb 3-1: config 243 interface 255 has no altsetting 0
[   48.651974][   T45] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd
[   48.661377][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.669467][   T45] usb 3-1: Product: syz
[   48.673665][   T45] usb 3-1: Manufacturer: syz
[   48.675856][ T1103] netlink: 'syz.3.249': attribute type 25 has an invalid length.
[   48.678387][   T45] usb 3-1: SerialNumber: syz
[   48.718099][   T36] audit: type=1400 audit(2000000000.600:295): avc:  denied  { ioctl } for  pid=1107 comm="syz.3.252" path="socket:[6808]" dev="sockfs" ino=6808 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   48.780715][ T1111] fuse: Bad value for 'fd'
[   48.891885][   T36] audit: type=1400 audit(2000000000.770:296): avc:  denied  { mounton } for  pid=1123 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   48.920989][   T36] audit: type=1400 audit(2000000000.800:297): avc:  denied  { write } for  pid=1040 comm="syz.2.228" path="socket:[8072]" dev="sockfs" ino=8072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   48.931062][   T45] usb 3-1: USB disconnect, device number 17
[   48.958817][   T46] bridge_slave_1: left allmulticast mode
[   48.965549][   T46] bridge_slave_1: left promiscuous mode
[   48.971291][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.981487][   T46] bridge_slave_0: left allmulticast mode
[   48.987348][   T46] bridge_slave_0: left promiscuous mode
[   48.993046][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.061803][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.068997][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.076168][ T1123] bridge_slave_0: entered allmulticast mode
[   49.082464][ T1123] bridge_slave_0: entered promiscuous mode
[   49.088919][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.096003][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.103073][ T1123] bridge_slave_1: entered allmulticast mode
[   49.109485][ T1123] bridge_slave_1: entered promiscuous mode
[   49.128452][   T46] veth1_macvtap: left promiscuous mode
[   49.134076][   T46] veth0_vlan: left promiscuous mode
[   49.217200][ T1135] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   49.224412][ T1135] rust_binder: 1135 RLIMIT_NICE not set
[   49.233034][   T45] rust_binder: 1134: removing orphan mapping 0:4256
[   49.269602][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.276792][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.284122][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.291232][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.320507][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.328748][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.338310][  T328] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.345396][  T328] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.355453][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.362566][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.409106][ T1123] veth0_vlan: entered promiscuous mode
[   49.415708][ T1159] overlayfs: conflicting options: userxattr,metacopy=on
[   49.429568][ T1157] netlink: 108 bytes leftover after parsing attributes in process `syz.0.264'.
[   49.434854][ T1158] overlayfs: conflicting options: userxattr,metacopy=on
[   49.444340][ T1123] veth1_macvtap: entered promiscuous mode
[   49.459395][ T1159] tipc: Started in network mode
[   49.468707][ T1159] tipc: Node identity , cluster identity 4711
[   49.475504][ T1159] tipc: Failed to obtain node identity
[   49.483527][ T1159] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[   49.493820][ T1158] tipc: Started in network mode
[   49.498816][ T1158] tipc: Node identity , cluster identity 4711
[   49.505308][ T1158] tipc: Failed to obtain node identity
[   49.510789][ T1158] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[   49.550557][ T1167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'.
[   49.559765][ T1167] erspan0: default FDB implementation only supports local addresses
[   49.569956][ T1167] netlink: 'syz.4.255': attribute type 4 has an invalid length.
[   49.578337][   T36] audit: type=1400 audit(2000000001.460:298): avc:  denied  { setopt } for  pid=1168 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   49.599188][ T1167] netlink: 'syz.4.255': attribute type 4 has an invalid length.
[   49.618473][   T36] audit: type=1400 audit(2000000001.500:299): avc:  denied  { create } for  pid=1170 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   49.691402][   T36] audit: type=1400 audit(2000000001.570:300): avc:  denied  { map } for  pid=1184 comm="syz.2.272" path="socket:[8317]" dev="sockfs" ino=8317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   49.854340][  T329] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   49.954287][  T660] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[   50.005383][  T329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   50.016489][  T329] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   50.025731][  T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.041128][  T329] usb 5-1: config 0 descriptor??
[   50.120913][  T660] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   50.131416][  T660] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   50.141306][  T660] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[   50.150861][  T660] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   50.159079][  T660] usb 3-1: SerialNumber: syz
[   50.172509][  T660] usb 3-1: 0:2 : does not exist
[   50.191074][ T1210] rust_binder: inc_ref_done called when no active inc_refs
[   50.204841][ T1212] SELinux: security_context_str_to_sid () failed with errno=-22
[   50.237727][ T1217] rust_binder: Error while translating object.
[   50.237759][ T1217] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   50.243988][ T1217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:305
[   50.260763][ T1219] netlink: 100 bytes leftover after parsing attributes in process `syz.3.282'.
[   50.280602][ T1222] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   50.312960][ T1228] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=1228 comm=syz.3.284
[   50.435723][   T36] audit: type=1400 audit(2000000002.320:301): avc:  denied  { listen } for  pid=1230 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   50.451099][  T329] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor
[   50.475225][  T329] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input8
[   50.569755][  T329] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[   50.626623][  T329] usb 3-1: USB disconnect, device number 18
[   50.719060][ T1242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.731272][ T1242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.739844][   T36] audit: type=1400 audit(2000000002.620:302): avc:  denied  { create } for  pid=1241 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   50.844242][   T36] audit: type=1400 audit(2000000002.720:303): avc:  denied  { read } for  pid=1245 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   50.866141][ T1265] 9pnet_fd: Insufficient options for proto=fd
[   50.965652][  T660] usb 5-1: USB disconnect, device number 2
Stopping sshd: stopped /usr/sbin/sshd (pid 200)
OK
Stopping crond: stopped /usr/sbin/crond (pid 193)
OK
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 147)
Stopping network: [   51.349302][ T1300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=1300 comm=syz.0.303
OK[   51.361887][ T1300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=1300 comm=syz.0.303

Stopping iptables: [   51.411767][   T46] bridge_slave_1: left allmulticast mode
OK
[   51.421810][   T46] bridge_slave_1: left promiscuous mode
[   51.427789][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.441850][ T1306] rust_binder: Error while translating object.
[   51.441907][ T1306] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   51.450477][   T46] bridge_slave_0: left allmulticast mode
Stopping system message bus: [   51.465936][ T1306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:332
[   51.469036][   T46] bridge_slave_0: left promiscuous mode
[   51.483976][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.581811][ T1319] netlink: 'syz.4.309': attribute type 46 has an invalid length.
[   51.605590][ T1319] netlink: 44 bytes leftover after parsing attributes in process `syz.4.309'.
done
[   51.667338][ T1327] binder: Unknown parameter '���E��l�ᩍ���V�^VN�#��P@�s�^a��s'!ikJ����sO!~`�\'���S��vA$�q���@�!::h��`x�5�9�%B'
[   51.707943][   T46] veth1_macvtap: left promiscuous mode
[   51.726271][   T46] veth0_vlan: left promiscuous mode
Stopping klogd: [   51.919547][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.927670][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.941007][ T1328] bridge_slave_0: entered allmulticast mode
OK
[   51.950214][ T1328] bridge_slave_0: entered promiscuous mode
Stopping acpid: [   51.972965][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.988155][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.997958][ T1328] bridge_slave_1: entered allmulticast mode
[   52.004540][ T1328] bridge_slave_1: entered promiscuous mode
[   52.084241][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.091360][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.098792][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.105869][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.171909][ T1394] rust_binder: 27: no such ref 3
[   52.177158][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.185464][ T1391] 9pnet_fd: Insufficient options for proto=fd
[   52.191735][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.202130][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.209239][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.221739][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.228854][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.260444][ T1328] veth0_vlan: entered promiscuous mode
[   52.271646][ T1328] veth1_macvtap: entered promiscuous mode
[   52.631706][ T1411] loop5: detected capacity change from 0 to 16384
[   52.667695][ T1416] 9pnet_fd: Insufficient options for proto=fd
[   52.762526][ T1426] rust_binder: Error in use_page_slow: ESRCH
[   52.762543][ T1426] rust_binder: use_range failure ESRCH
[   52.768856][ T1426] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[   52.781311][ T1426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   52.782421][ T1426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:13
[   52.792954][ T1426] rust_binder: 13: no such ref 1
[   52.807524][ T1426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:13
[   52.870549][  T328] Bluetooth: hci0: Frame reassembly failed (-84)
[   52.959889][ T1462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.974557][ T1462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
OK
Stopping syslogd: stopped /sbin/syslogd (pid 91)
OK
[   53.108481][   T10] usb 5-1: new low-speed USB device number 3 using dummy_hcd
umount: can't remount debugfs read-only
[   53.305579][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[   53.314042][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[   53.342498][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[   53.362836][   T10] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   53.379799][   T36] kauditd_printk_skb: 34 callbacks suppressed
[   53.379817][   T36] audit: type=1400 audit(2000000005.260:338): avc:  denied  { getopt } for  pid=1482 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   53.389424][   T10] usb 5-1: string descriptor 0 read error: -22
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Connection to 10.128.1.162 closed by remote host.
Sent SIGTERM to all processes
[   53.462430][   T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   53.495326][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.504294][   T36] audit: type=1400 audit(2000000005.310:339): avc:  denied  { write } for  pid=281 comm="syz-executor" path="pipe:[1676]" dev="pipefs" ino=1676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   53.560912][   T10] usb 5-1: can't set config #1, error -71
[   53.575273][   T10] usb 5-1: USB disconnect, device number 3
[   53.598333][  T329] usb 1-1: USB disconnect, device number 4
[   53.696452][   T13] bridge_slave_1: left allmulticast mode
[   53.702248][   T13] bridge_slave_1: left promiscuous mode
[   53.708132][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.739604][   T13] bridge_slave_0: left allmulticast mode
[   53.745586][   T13] bridge_slave_0: left promiscuous mode
[   53.751246][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.899203][  T627] bridge0: port 1(syz_tun) entered disabled state
[   53.906889][  T627] syz_tun (unregistering): left allmulticast mode
[   53.913337][  T627] syz_tun (unregistering): left promiscuous mode
[   53.919755][  T627] bridge0: port 1(syz_tun) entered disabled state
[   54.008876][   T13] veth1_macvtap: left promiscuous mode
[   54.014496][   T13] veth0_vlan: left promiscuous mode
[   54.366810][   T13] bridge_slave_1: left allmulticast mode
[   54.372477][   T13] bridge_slave_1: left promiscuous mode
[   54.378124][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.385712][   T13] bridge_slave_0: left allmulticast mode
[   54.391352][   T13] bridge_slave_0: left promiscuous mode
[   54.397123][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.404987][   T13] bridge_slave_1: left allmulticast mode
[   54.410646][   T13] bridge_slave_1: left promiscuous mode
[   54.416431][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.424079][   T13] bridge_slave_0: left allmulticast mode
[   54.429789][   T13] bridge_slave_0: left promiscuous mode
[   54.435476][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
Sent SIGKILL to all processes
Requesting system poweroff
[   54.637633][   T13] veth1_macvtap: left promiscuous mode
[   54.643161][   T13] veth0_vlan: left promiscuous mode
[   54.648628][   T13] veth1_macvtap: left promiscuous mode
[   54.654145][   T13] veth0_vlan: left promiscuous mode
[   54.894422][  T405] Bluetooth: hci0: command 0x1003 tx timeout
[   54.894462][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   55.593382][ T1489] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[   55.600203][ T1489] ACPI: PM: Preparing to enter system sleep state S5
[   55.607164][ T1489] kvm: exiting hardware virtualization
[   55.612663][ T1489] reboot: Power down
serialport: VM disconnected.